A survey exploring open source Intelligence for smarter password cracking

Abstract From the end of the last century to date, consumers are increasingly living their lives online. In today’s world, the average person spends a significant proportion of their time connecting with people online through multiple platforms. This online activity results in people freely sharing an increasing amount of personal information – as well as having to manage how they share that information. For law enforcement, this corresponds to a slew of new sources of digital evidence valuable for digital forensic investigation. A combination of consumer level encryption becoming default on personal computing and mobile devices and the need to access information stored with third parties has resulted in a need for robust password cracking techniques to progress lawful investigation. However, current password cracking techniques are expensive, time-consuming processes that are not guaranteed to be successful in the time-frames common for investigations. In this paper, the potential for Open Source Intelligence (OSINT) being leveraged for more efficient password cracking is explored. A comprehensive survey of the literature on password strength, password cracking, and OSINT is outlined, and the law enforcement challenges surrounding these topics are discussed. Additionally, an analysis on password structure as well as demographic factors influencing password selection is presented. Finally, the potential impact of OSINT to password cracking by law enforcement is discussed.

• Publication year

  2020

• Venue

  Digital Investigation. The International Journal of Digital Forensics and Incident Response

• Publication date

  2020-12-01

• Fields of study

  Law, Computer Science

• Identifiers
  DOI 10.1016/j.fsidi.2020.301075
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Our world in data

  2022influential reference
• Cyber Security: Effects of Penalizing Defenders in Cyber-Security Games via Experimentation and Computational Modeling

  2020cited by this paper
• SoK: exploring the state of the art and the future potential of artificial intelligence in digital forensic investigation

  2020cited by this paper
• Smarter Password Guessing Techniques Leveraging Contextual Information and OSINT

  2020cited by this paper
• Adaptation of password strength estimators to a non-English environment - the Czech experience

  2020cited by this paper
• Crowdsourcing Based Description of Urban Emergency Events Using Social Media Big Data

  2020cited by this paper
• The password is dead, long live the password - A laboratory study on user perceptions of authentication schemes

  2020cited by this paper
• Nudging personalized password policies by understanding users' personality

  2020cited by this paper
• IoT Ignorance is Digital Forensics Research Bliss: A Survey to Understand IoT Forensics Definitions, Challenges and Future Research Directions

  2019cited by this paper
• Inside out - A study of users' perceptions of password memorability and recall

  2019cited by this paper
• Systematic Overview of Password Security Problems

  2019cited by this paper
• A Systematic Survey on Cloud Forensics Challenges, Solutions, and Future Directions

  2019cited by this paper
• Extremist Propaganda Tweet Classification with Deep Learning in Realistic Scenarios

  2019cited by this paper
• Empirical study on lexical sentiment in passwords from Chinese websites

  2019cited by this paper
• The Password Literacy in North Macedonia: A Case Study

  2019cited by this paper
• AI-Assisted Message Processing for the Netherlands National Police

  2019cited by this paper
• A Survey of Electromagnetic Side-Channel Attacks and Discussion on their Case-Progressing Potential for Digital Forensics

  2019cited by this paper
• On password behaviours and attitudes in different populations

  2019cited by this paper
• Digital Forensics Basics

  2019cited by this paper
• From madness to wisdom: intelligence and the digital crowd

  2019cited by this paper
• Your culture is in your password: An analysis of a demographically-diverse password dataset

  2018cited by this paper
• New Technologies in Password Cracking Techniques

  2018cited by this paper
• Social engineering in cybersecurity: The evolution of a concept

  2018cited by this paper
• LPSE: Lightweight password-strength estimation for password meters

  2018cited by this paper
• The Evolution of Open Source Intelligence

  2018cited by this paper
• Open Source Intelligence (OSINT): An Oxymoron?

  2018cited by this paper
• British intelligence and Hitler’s empire in the Soviet Union, 1941–1945

  2018cited by this paper
• Digital forensic intelligence: Data subsets and Open Source Intelligence (DFINT+OSINT): A timely and cohesive mix

  2018cited by this paper
• Open Source Intelligence Methods and Tools

  2018cited by this paper
• Evaluation of Digital Forensic Process Models with Respect to Digital Forensics as a Service

  2017cited by this paper
• A New Multimodal Approach for Password Strength Estimation—Part II: Experimental Evaluation

  2017cited by this paper
• PassGAN: A Deep Learning Approach for Password Guessing

  2017cited by this paper
• Personal Information in Passwords and Its Security Implications

  2017cited by this paper
• Characterizing the semantics of passwords: The role of Pinyin for Chinese Netizens

  2017cited by this paper
• Reliability side-effects in Internet of Things application layer protocols

  2017cited by this paper
• On Password Strength: A Survey and Analysis

  2017cited by this paper
• British Intelligence and Hitler's Empire in the Soviet Union, 1941-1945

  2017cited by this paper
• Biometrics vs passwords: a modern version of the tortoise and the hare

  2017cited by this paper
• zxcvbn: Low-Budget Password Strength Estimation

  2016cited by this paper
• Link Prediction in Criminal Networks: A Tool for Criminal Intelligence Analysis

  2016cited by this paper
• Battling the digital forensic backlog through data deduplication

  2016cited by this paper
• A cyber forensics needs analysis survey: Revisiting the domain's needs a decade later

  2016cited by this paper
• The intersection between social media, crime, and digital forensics: #WhoDunIt?

  2016cited by this paper
• Current Challenges and Future Research Areas for Digital Forensic Investigation

  2016cited by this paper
• Internet of Things (IoT): Taxonomy of security attacks

  2016cited by this paper
• Police Use of Open Source Intelligence: The Longer Arm of Law

  2016cited by this paper
• Do Users' Perceptions of Password Security Match Reality?

  2016cited by this paper
• Understanding Password Choices: How Frequently Entered Passwords Are Re-used across Websites

  2016cited by this paper
• Refining Graphical Password Strength Meters for Android Phones

  2016cited by this paper
• NATO glossary of terms and definitions: proposta de tradução para português

  2015cited by this paper
• Digilantism: An Analysis of Crowdsourcing and the Boston Marathon Bombings

  2015cited by this paper
• OMEN: Faster Password Guessing Using an Ordered Markov Enumerator

  2015cited by this paper
• Open source intelligence, social media and law enforcement: Visions, constraints and critiques

  2015cited by this paper
• Taxonomy of Challenges for Digital Forensics

  2015cited by this paper
• Applying Social Media Intelligence for Predicting and Identifying On-line Radicalization and Civil Unrest Oriented Threats

  2015cited by this paper
• The Dawn of Social Intelligence (SOCINT)

  2015cited by this paper
• A Large-Scale Evaluation of High-Impact Password Strength Meters

  2015cited by this paper
• A Spoonful of Sugar?: The Impact of Guidance and Feedback on Password-Creation Behavior

  2015cited by this paper
• Next Gen PCFG Password Cracking

  2015cited by this paper
• SOCIAL MEDIA INTELLIGENCE: OPPORTUNITIES AND LIMITATIONS

  2015influential reference
• A Systematic Literature Review of Crowdsourcing Research from a Human Resource Management Perspective

  2015cited by this paper
• "I Added '!' at the End to Make It Secure": Observing Password Creation in the Lab

  2015cited by this paper
• Advanced social engineering attacks

  2015cited by this paper
• The Password Life Cycle: User Behaviour in Managing Passwords

  2014cited by this paper
• Hierarchy of users' web passwords: Perceptions, practices and susceptibilities

  2014cited by this paper
• Password Cracking and Countermeasures in Computer Security: A Survey

  2014cited by this paper
• Impacts of increasing volume of digital forensic data: A survey and future research challenges

  2014cited by this paper
• On Semantic Patterns of Passwords and their Security Impact

  2014cited by this paper
• Honey, I shrunk the keys: influences of mobile devices on password composition and authentication performance

  2014cited by this paper
• A probabilistic framework for improved password strength metrics

  2014influential reference
• Towards an Ontological Model Defining the Social Engineering Domain

  2014cited by this paper
• A Large-Scale Study of Web Password Habits of Chinese Network Users

  2014cited by this paper
• Architectures for Computer Vision: From Algorithm to Chip with Verilog

  2014cited by this paper
• Crowdsourcing CCTV surveillance on the Internet

  2014cited by this paper
• Improvement of Rainbow Table Technology Based on Number Cutting of Reduction Function

  2013cited by this paper
• Memory retrieval and graphical passwords

  2013cited by this paper
• Cloud forensics definitions and critical criteria for cloud forensic capability: An overview of survey results

  2013cited by this paper
• Measuring password guessability for an entire university

  2013cited by this paper
• Challenges to digital forensics: A survey of researchers & practitioners attitudes and opinions

  2013cited by this paper
• How Does Your Password Measure Up? The Effect of Strength Meters on Password Creation

  2012cited by this paper
• Improving information security management: An analysis of ID-password usage and a new login vulnerability measure

  2012cited by this paper
• Guess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms

  2012cited by this paper
• A Survey of Password Attacks and Comparative Analysis on Methods for Secure Authentication

  2012cited by this paper
• Visualizing semantics in passwords: the role of dates

  2012influential reference
• The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes

  2012cited by this paper
• Can users remember their pictorial passwords six years later

  2011cited by this paper
• In plain view: open source intelligence

  2011cited by this paper
• Role of the New Media in the Arab Spring

  2011cited by this paper
• Of passwords and people: measuring the effect of password-composition policies

  2011cited by this paper
• I tweet honestly, I tweet passionately: Twitter users, context collapse, and the imagined audience

  2011cited by this paper
• The evolution of open source intelligence

  2010cited by this paper
• A novel time-memory trade-off method for password recovery

  2009cited by this paper
• Introduction to Social Network Analysis (SNA) as an investigative tool

  2009cited by this paper
• Choosing Parameters to Achieve a Higher Success Rate for Hellman Time Memory Trade Off Attack

  2009cited by this paper
• Visual passwords

  2009cited by this paper
• Password Cracking Using Probabilistic Context-Free Grammars

  2009cited by this paper
• Improving End User Behaviour in Password Utilization: An Action Research Initiative

  2008cited by this paper
• Freeing knowledge, telling secrets: Open source intelligence and development

  2007cited by this paper
• A large-scale study of web password habits

  2007cited by this paper
• Click Passwords Under Investigation

  2007cited by this paper

• Social Media and Enterprise Password Reuse Problem: Password Security Guidelines for Manufacturing Enterprises

  2025influential citation
• A cognitive platform for collecting cyber threat intelligence and real-time detection using cloud computing

  2025cites this paper
• Model Inversion Attacks Meet Cryptographic Fuzzy Extractors

  2025cites this paper
• Integrated authentication system with behavioral profiling

  2025cites this paper
• Exploiting AES Encryption Vulnerabilities Through Padding Oracle Attacks and Generative AI Techniques

  2024cites this paper
• TSTEM: A Cognitive Platform for Collecting Cyber Threat Intelligence in the Wild

  2024cites this paper
• Research by the method of an extended systematical literature review E-SLR the problem of ensuring the security of personal data when using OSINT

  2024cites this paper
• Photodetector Array Based on Perovskite Thin Film Enhanced by Thioacetamide for Imaging and Integrated In‐Sensor Encryption

  2024cites this paper
• A comprehensive evaluation on the benefits of context based password cracking for digital forensics

  2024cites this paper
• Quest: instant questionnaire collection from handshake messages using WLAN

  2024cites this paper
• Context-based Password Cracking Dictionary Expansion Using Generative Pre-trained Transformers

  2024cites this paper
• Hash Value Security Improvement of PCS Password using Signed Binary Operation

  2024cites this paper
• Systematic Literature Review of EM-SCA Attacks on Encryption

  2024cites this paper
• Enhancing Cyber Intelligence Capabilities through Process Automation: Advantages and Opportunities

  2023cites this paper
• Interpol review of digital evidence for 2019–2022

  2023cites this paper
• Harder, better, faster, stronger: Optimising the performance of context-based password cracking dictionaries

  2023cites this paper
• OpenVuln Scanner with OpenVuln Security Framework

  2023cites this paper
• OSINT-Based Tool for Social Media User Impersonation Detection Through Machine Learning

  2023cites this paper
• Review OSINT tool for social engineering

  2023cites this paper
• Performance evaluation of Cuckoo filters as an enhancement tool for password cracking

  2023cites this paper
• Formal Methods and Validation Techniques for Ensuring Automotive Systems Security

  2023cites this paper
• Honeywords Generation Technique based on Meerkat Clan Algorithm and WordNet

  2023cites this paper
• Ethical Hacking in Digital Forensics

  2023cites this paper
• Cognitively reconfigurable mimic-based heterogeneous password recovery system

  2022cites this paper
• Current Status and Security Trend of OSINT

  2022cites this paper
• A model for the creation of biographical dictionaries

  2022cites this paper
• Exploring the Intersection between Databases and Digital Forensics

  2022cites this paper
• Mapping Tools for Open Source Intelligence with Cyber Kill Chain for Adversarial Aware Security

  2022cites this paper
• How viable is password cracking in digital forensic investigation? Analyzing the guessability of over 3.9 billion real-world accounts

  2021cites this paper
• SECURING DATA IN CLOUD ENVIRONMENT USING ENIGMA AND DES COMBINATION ENCRYPTION

  2021cites this paper
• Survey and Taxonomy of Adversarial Reconnaissance Techniques

  2021cites this paper
• Pengembangan Sistem Manajemen Naskah Soal dengan Keamanan Pre-Hash Coding

  2021cites this paper
• Success factors and challenges in digital forensics for law enforcement in Sweden

  2021cites this paper
• Open Source Intelligence and its Applications in Next Generation Cyber Security - A Literature Review

  2021cites this paper
• HOW DARK WEB MONITORING CAN BE USED FOR OSINT AND INVESTIGATIONS

  year unknowncites this paper
• Journal of Information Security and Applications

  year unknowncites this paper