Password policy simulation and analysis

DIM'07 - Proceedings of the 2007 ACM Workshop on Digital Identity Management

Volumn , Issue , 2007, Pages 1-10

  Shay, Richard J K ^a   Bhargav Spantzel, Abhilasha ^a   Bertino, Elisa ^a  

^a PURDUE UNIVERSITY   (United States)

Author keywords

Management; Modeling; Password; Policy; Simulation

Indexed keywords

CRITICAL COMPONENT; MODELING; POLICY SIMULATION; SIMULATION MODEL; SIMULATION RESULT;

ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS;

COMPUTER SIMULATION;

EID: 68449103390     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1314403.1314405     Document Type: Conference Paper

References (13)

1. - 2004 annual password survey results. SafeNet, 2005.
2. Cynthia Kuo, Sasha Romanosky, and Lorrie Faith Cranor. Human selection of mnemonic phrase-based passwords. In SOUPS '06: Proceedings of the second symposium on Usable privacy and security, pages 67-78, New York, NY, USA, 2006. ACM Press.
3. John Leyden. Office workers give away passwords for a cheap pen. The Register, 2003.
4. Anne Adams and Martina Angela Sasse. Users are not the enemy. Commun. ACM, 42(12):40-46, 1999.
5. III Robert M. Polstra. A case study on how to manage the theft of information. In InfoSecCD '05: Proceedings of the 2nd annual conference on Information security curriculum development, pages 135-138, New York, NY, USA, 2005. ACM Press.
6. C. E. Shannon. Prediction and entropy of printed english. Bell Systems Technical Journal, 30:50-64, 1951.
7. Anna Squicciarini, Abhilasha Bhargav-Spantzel, Alexei Czeskis, and Elisa Bertino. AuthSL: A System for the Specification and Enforcement of Quality based Authentication Policies. In CERIAS Technical Report.
8. Wayne C. Summers and Edward Bosworth. Password policy: the good, the bad, and the ugly. In WISICT '04: Proceedings of the winter international synposium on Information and communication technologies, pages 1-6. Trinity College Dublin, 2004.
9. Boston University. Information security management guidelines. http://www.bu.edu/computing/policies/infomanagement.html.
10. Brown University. Brown university password policy. http://www.brown.edu/ Facilities/CIS/policy/password.html.
11. Amherst University of Massachusetts. Netid and passwords. http://www.oit.umass.edu/accounts/passwords.html.
12. Kim-Phuong L. Vu, Robert W. Proctor, Abhilasha Bhargav-Spantzel, Bik-Lam (Belin) Tai, and Joshua Cook. Improving password security and memorability to protect personal and organizational information. International Journal of Human-Computer Studies, 2007.
13. Jianxin Jeff Yan. A note on proactive password checking. In NSPW '01: Proceedings of the 2001 workshop on New security paradigms, pages 127-135, New York, NY, USA, 2001. ACM Press.