首页> 外文期刊>IEEE transactions on dependable and secure computing >Zero-Sum Password Cracking Game: A Large-Scale Empirical Study on the Crackability, Correlation, and Security of Passwords
【24h】

Zero-Sum Password Cracking Game: A Large-Scale Empirical Study on the Crackability, Correlation, and Security of Passwords

机译:零和密码破解游戏:密码可破解性,相关性和安全性的大规模实证研究

获取原文
获取原文并翻译 | 示例
       

摘要

In this paper, we conduct a large-scale study on the crackability, correlation, and security of 145 million real world passwords, which were leaked from several popular Internet services and applications. To the best of our knowledge, this is the largest empirical study that has been conducted. Specifically, we first evaluate the crackability of 145 million real world passwords against 6+ state-of-the-art password cracking algorithms in multiple scenarios. Second, we examine the effectiveness and soundness of popular commercial password strength meters (e.g., Google, QQ) and the security impacts of username/email leakage on passwords. Finally, we discuss the implications of our results, analysis, and findings, which are expected to help both password users and system administrators to gain a deeper understanding of the vulnerability of real passwords against state-of-the-art password cracking algorithms, as well as to shed light on future password security research topics.
机译:在本文中,我们对1.45亿个现实世界密码的可破解性,相关性和安全性进行了大规模研究,这些密码是从几种流行的Internet服务和应用程序中泄露的。据我们所知,这是已进行的最大的经验研究。具体来说,我们首先在多种情况下针对6种以上的最新密码破解算法评估了1.45亿个现实世界密码的可破解性。其次,我们研究了流行的商用密码强度计(例如Google,QQ)的有效性和可靠性,以及用户名/电子邮件泄漏对密码的安全性影响。最后,我们讨论了我们的结果,分析和发现的含义,它们有望帮助密码用户和系统管理员更深入地了解真实密码针对最新密码破解算法的漏洞,例如并阐明未来的密码安全性研究主题。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号