A Scrutiny of Honeyword Generation Methods: Remarks on Strengths and Weaknesses Points

Abstract

Honeyword system is a successful password cracking detection system. Simply the honeywords are (False passwords) that are accompanied to the sugarword (Real password). Honeyword system aims to improve the security of hashed passwords by facilitating the detection of password cracking. The password database will have many honeywords for every user in the system. If the adversary uses a honeyword for login, a silent alert will indicate that the password database might be compromised. All previous studies present a few remarks on honeyword generation methods for max two preceding methods only. So, the need for one that lists all preceding researches with their weaknesses is shown. This work presents all generation methods then lists the strengths and weaknesses of 26 ones. In addition, it puts 32 remarks that highlight their strengths and weaknesses points. This research has proved that every honeyword generation method has many weaknesses points.

Honeywords Generation Technique based on Meerkat Clan Algorithm and WordNet

“…Pseudo-passwords are deliberately included in databases alongside genuine passwords with the aim of augmenting the efficacy of password security mechanisms. Honeywords are intentionally designed to hinder unauthorized access attempts and confuse malicious actors in their efforts to differentiate authentic passwords from fraudulent ones [9]. The primary aim of this research is to develop honeywords, which are deliberately crafted passwords that closely mimic authentic passwords, with the intention of enhancing the complexity for prospective adversaries.…”

Harmony Search for Security Enhancement

“…It could allocate stability between exploitation and exploration [12]. Random search, HMCR (harmony memory considering rate), and PAR (pitch adjusting rate) can be considered as the three operators which make up the HSA performance process [13].…”