Measuring Real-World Accuracies and Biases in Modeling Password Guessability

No abstract is available for this paper.

• Publication year

  2015

• Venue

  USENIX Security Symposium

• Publication date

  2015-08-12

• Fields of study

  Computer Science

• Identifiers

  No identifiers available.

• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Modeling the Adversary to Evaluate Password Strength With Limited Samples

  2016influential reference
• OMEN: Faster Password Guessing Using an Ordered Markov Enumerator

  2015cited by this paper
• "I Added '!' at the End to Make It Secure": Observing Password Creation in the Lab

  2015cited by this paper
• Telepathwords: Preventing Weak Passwords by Reading Users' Minds

  2014cited by this paper
• The Password Life Cycle: User Behaviour in Managing Passwords

  2014cited by this paper
• Electronic Authentication Guideline

  2014influential reference
• Can long passwords be secure and usable?

  2014influential reference
• From Very Weak to Very Strong: Analyzing Password-Strength Meters

  2014influential reference
• The Tangled Web of Password Reuse

  2014influential reference
• On Semantic Patterns of Passwords and their Security Impact

  2014cited by this paper
• A Study of Probabilistic Password Models

  2014influential reference
• Usage of botnets for high speed MD5 hash cracking

  2013cited by this paper
• Usage of botnets for high speed MD5 hash cracking

  2013cited by this paper
• Effect of grammar on security of long passwords

  2013influential reference
• Measuring password guessability for an entire university

  2013influential reference
• When Privacy meets Security: Leveraging personal information for password cracking

  2013cited by this paper
• A study of user password strategy for multiple accounts

  2013cited by this paper
• On the ecological validity of a password study

  2013influential reference
• Statistical Metrics for Individual Password Strength

  2012influential reference
• Guess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms

  2012cited by this paper
• The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes

  2012cited by this paper
• How Does Your Password Measure Up? The Effect of Strength Meters on Password Creation

  2012cited by this paper
• The Science of Guessing: Analyzing an Anonymized Corpus of 70 Million Passwords

  2012influential reference
• Adaptive Password-Strength Meters from Markov Models

  2012influential reference
• PASSWORD CRACKING BASED ON LEARNED PATTERNS FROM DISCLOSED PASSWORDS

  2012influential reference
• Of passwords and people: measuring the effect of password-composition policies

  2011cited by this paper
• Analyzing Password Strength and Efficient Password Cracking

  2011cited by this paper
• Testing metrics for password creation policies by attacking large sets of revealed passwords

  2010influential reference
• The security of modern password expiration: an algorithmic framework and empirical analysis

  2010influential reference
• Password Strength: An Empirical Analysis

  2010influential reference
• STRONGER KEY DERIVATION VIA SEQUENTIAL MEMORY-HARD FUNCTIONS

  2009cited by this paper
• Password Cracking Using Probabilistic Context-Free Grammars

  2009cited by this paper
• Improving text passwords through persuasion

  2008influential reference
• Fast dictionary attacks on passwords using time-space tradeoff

  2005cited by this paper
• A future-adaptive password scheme

  1999cited by this paper
• Password security: a case history

  1979cited by this paper
• The Advanced Computing Systems Association a Future-adaptable Password Scheme a Future-adaptable Password Scheme

  year unknowncited by this paper

• PGMaP: Password generation based on mask prediction

  2026cites this paper
• Modernizing Password Evaluation Through Offensive Cybersecurity Technique

  2025cites this paper
• Clúster de computadoras open source para Password Cracking

  2025influential citation
• AdaptAuth: Multi-Layered Behavioral and Credential Analysis for a Secure and Adaptive Authentication Framework for Password Security

  2025cites this paper
• Using Parallel Techniques to Accelerate PCFG-Based Password Cracking Attacks

  2025cites this paper
• MoPE: A Mixture of Password Experts for Improving Password Guessing

  2025cites this paper
• Secure Graphical Password Authentication with Blockchain Integration

  2025cites this paper
• Five Word Password Composition Policy

  2025cites this paper
• Evaluating the Strength and Availability of Multilingual Passphrase Authentication

  2025cites this paper
• RankGuess: Password Guessing Using Adversarial Ranking

  2025cites this paper
• Open Sesame! On the Security and Memorability of Verbal Passwords

  2025cites this paper
• Adaptive Password Policies: A New Paradigm for Cyber Resilience in Modern Threat Landscape

  2025cites this paper
• Robust Password Security: A Method in Preventing Guessing Attacks and Authenticating Users

  2025cites this paper
• Understanding how users choose passwords: analysis and best practices

  2024cites this paper
• “Protect Me Tomorrow”: Commitment Nudges to Remedy Compromised Passwords

  2024cites this paper
• PassREfinder: Credential Stuffing Risk Prediction by Representing Password Reuse between Websites on a Graph

  2024cites this paper
• Is Crowdsourcing a Puppet Show? Detecting a New Type of Fraud in Online Platforms

  2024cites this paper
• Online Authentication Habits of Indian Users

  2024cites this paper
• Special Characters Usage and Its Effect on Password Security

  2024cites this paper
• Measuring the Prevalence of Password Manager Issues Using In-Situ Experiments

  2024cites this paper
• GuessFuse: Hybrid Password Guessing With Multi-View

  2024influential citation
• Improving Users' Passwords with DPAR: a Data-driven Password Recommendation System

  2024influential citation
• SoK: Web Authentication in the Age of End-to-End Encryption

  2024cites this paper
• PassTSL: Modeling Human-Created Passwords Through Two-Stage Learning

  2024cites this paper
• Universal Neural-Cracking-Machines: Self-Configurable Password Models from Auxiliary Data

  2023influential citation
• “It's a Fair Game”, or Is It? Examining How Users Navigate Disclosure Risks and Benefits When Using LLM-Based Conversational Agents

  2023cites this paper
• Password Guessing Using Random Forest

  2023influential citation
• Pass2Edit: A Multi-Step Generative Model for Guessing Edited Passwords

  2023cites this paper
• The Impact of Exposed Passwords on Honeyword Efficacy

  2023cites this paper
• A Two-Decade Retrospective Analysis of a University's Vulnerability to Attacks Exploiting Reused Passwords

  2023cites this paper
• Confident Monte Carlo: Rigorous Analysis of Guessing Curves for Probabilistic Password Models

  2023influential citation
• No Single Silver Bullet: Measuring the Accuracy of Password Strength Meters

  2023influential citation
• “Someone Definitely Used 0000”: Strategies, Performance, and User Perception of Novice Smartphone-Unlock PIN-Guessers

  2023cites this paper
• PiXi: Password Inspiration by Exploring Information

  2023influential citation
• MASCARA : Systematically Generating Memorable And Secure Passphrases

  2023influential citation
• Hybrid password meters for more secure passwords – a comprehensive study of password meters including nudges and password information

  2022cites this paper
• Bulletin of Electrical Engineering and Informatics

  2022cites this paper
• PESrank: An Explainable online password strength estimator

  2022cites this paper
• DALock: Password Distribution-Aware Throttling

  2022cites this paper
• PasswordTensor: Analyzing and explaining password strength using tensor decomposition

  2022cites this paper
• KGP Meter: Communicating Kin Genomic Privacy to the Masses

  2022cites this paper
• Cost-Asymmetric Memory Hard Password Hashing

  2022cites this paper
• Password policies of most top websites fail to follow best practices

  2022influential citation
• #Segments: A Dominant Factor of Password Security to Resist against Data-driven Guessing

  2022cites this paper
• AvoidPwd: A mnemonic password generation strategy based on keyboard transformation

  2022cites this paper
• PassTCN-PPLL: A Password Guessing Model Based on Probability Label Learning and Temporal Convolutional Neural Network

  2022cites this paper
• Why Users (Don't) Use Password Managers at a Large Educational Institution

  2022cites this paper
• A Survey on Password Guessing

  2022cites this paper
• GRABLOK: A Novel Graphical Password Authentication Utilising Blockchain Technology

  2022cites this paper
• PII-PSM: A New Targeted Password Strength Meter Using Personally Identifiable Information

  2022cites this paper
• Leet Usage and Its Effect on Password Security

  2021cites this paper
• Machine Learning–based Cyber Attacks Targeting on Controlled Information

  2021cites this paper
• IoT Metrics and Automation for Security Evaluation

  2021cites this paper
• A Large-Scale Analysis of the Semantic Password Model and Linguistic Patterns in Passwords

  2021cites this paper
• Superword: A honeyword system for achieving higher security goals

  2021cites this paper
• Digit Semantics based Optimization for Practical Password Cracking Tools

  2021cites this paper
• On the Security of Smartphone Unlock PINs

  2021cites this paper
• Chunk-Level Password Guessing: Towards Modeling Refined Password Composition Representations

  2021cites this paper
• RLS-PSM: A Robust and Accurate Password Strength Meter Based on Reuse, Leet and Separation

  2021cites this paper
• Understanding Offline Password-Cracking Methods: A Large-Scale Empirical Study

  2021cites this paper
• Towards a Rigorous Statistical Analysis of Empirical Password Datasets

  2021cites this paper
• "It's Stored, Hopefully, on an Encrypted Server": Mitigating Users' Misconceptions About FIDO2 Biometric WebAuthn

  2021influential citation
• Tipsy: How to Correct Password Typos Safely

  2021cites this paper
• Prioritizing security over usability: Strategies for how people choose passwords

  2021cites this paper
• A Password Meter without Password Exposure

  2021influential citation
• DAHash: Distribution Aware Tuning of Password Hashing Costs

  2021influential citation
• Password guessers under a microscope: an in-depth analysis to inform deployments

  2020cites this paper
• How Do We Create a Fantabulous Password?

  2020influential citation
• Convergence of Password Guessing to Optimal Success Rates †

  2020cites this paper
• DALock: Distribution Aware Password Throttling

  2020influential citation
• Skeptic: Automatic, Justified and Privacy-Preserving Password Composition Policy Selection

  2020cites this paper
• Etudes en sécurité informatique

  2020cites this paper
• Nudging personalized password policies by understanding users' personality

  2020cites this paper
• Practical Recommendations for Stronger, More Usable Passwords Combining Minimum-strength, Minimum-length, and Blocklist Requirements

  2020cites this paper
• Information Signaling: A Counter-Intuitive Defense Against Password Cracking

  2020cites this paper
• Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries

  2020influential citation
• Characterizing and Detecting Online Deception via Data-Driven Methods

  2020cites this paper
• MoiPrivacy: Design and Evaluation of a Personal Password Meter

  2020cites this paper
• Evaluating the Accuracy of Password Strength Meters using Off-The-Shelf Guessing Attacks

  2020cites this paper
• Evaluating Password Strength Meters and Password Composition Policies using Guessing Attacks

  2020influential citation
• Password Strength Signaling: A Counter-Intuitive Defense Against Password Cracking

  2020influential citation
• Evaluating the strength of a multilingual passphrase policy

  2020cites this paper
• This PIN Can Be Easily Guessed: Analyzing the Security of Smartphone Unlock PINs

  2020cites this paper
• Interpretable Probabilistic Password Strength Meters via Deep Learning

  2020cites this paper
• Advancing user authentication and access management

  2019cites this paper
• An Energy-Efficient Accelerator Based on Hybrid CPU-FPGA Devices for Password Recovery

  2019cites this paper
• Giving State to the Stateless: Augmenting Trustworthy Computation with Ledgers

  2019cites this paper
• eUASBP: enhanced user authentication scheme based on bilinear pairing

  2019cites this paper
• Studying Passwords to Create Domain-Specific Blacklists

  2019cites this paper
• A Next Generation Hybrid Scheme Mobile Graphical Authenticator

  2019cites this paper
• Password Strength Measurement without Password Disclosure

  2019cites this paper
• Study on Massive-Scale Slow-Hash Recovery Using Unified Probabilistic Context-Free Grammar and Symmetrical Collaborative Prioritization with Parallel Machines

  2019cites this paper
• Practical security guidance for real-world users and designers of authentication systems Thesis Proposal

  2019cites this paper
• Recurrent Neural Network Based Password Generation for Group Attribute Context-Ware Applications

  2019cites this paper
• Improving Password Guessing via Representation Learning

  2019influential citation
• On the null relationship between personality types and passwords

  2019cites this paper
• An Explainable Password Strength Meter Addon via Textual Pattern Recognition

  2019cites this paper
• Reasoning Analytically about Password-Cracking Software

  2019cites this paper
• Privacy Against Brute-Force Inference Attacks

  2019cites this paper
• Password Strength Estimators Trained on the Leaked Password Lists

  2019cites this paper