Word association computer passwords: The effect of formulation techniques on recall and guessing rates

Computers and Security

Volumn 19, Issue 7, 2000, Pages 645-656

  Pond, Rachael ^a   Podd, John ^a   Bunnell, Julie ^b   Henderson, Ron ^b  

^a MASSEY UNIVERSITY   (New Zealand)

^b UNIVERSITY OF CANBERRA   (Australia)

Author keywords

Guessing rate; Password security; Recall rate; Word associations

Indexed keywords

EID: 12244272072     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/S0167-4048(00)07023-1     Document Type: Note

References (18)

1. N. Ahituv, Y. Lapid, and S. Neumann, Verifying the authentication of an information system user, Computers & Security, 6 (1987) 152-157.
2. D. L. Jobusch and A. E. Oldehoeft, A survey of password mechanisms: Weaknesses and potential improvements. Part 1, Computers & Security, 8 (1989a) 587-604.
3. B. Menkus, Understanding the use of passwords, Computers & Security, 7 (1988) 132-136.
4. B. L. Riddle, M. S. Miron, and J. A. Semo, Passwords in use in a university timesharing environment, Computers & Security, 8 (1989) 569-579.
5. S. L. Smith, Authenticating users by word association, Computers & Security, 6 (1987) 464-470.
6. Y. Spector and J. Ginzberg, Pass-sentence - a new approach to computer code, Computers & Security, 13 (1994) 145-160.
7. D. L. Jobusch and A. E. Oldehoeft, A survey of password mechanisms: Weaknesses and potential improvements. Part 2, Computers & Security, 8 (1989b) 675- 689.
8. S. N. Porter, A password extension for improved human factors, Computers & Security, 1 (1982) 5456.
9. S. Kurzban, A dozen gross 'mythconceptions' about information processing security, In V. Fak, (Ed.), In Security, IFIP/Sec '83. (pp. 15-25), Holland, North Holland Publishing Co., 1983.
10. W J. Haga and M. Zviran, Cognitive passwords: From theory to practice, Data Processing & Communications Security, 3 (1989) 19-23.
11. M. Bishop and D. V. Klein, Improving system security via proactive password checking, Computers & Security, 14 (1995) 233-249.
12. J. Bunnell, J. Podd, R. Henderson, R. Napier, and J. Kennedy-Moffat, Cognitive, associative, and conventional passwords: Recall and guessing rates, Computers & Security, 16 (1997) 645-657.
13. M. Zviran and WJ. Haga, A comparison of password techniques for multilevel authentication mechanisms, The Computer Journal, 36 (1993) 227-237.
14. M. Zviran and W J. Haga, Cognitive passwords: The key to easy access control, Computers & Security, 9 (1990) 723-736.
15. D. Palermo and J. Jenkms, Word association norms: Grade school through college, Minneapolis, University of Minnesota Press, 1964.
16. J. Cohen, Statistical power analysis for the behavioural sciences (2nd ed.), Hillsdale, NJ, Lawrence Erlbaum, 1988.
17. E. Erdfelder, F. Faul, and A. Buchner, GPOWER: a general power analysis program, Behaviour Research Methods, Instruments, & Computers, 28 (1996) 1-11.
18. K. Smgh, On improvements to password security, Operation Systems Review, 19 (1985) 53-60.