Skip to main navigation Skip to search Skip to main content

Password Guessing-Based Legacy-UI Honeywords Generation Strategies for Achieving Flatness

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

The legacy-UI honeywords generation approach is more favored due to its high usability compared to the modified-UI approach that sometimes becomes unusable in practice. However, several prior arts on legacy-UI based honeywords generation methods often fail to obtain the security standard, especially the flatness criterion. In this work, we propose two legacy-UI honeywords generation strategies based on two password guessing methods: PassGAN and Probabilistic Context-Free Grammar (PCFG). Besides, we also introduce two hybrid strategies by combining PassGAN, PCFG, and random-based methods. We empirically examine the flatness of the proposed honeywords generation strategy against Top Password (Top-PW) attack using real-world datasets, instead of only providing heuristic security arguments. The experiment results show that three of the proposed methods (the PassGAN-based and the two hybrid methods) have lower flatness value than all previous legacy-UI methods and able to meet the 'perfectly flat' criterion.

Original languageEnglish
Title of host publicationProceedings - 2020 IEEE 44th Annual Computers, Software, and Applications Conference, COMPSAC 2020
EditorsW. K. Chan, Bill Claycomb, Hiroki Takakura, Ji-Jiang Yang, Yuuichi Teranishi, Dave Towey, Sergio Segura, Hossain Shahriar, Sorel Reisman, Sheikh Iqbal Ahamed
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages1610-1615
Number of pages6
ISBN (Electronic)9781728173030
DOIs
Publication statusPublished - Jul 2020
Externally publishedYes
Event44th IEEE Annual Computers, Software, and Applications Conference, COMPSAC 2020 - Virtual, Madrid, Spain
Duration: 13 Jul 202017 Jul 2020

Publication series

NameProceedings - 2020 IEEE 44th Annual Computers, Software, and Applications Conference, COMPSAC 2020

Conference

Conference44th IEEE Annual Computers, Software, and Applications Conference, COMPSAC 2020
Country/TerritorySpain
CityVirtual, Madrid
Period13/07/2017/07/20

Keywords

  • Honeywords
  • Hybrid
  • PassGAN
  • Password
  • Probabilistic Context Free Grammar
  • Random

Fingerprint

Dive into the research topics of 'Password Guessing-Based Legacy-UI Honeywords Generation Strategies for Achieving Flatness'. Together they form a unique fingerprint.

Cite this