Have the cake and eat it too - Infusing usability into text-password based authentication systems

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2005, Issue , 2005, Pages 473-482

  Jeyaraman, Sundararaman ^a   Topkara, Umut ^a  

^a PURDUE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MEMORABLE MNEMONICS; MNEMONIC GENERATION; TEXT PASSWORD SYSTEMS;

ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; ENTROPY; PUBLIC KEY CRYPTOGRAPHY; SECURITY SYSTEMS; USER INTERFACES;

SECURITY OF DATA;

EID: 33846318568     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2005.28     Document Type: Conference Paper

References (38)

1. A. Addams and M. A. Sasse. "Users are not the enemy," In Communications of the ACM, Volume 42, Issue 12, 1999, pages 40-46.
2. John R. Anderson and Christian Lebiere. The Atomic Components of Thought
3. Mikhail J. Atallah, Craig J. McDonough, Victor Raskin, Sergei Nirenburg. "Natural language processing for information assurance and security: an overview and implementations," Proceedings of the 2000 workshop on New security paradigms, 2000.
4. G. E. Blonder. "Graphical password." US Patent 5559961, Lucent Technologies, Inc., Murray Hill, NJ, August 30, 1995.
5. G. H. Bower, "Analysis of a mnemonic device," In American Scientist, 58, 496-510.
6. G. H. Bower, M. B. Karlin, and A. Dueck. "Comprehension and memory for pictures." Memory and Cognition, 2:216-220, 1975.
7. G. H. Bower and J. S. Reitman, "Mnemonic elaboration in multilist learning," In Journal of Verbal Learning and Verbal Behavior, 11, 478-485.
8. S. Bringsjord D. Ferrucci, "Artificial Intelligence and Literary Creativity: Inside the Mind of Brutus, a Storytelling Machine." Lawrence Erlbaum Associates, 1999.
9. H. Davies. "Physiognomic Access Control," Information Security Monitor, vol. 10m no. 3, 1995m pp 5-8.
10. D. Davis, F. Monrose and M. K. Reiter, "On User Choice in Graphical Password Schemes," In Proceedings of the 13th UNIX Security Symposium, August 2004.
11. R. Dhamija and A. Perrig. "Deja Vu - A User Study: Using Images for Authentication," In Proceedings of the 9th UNIX Security Symposium, August 2000.
12. I. Jermyn, A. Mayer, F. Monrose, M. Reiter and A. Rubin. "The Design and Analysis of Graphical Passwords," In Proceedings of the 8th UNIX Security Symposium, August 1999.
13. D. Klein. "Foiling the cracker: A survey of, and improvements to, password security," In Proceedings of the 2nd USENIX Security Workshop, August 1990.
14. H. Liu and P. Singh, "MAKEBELIEVE: Using commonsense knowledge to generate stories." In Proceedings of the Eighteenth National Conference on Artificial Intelligence and Fourteenth Conference on Innovative Applications of Artificial Intelligence, (pp. 957-958).
15. J. Meehan. "TALE-SPIN and Micro TALE-SPIN." In Roger C. Schank and Christopher K. Riesbeck (Eds.), Inside computer understanding. Hillsdale, NJ: Erlbaum, 1981.
16. G.A. Miller. "The Magical Number Seven, Plus or Minus Two." Psychological Review, vol. 63, 1956, pages 81-87.
17. R. Morris and K. Thompson. "Password security: A case history," Communications of the ACM, 22(11):594 597, November 1979.
18. D. L. Nelson, U. S. Reed, and J. R. Walling. "Picture superiority effect," Journal of Experimental Psychology: Human Learning and Memory, 3:485 497, 1977.
19. J. Nielsen. Usability Engineering. Academic Press. 1993.
20. A. Paivio, T. B. Rogers, and P. C. Smythe. "Why are pictures easier to recall than words?" Psychonomic Science, 11:137-138, 1968.
21. Password Generator. Available at: http://www.alphalink.com.au/Sergeb/ easy-toremember-passwords.html
22. Password Generator 2005. Available at: http://www.diplodock.com/Products/ PasswordGenera tor/default.aspx
23. PC KIMMO - A morphological parser. Available at: http://www.sil.org/ pckimmo/
24. A. Perrig and D. Song. "Hash visualization: A new technique to improve real-world security." In Proceedings of the 1999 International Workshop on Crypto-graphic Techniques and E-Commerce (CryTEC '99), 1999.
25. Personal Communication.
26. Project Gutenberg. Available at: http://www.gutenberg.org/
27. RealPro. Available at: http://www.cogentex.com/technology/realpro/index. sh tml
28. Senseclusters. Available at: http://www.d.umn.edu/tpederse/code.html
29. E. Spafford. "Observing Reusable Password Choices," In Proceedings of the 3rd UNIX Security Symposium, pages 299-312, Berkeley, CA, September 1992. Usenix Association.
30. Stanford Log-linear Tagger. Available at: http://wwwnlp.stanford.edu/ software/tagger.shtml
31. The password mnemonic generator. Available at: http://www.aber.ac.uk/ cgibin/user/syswww/gw/mnemonic
32. The Science Behind Passfaces. Revision 2, Real User Corporation, September 2001. http://www.realuser.com/published/ScienceBehindPa ssfaces.pdf.
33. J. Thorpe and P. C. van Oorschoti. "Graphical Dictionaries and the Memorable Space of Graphical Passwords," In Proceedings of the 13th USENIX Security Symposium, 2004.
34. J. Thorpe and P. C. van Oorschoti. "Towards Secure Design Choices for Implementing Graphical Passwords," In Proceedings of the 20th Annual Computer Security Applications Conference (ACSAC), 2004.
35. US Dept. of Defense, "Password Management Guideline," CSC-STD-002-85, 1985.
36. Wtkipedia entry for 'mnemonic', http://en.wikipedia.org/wiki/ Mnemonic
37. Wordnet. Available at: http://wordnet.princeton.edu/
38. Jeff Van, Alan Blackwell, Ross Anderson and Alasdair Grant. "Password memorability and security: empirical results," Security & Privacy Magazine, IEEE, Volume 2, Issue 5, 2004, pages 25-31.