• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Integration >PUFPass: A password management mechanism based on software/hardware codesign
【24h】

PUFPass: A password management mechanism based on software/hardware codesign

机译：PUFPass：基于软件/硬件代码签名的密码管理机制

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Secure passwords need high entropy, but are difficult for users to remember. Password managers minimize the memory burden by storing site passwords locally or generating secure site passwords from a master password through hashing or key stretching. Unfortunately, they are threatened by the single point of failure introduced by the master password which is vulnerable to various attacks such as offline attack and shoulder surfing attack. To handle these issues, this paper proposes the PUFPass, a secure password management mechanism based on software/hardware codesign. By introducing the hardware primitive, Physical Unclonable Function (PUF), into PUFPass, the random physical disorder is exploited to strengthen site passwords. An illustration of PUFPass in the Android operating system is given. PUFPass is evaluated from aspects of both security and preliminary usability. The security of the passwords is evaluated using a compound heuristic algorithm based PUF attack software and an open source password cracking software, respectively. Finally, PUFPass is compared with other password management mechanisms using the Usability-Deployability-Security (UDS) framework. The results show that PUFPass has great advantages in security while maintaining most benefits in usability.
机译：安全密码需要较高的熵，但是用户很难记住。密码管理器通过在本地存储站点密码或通过哈希或密钥扩展从主密码生成安全站点密码来最大程度地减少内存负担。不幸的是，它们受到主密码引入的单点故障的威胁，该密码易受脱机攻击和肩膀冲浪攻击等各种攻击的攻击。为了解决这些问题，本文提出了PUFPass，一种基于软件/硬件代码签名的安全密码管理机制。通过将硬件原语物理不可克隆功能（PUF）引入PUFPass，可利用随机物理混乱来增强站点密码。给出了Android操作系统中的PUFPass的说明。从安全性和初步可用性两方面评估PUFPass。分别使用基于复合启发式算法的PUF攻击软件和开源密码破解软件来评估密码的安全性。最后，使用可用性，部署性，安全性（UDS）框架将PUFPass与其他密码管理机制进行比较。结果表明，PUFPass在安全性方面具有很大的优势，同时在可用性方面保持了大多数优势。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号