Skip to main content
Top

2018 | OriginalPaper | Chapter

User Password Intelligence Enhancement by Dynamic Generation Based on Markov Model

Authors : Zhendong Wu, Yihang Xia

Published in: Algorithms and Architectures for Parallel Processing

Publisher: Springer International Publishing

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

The use of passwords in daily life has become more and more widespread, which has become an indispensable part of life. However, there are still some security risks when using passwords. These security risks occupy a large part due to users using low strength password because of the very limited memory ability of human beings. It makes verbal guessing based on human memory habits achieve good attack effectiveness. In order to improve the security of network password system, this paper proposes a password enhancement method combining Markov model intelligent prediction and dynamic password enhanced technology. This method can greatly increase the password strength by more than 80% without increasing the memory burden of the user. At the same time, it does not need to store complex keys in the system, which can significantly improve the security of the network password system.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Literature
1.
go back to reference Dell Amico, M., Michiardi, P., Roudier, Y.F.: Password strength: an empirical analysis. In: 2010 Proceedings IEEE INFOCOM, San Diego, CA, USA, pp. 1–9 (2010) Dell Amico, M., Michiardi, P., Roudier, Y.F.: Password strength: an empirical analysis. In: 2010 Proceedings IEEE INFOCOM, San Diego, CA, USA, pp. 1–9 (2010)
2.
go back to reference Wang, P., Wang, D., Huang, X.: Advances in password security. J. Comput. Res. Dev. 53(10), 2173–2188 (2016) Wang, P., Wang, D., Huang, X.: Advances in password security. J. Comput. Res. Dev. 53(10), 2173–2188 (2016)
3.
go back to reference Vu, K.P.L., Proctor, R.W., Bhargav-Spantzel, A., et al.: Improving password security and memorability to protect personal and organi-zational information. Int. J. Hum.-Comput. Stud. 65(8), 744–757 (2007)CrossRef Vu, K.P.L., Proctor, R.W., Bhargav-Spantzel, A., et al.: Improving password security and memorability to protect personal and organi-zational information. Int. J. Hum.-Comput. Stud. 65(8), 744–757 (2007)CrossRef
4.
go back to reference Castelluccia, C., Chaabane, A., Dürmuth, M., et al.: When privacy meets security: leveraging personal information for password cracking. Computer Science (2013) Castelluccia, C., Chaabane, A., Dürmuth, M., et al.: When privacy meets security: leveraging personal information for password cracking. Computer Science (2013)
5.
go back to reference Bonneau, J.: The science of guessing: analyzing an anonymized corpus of 70 million passwords. In: 2012 IEEE Symposium on Security and Privacy (SP), pp. 538–552. IEEE (2012) Bonneau, J.: The science of guessing: analyzing an anonymized corpus of 70 million passwords. In: 2012 IEEE Symposium on Security and Privacy (SP), pp. 538–552. IEEE (2012)
6.
go back to reference Ma, J., Yang, W., Luo, M., et al.: A study of probabilistic password models. In: 2014 IEEE Symposium on Security and Privacy (SP), pp. 689–704. IEEE (2014) Ma, J., Yang, W., Luo, M., et al.: A study of probabilistic password models. In: 2014 IEEE Symposium on Security and Privacy (SP), pp. 689–704. IEEE (2014)
7.
go back to reference Kelley, P.G., Komanduri, S., Mazurek, M.L., et al.: Guess again (and again and again): measuring password strength by simulating password-cracking algorithms. In: 2012 IEEE Symposium on Security and Privacy (SP), pp. 523–537. IEEE (2012) Kelley, P.G., Komanduri, S., Mazurek, M.L., et al.: Guess again (and again and again): measuring password strength by simulating password-cracking algorithms. In: 2012 IEEE Symposium on Security and Privacy (SP), pp. 523–537. IEEE (2012)
8.
go back to reference Komanduri, S., Shay, R., Kelley, P.G., et al.: Of passwords and people: measuring the effect of password-composition policies. In: Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, pp. 2595–2604. ACM (2011) Komanduri, S., Shay, R., Kelley, P.G., et al.: Of passwords and people: measuring the effect of password-composition policies. In: Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, pp. 2595–2604. ACM (2011)
9.
go back to reference Narayanan, A., Shmatikov, V.: Fast dictionary attacks on passwords using time-space tradeoff. In: Proceedings of the 12th ACM Conference on Computer and Communications Security, pp. 364–372. ACM (2005) Narayanan, A., Shmatikov, V.: Fast dictionary attacks on passwords using time-space tradeoff. In: Proceedings of the 12th ACM Conference on Computer and Communications Security, pp. 364–372. ACM (2005)
10.
go back to reference Weir, M., Aggarwal, S., de Medeiros, B., Glodek, B.: Password cracking using probabilistic context-free grammars. In: Proceedings of the 30th IEEE Symposium on Security and Privacy, pp. 391–405. IEEE (2009) Weir, M., Aggarwal, S., de Medeiros, B., Glodek, B.: Password cracking using probabilistic context-free grammars. In: Proceedings of the 30th IEEE Symposium on Security and Privacy, pp. 391–405. IEEE (2009)
11.
go back to reference Weir, M., Aggarwal, S., Collins, M., et al.: Testing metrics for password creation policies by attacking large sets of re-vealed passwords. In: Proceedings of the 17th ACM Conference on Computer and Communications Security, pp. 162–175. ACM (2010) Weir, M., Aggarwal, S., Collins, M., et al.: Testing metrics for password creation policies by attacking large sets of re-vealed passwords. In: Proceedings of the 17th ACM Conference on Computer and Communications Security, pp. 162–175. ACM (2010)
12.
go back to reference Castelluccia, C., Dürmuth, M., Perito, D.: Adaptive password-strength meters from markov models. In: The Network and Distributed System Security Symposium (NDSS 2012) (2012) Castelluccia, C., Dürmuth, M., Perito, D.: Adaptive password-strength meters from markov models. In: The Network and Distributed System Security Symposium (NDSS 2012) (2012)
13.
go back to reference de Carnavalet, X.D.C., Mannan, M.: From very weak to very strong: analyzing password-strength meters. In: The Network and Distributed System Security Symposium (NDSS 2014) (2014) de Carnavalet, X.D.C., Mannan, M.: From very weak to very strong: analyzing password-strength meters. In: The Network and Distributed System Security Symposium (NDSS 2014) (2014)
14.
go back to reference Dürmuth, M., Angelstorf, F., Castelluccia, C., Perito, D., Chaabane, A.: OMEN: faster password guessing using an ordered markov enumerator. In: International Symposium on Engineering Secure Software and Systems, Mar 2015, Milan, Italy (2015) Dürmuth, M., Angelstorf, F., Castelluccia, C., Perito, D., Chaabane, A.: OMEN: faster password guessing using an ordered markov enumerator. In: International Symposium on Engineering Secure Software and Systems, Mar 2015, Milan, Italy (2015)
15.
go back to reference Batagelj, V., Brandes, U.: Efficient generation of large random networks. Phys. Rev. E 71(3), 036113 (2005)CrossRef Batagelj, V., Brandes, U.: Efficient generation of large random networks. Phys. Rev. E 71(3), 036113 (2005)CrossRef
16.
go back to reference Zhendong, W., Liang, B., You, L., Jian, Z., Li, J.: High-dimension space projection-based biometric encryption for fingerprint with fuzzy minutia. Soft Comput. 20(12), 4907–4918 (2016)CrossRef Zhendong, W., Liang, B., You, L., Jian, Z., Li, J.: High-dimension space projection-based biometric encryption for fingerprint with fuzzy minutia. Soft Comput. 20(12), 4907–4918 (2016)CrossRef
17.
go back to reference Zhendong, W., Tian, L., Li, P., Ting, W., Jiang, M., Wu, C.: Generating stable biometric keys for flexible cloud computing authentication using finger vein. Inf. Sci. 433, 431–447 (2018) Zhendong, W., Tian, L., Li, P., Ting, W., Jiang, M., Wu, C.: Generating stable biometric keys for flexible cloud computing authentication using finger vein. Inf. Sci. 433, 431–447 (2018)
20.
go back to reference Melicher, W., et al.: Fast, lean, and accurate: modeling password guessability using neural networks. In: Proceedings of the 25th USENIX Security Symposium, 10–12 August, Austin, TX (2016) Melicher, W., et al.: Fast, lean, and accurate: modeling password guessability using neural networks. In: Proceedings of the 25th USENIX Security Symposium, 10–12 August, Austin, TX (2016)
Metadata
Title
User Password Intelligence Enhancement by Dynamic Generation Based on Markov Model
Authors
Zhendong Wu
Yihang Xia
Copyright Year
2018
DOI
https://doi.org/10.1007/978-3-030-05063-4_25

Premium Partner