Moore's curse on textual passwords

Brumen, Boštjan; Taneski, Viktor

doi:10.1109/mipro.2015.7160486

Cited by 7 publications

(2 citation statements)

References 35 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Takrat so se uveljavila, ker jih je bilo enostavno implementirati, si jih je bilo mogoče zlahka zapomniti, hkrati pa so zagotavljala tudi zadostno varnost. Ker pa se je moč računalniške obdelave z leti povečevala (v skladu z Moorovim zakonom [7]), je kratka in preprosta gesla postopoma postajalo vse lažje razbiti. Čeprav so strokovnjaki za varnost kot odgovor na vse pogostejše zlorabe podatkov zagovarjali uporabo daljših in bolj zapletenih gesel, je pomnjenje le-teh postala težavna, kar je uporabnike spodbudilo, da se zatečejo k slabim praksam upravljanja z gesli.…”

Section: Uvodunclassified

Primerjava varnosti in pomnjenja gesel: Ugotavljanje uporabnosti tradicionalne metode in metode igrifikacije

Bošnjak

Taneski

2022

View full text Add to dashboard Cite

Besedilna gesla so dandanes še vedno najbolj pogost mehanizem avtentikacije, predvsem zaradi enostavne uporabe in implementacije, ter lažje pomljivosti. Kljub številnim prednostim pa so s postopnim povečanjem procesorske moči računalnikov postala dovzetna za številne napade, zaradi česar se je pojavila potreba po daljših, bolj varnih, ter težje zapomljivih geslih. Posledično so bile raziskane številne alternativne shemeavtentikacije, med drugim tudi grafična gesla. Študija, ki so jo leta 2017 izvedli McLennan in sodelavci, je predstavila novo shemo grafične avtentikacije, imenovano Game Changer Password System (GCPS), v sklopu katere so znaki gesla predstavljeni s položaji igralnih figuric. č eprav avtorji ocenjujejo uporabnost sheme kot obetavno, rezultati študije ne dosegajo zadostne stopnje veljavnosti, saj ne upoštevajo zahtevane varnosti gesel. Poleg tega so avtorji ugotovili, da je potrebno rezultate primerjati tudi s tradicionalnimi gesli. V tej raziskavi smo preučili pomljivost in čas vnosa besedilnih in GCPS gesel, ter rezultate med obema metodama statistično primerjali. Pokazali smo, da so besedilna gesla boljša tako glede pomljivosti, kot tudi hitrosti vnašanja, kar opravičuje njihovo uveljavljenost kot osnovni mehanizem avtentikacije.

show abstract

Section: Uvodunclassified

Primerjava varnosti in pomnjenja gesel: Ugotavljanje uporabnosti tradicionalne metode in metode igrifikacije

Bošnjak

Taneski

2022

View full text Add to dashboard Cite

show abstract

“…Potent 11 corresponds to 11 characters, yielding the total search space size of 5.7×10 21 (equivalent to an 11-character random password). Passwords having 11 and beyond (independent and randomly drawn) characters are considered safe (Brumen and Taneski, 2015); 8-character passwords with a search space of 6.6 × 10 15 are a minimum (Grassi et al, 2017).…”

Section: The Layered "Battleship" Game Changer Password Systemmentioning

confidence: 99%

Layered Battleship Game Changer Password System

Brumen,

Crepulja,

Bošnjak

2022

Informatica

View full text Add to dashboard Cite

The paper presents a secure and usable variant of the Game Changer Password System, first proposed by McLennan, Manning, and Tuft. Unlike the initial proposal based on inadequately secure Monopoly and Chess, we propose an improved version based on a layered “Battleship” game resilient against brute force and dictionary attacks. Since the initially proposed scheme did not check for the memorability and usability of a layered version, we conducted an experiment on the usability and memorability aspects. Surprisingly, layered passwords are just as memorable as single ones and, with an 80% recall rate, comparable to other graphical password systems. The claim that memorability is the most vital aspect of game-based password systems cannot be disproved. However, the experiment revealed that the usability decreased to such a low level that users felt less inclined to use such a system daily or recommend it to others. Our study has once again shown that optimizing the password security–memorability–usability triangle is hard to achieve without compromising one of its cornerstones. However, the layered Game Changer Password System can be used in specific applications where usability is of secondary importance, while security and memorability augmented by its graphical interface are at the forefront.

show abstract

Beyond Passwords: Enforcing Username Security as the First Line of Defense

Fandakly

Caporusso

2019

Advances in Intelligent Systems and Computing

View full text Add to dashboard Cite

Moore's curse on textual passwords

Cited by 7 publications

References 35 publications

Primerjava varnosti in pomnjenja gesel: Ugotavljanje uporabnosti tradicionalne metode in metode igrifikacije

Primerjava varnosti in pomnjenja gesel: Ugotavljanje uporabnosti tradicionalne metode in metode igrifikacije

Layered Battleship Game Changer Password System

Beyond Passwords: Enforcing Username Security as the First Line of Defense

Contact Info

Product

Resources

About