Where do security policies come from?

No abstract is available for this paper.

• Publication year

  2010

• Venue

  Symposium On Usable Privacy and Security

• Publication date

  2010-07-14

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/1837110.1837124
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• The Password Thicket: Technical and Market Failures in Human Authentication on the Web

  2010cited by this paper
• Brute Force and Ignorance

  2010cited by this paper
• The true cost of unusable password policies: password use in the wild

  2010influential reference
• The compliance budget: managing security behaviour in organisations

  2009cited by this paper
• Passwords: If We're So Smart, Why Are We Still Using Them?

  2009cited by this paper
• So long, and no thanks for the externalities: the rational rejection of security advice by users

  2009cited by this paper
• THE WAY I SEE ITWhen security gets in the way

  2009cited by this paper
• Predicting Social Security numbers from public data

  2009influential reference
• A profitless endeavor: phishing as tragedy of the commons

  2009cited by this paper
• Nobody Sells Gold for the Price of Silver: Dishonesty, Uncertainty and the Underground Economy

  2009cited by this paper
• Security and usability: the gap in real-world online banking

  2008influential reference
• Security by Checklist

  2008cited by this paper
• Do Strong Web Passwords Accomplish Anything?

  2007influential reference
• An inquiry into the nature and causes of the wealth of internet miscreants

  2007cited by this paper
• A large-scale study of web password habits

  2007cited by this paper
• Password management strategies for online accounts

  2006cited by this paper
• Password Exhaustion: Predicting the End of Password Usefulness

  2006cited by this paper
• On countering online dictionary attacks with login histories and humans-in-the-loop

  2006cited by this paper
• The underground economy: priceless

  2006cited by this paper
• KLASSP: Entering Passwords on a Spyware Infected Machine Using a Shared-Secret Proxy

  2006cited by this paper
• Case study: online banking security

  2006cited by this paper
• Stopping a Phishing Attack, Even when the Victims Ignore Warnings

  2005cited by this paper
• Making a Faster Cryptanalytic Time-Memory Trade-Off

  2003cited by this paper
• Transforming the ‘Weakest Link’ — a Human/Computer Interaction Approach to Usable and Effective Security

  2001cited by this paper
• The Design and Analysis of Graphical Passwords

  1999cited by this paper
• Users are not the enemy

  1999influential reference
• User-centered security

  1996cited by this paper
• The S/KEY One-Time Password System

  1995cited by this paper
• The underground economy

  1988cited by this paper

• KTCGM: Towards A novel solution for enhancing Kerberos-5 with threshold cryptography and ML-based anomaly detection

  2025cites this paper
• Password Strength Detection via Machine Learning: Analysis, Modeling, and Evaluation

  2025cites this paper
• Adaptive Password Policies: A New Paradigm for Cyber Resilience in Modern Threat Landscape

  2025cites this paper
• Questioning a security assumption: Are unique passwords harder to remember than reused or modified passwords?

  2025cites this paper
• When User Needs Meet Power: Improving Security Usability by Recognizing Where Business Needs Come First

  2025cites this paper
• A Data-Driven Comparative Analysis of Password and Biometric Authentication Systems

  2025cites this paper
• Blocklisted Oblivious Pseudorandom Functions

  2025cites this paper
• GPNST: An Improved Graphical Password Authentication Scheme Leveraging Neural Style Transfer Technique on Smartphones

  2025cites this paper
• Credential-Based Pseudonym Generation for Programming Process Data Collection

  2025cites this paper
• Systematic Solutions to Login and Authentication Security Problems: A Dual-Password Login-Authentication Mechanism

  2024cites this paper
• Systematic Solutions to Login and Authentication Security: A Dual-Password Login-Authentication Mechanism

  2024cites this paper
• An Alternative to Multi-Factor Authentication with a Triple-Identity Authentication Scheme

  2024cites this paper
• How Students Deal With Password Security: Case Study of Nalut University Students

  2024cites this paper
• Ru-PCFG: Password Guessing Model Combining PCFG and Word Transformation

  2024influential citation
• Review on Proposal of a Password Manager, satisfying security and Usability through “Key-Master”

  2024cites this paper
• The perils of cybersecurity regulation

  2024influential citation
• How memory anxiety can influence password security behavior

  2023cites this paper
• Measuring Website Password Creation Policies At Scale

  2023influential citation
• Evaluating Password Composition Policy and Password Meters of Popular Websites

  2023cites this paper
• Reviewing the Usability of Web Authentication Procedures: Comparing the Current Procedures of 20 Websites

  2023cites this paper
• Investigating the Password Policy Practices of Website Administrators

  2023cites this paper
• Balancing Password Security and User Convenience: Exploring the Potential of Prompt Models for Password Generation

  2023cites this paper
• Improving Password Generation Through the Design of a Password Composition Policy Description Language

  2022influential citation
• Enhancing the user authentication process with colour memory cues

  2022cites this paper
• Remote WebAuthn: FIDO2 Authentication for Less Accessible Devices

  2021cites this paper
• Open sesame: Lessons in password-based user authentication

  2021cites this paper
• Pattern-based and Time-Synchronised Passwords

  2021cites this paper
• Prioritizing security over usability: Strategies for how people choose passwords

  2021influential citation
• How viable is password cracking in digital forensic investigation? Analyzing the guessability of over 3.9 billion real-world accounts

  2021cites this paper
• A machine learning based approach for user privacy preservation in social networks

  2021cites this paper
• Passlab: A Password Security Tool for the Blue Team

  2020cites this paper
• Can individuals' neutralization techniques be overcome? A field experiment on password policy

  2020cites this paper
• Password guessers under a microscope: an in-depth analysis to inform deployments

  2020cites this paper
• Skeptic: Automatic, Justified and Privacy-Preserving Password Composition Policy Selection

  2020cites this paper
• We Don't Give a Second Thought Before Providing Our Information: Understanding Users' Perceptions of Information Collection by Apps in Urban Bangladesh

  2020cites this paper
• Deploying authentication in the wild: towards greater ecological validity in security usability studies

  2020influential citation
• How Mandatory Second Factor Affects the Authentication User Experience

  2020cites this paper
• Costs and Benefits of Authentication Advice

  2020cites this paper
• "Wait, Do I Know This Person?": Understanding Misdirected Email

  2019cites this paper
• Hybritus: a password strength checker by ensemble learning from the query feedbacks of websites

  2019cites this paper
• Modelling Anti-Phishing Authentication Ceremonies

  2019influential citation
• A Large-Scale Empirical Study of Internet Users' Privacy Leakage in China

  2019cites this paper
• Of Two Minds about Two-Factor: Understanding Everyday FIDO U2F Usability through Device Comparison and Experience Sampling

  2019cites this paper
• Encouraging users to improve password security and memorability

  2019cites this paper
• Generation of Secure and Reliable Honeywords, Preventing False Detection

  2019cites this paper
• BluePass : A Mobile Device Assisted Password

  2019cites this paper
• Assessing password practices of mobile apps

  2019influential citation
• Lost in Disclosure: On the Inference of Password Composition Policies

  2019cites this paper
• Measuring and Understanding Security Behaviours

  2019cites this paper
• User Behaviors and Attitudes Under Password Expiration Policies

  2018cites this paper
• Password Policies Adopted by South African Organizations: Influential Factors and Weaknesses

  2018influential citation
• GuidedPass: Helping Users to Create Strong and Memorable Passwords

  2018cites this paper
• Design Shortcomings in E-Service Enrolment Processes: Recommendations From an HCI Perspective

  2018cites this paper
• A Mathematical Model for Resolving Minimum Password Length Controversy

  2018influential citation
• Comparative Analysis and Framework Evaluating Web Single Sign-on Systems

  2018cites this paper
• The State of User Authentication in the Wild

  2018influential citation
• Artificial Intelligence and Consumer Privacy

  2018cites this paper
• Generating and Managing Secure Passwords for Online Accounts

  2018influential citation
• DPPG: A Dynamic Password Policy Generation System

  2018cites this paper
• The Rewards and Costs of Stronger Passwords in a University: Linking Password Lifetime to Strength

  2018cites this paper
• Research in Attacks, Intrusions, and Defenses

  2018influential citation
• Image Based Password Composition Using Inverse Document Frequency

  2017cites this paper
• SysPal: System-Guided Pattern Locks for Android

  2017cites this paper
• Zipf’s Law in Passwords

  2017cites this paper
• Zero-Knowledge Password Policy Check from Lattices

  2017cites this paper
• SysPal : Sys tem-guided Pa ttern L ocks for Android

  2017cites this paper
• Diversify to Survive: Making Passwords Stronger with Adaptive Policies

  2017cites this paper
• Zero-Sum Password Cracking Game: A Large-Scale Empirical Study on the Crackability, Correlation, and Security of Passwords

  2017cites this paper
• BluePass: A Secure Hand-Free Password Manager

  2017cites this paper
• Information, Communication and Computing Technology

  2017influential citation
• Someone in Your Contact List: Cued Recall-Based Textual Passwords

  2017cites this paper
• A Second Look at Password Composition Policies in the Wild: Comparing Samples from 2010 and 2016

  2017cites this paper
• Design and analysis of password based authentication systems

  2017cites this paper
• A Study of Online Security Practices

  2017cites this paper
• Discovering trends for the development of novel authentication applications for dementia patients

  2017cites this paper
• Behavior Change Interventions for Cybersecurity

  2017cites this paper
• Revisiting password rules: facilitating human management of passwords

  2016influential citation
• A Preferential Analysis of Existing Password Managers from End-Users' View Point

  2016cites this paper
• A diversity-based framework for dynamic password policy generation

  2016cites this paper
• Designing Proof of Human-Work Puzzles for Cryptocurrency and Beyond

  2016cites this paper
• Pushing on string

  2016cites this paper
• Understanding Password Choices: How Frequently Entered Passwords Are Re-used across Websites

  2016cites this paper
• RESULTS FROM THE INDIVIDUAL DIARIES FEASIBILITY TEST FOR THE CONSUMER EXPENDITURE DIARY SURVEY

  2016cites this paper
• Efficiently Computing Data-Independent Memory-Hard Functions

  2016cites this paper
• Password Policy Markup Language

  2016cites this paper
• The Role of Instructional Design in Persuasion: A Comics Approach for Improving Cybersecurity

  2016cites this paper
• Responsibility and Tangible Security: Towards a Theory of User Acceptance of Security Tokens

  2016cites this paper
• Modeling the Adversary to Evaluate Password Strength With Limited Samples

  2016cites this paper
• Designing Password Policies for Strength and Usability

  2016cites this paper
• Learning from "shadow security": understanding non-compliant behaviours to improve information security management

  2016cites this paper
• The Impact of Cues and User Interaction on the Memorability of System-assigned Random Passwords

  2016influential citation
• Harvesting the low-hanging fruits: defending against automated large-scale cyber-intrusions by focusing on the vulnerable population

  2016cites this paper
• Assessing the User Experience of Password Reset Policies in a University

  2015cites this paper
• Expert Password Management

  2015influential citation
• A Comparison of Password Authentication Between Children and Adults

  2015cites this paper
• Secure and Efficient Key Derivation in Portfolio Authentication Schemes Using Blakley Secret Sharing

  2015cites this paper
• Cyber security password policy for industrial control networks

  2015cites this paper
• Graphical passwords: a qualitative study of password patterns

  2015cites this paper
• Human factors in textual password-based authentication

  2015cites this paper
• The Impact of Cues and User Interaction on the Memorability of System-Assigned Recognition-Based Graphical Passwords

  2015cites this paper