Persuasion for stronger passwords: Motivation and pilot study

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5033 LNCS, Issue , 2008, Pages 140-150

  Forget, Alain ^a   Chiasson, Sonia ^a   Van Oorschot, P C ^a   Biddle, Robert ^a  

^a CARLETON UNIVERSITY   (Canada)

Author keywords

Authentication; Computer security; Passwords; Persuasive Technology; Usable security

Indexed keywords

ARTIFICIAL INTELLIGENCE; COMPUTER SCIENCE; COMPUTERS; SECURITY OF DATA;

ON-LINE SERVICE; PASSWORD CREATION; PASSWORD SPACES; PASSWORDS; PERSUASIVE TECHNOLOGY; PROTOTYPE SYSTEM; USABLE SECURITY; WEAK PASSWORDS;

AUTHENTICATION;

EID: 70349973978     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-68504-3_13     Document Type: Conference Paper

References (18)

1. Adams, A., Sasse, M.A.: Users Are Not The Enemy. Communications of the ACM 42(12), 41-46 (1999)
2. Burr, W.E., Dodson, D.F., Polk, W.T.: Electronic Authentication Guideline. NIST Special Publication 800-63, Version 1, pp. 1-53 (2004)
3. Forget, A., Chiasson, S., Biddle, R.: Persuasion as Education for Computer Security. In: Association for the Advancement of Computing in Education (AACE) E-Learn, pp. 822- 829 (2007)
4. Chiasson, S., van Oorschot, P.C., Biddle, R.: A Usability Study and Critique of Two Password Managers. In: 15th USENIX Security Symposium, pp. 1-16 (2006)
5. Florencio, D., Herley, C.: A Large-Scale Study of Web Password Habits. In: 16th International World Wide Web Conference (WWW), pp. 657-666 (2007)
6. Fogg, B.J.: Persuasive Technology: Using Computers to Change What We Think and Do. Morgan Kaufmann, San Francisco (2003)
7. Furnell, S.: An assessment of website password practices. J. Computers & Security 26(7- 8), 445-451 (2007)
8. Gasser, R., Brodbeck, D., Degen, M., Luthiger, J., Wyss, R., Reichlin, S.: Persuasiveness of a Mobile Lifestyle Coaching Application Using Social Facilitation. In: IJsselsteijn, W., de Kort, Y., Midden, C., Eggen, B., van den Hoven, E. (eds.) Persuasive 2006. LNCS, vol.3962, pp. 27-38. Springer, Heidelberg (2006)
9. Kuo, C., Romanosky, S., Cranor, L.F.: Human Selection of Mnemonic Phrase-based Passwords. In: 2nd Symposium on Usable Privacy and Security (SOUPS), pp. 67-78 (2006)
10. Lucero, A., Zuloaga, R., Mota, S., Muñoz, F.: Persuasive Technologies in Education: Improving Motivation to Read and Write for Children. In: IJsselsteijn, W., de Kort, Y., Midden, C., Eggen, B., van den Hoven, E. (eds.) Persuasive 2006. LNCS, vol.3962, pp. 142-153. Springer, Heidelberg (2006)
11. Peterson, L.R., Peterson, M.J.: Short-term retention of individual verbal items. J. Experimental Psychology 58(3), 193-198 (1959)
12. Sasse, M.A.: Computer Security: Anatomy of a Usability Disaster, and a Plan for Recovery. In: ACM CHI 2003 Workshop on HCI and Security Systems (2003)
13. Shostack, A., Syverson, P.: What Price Privacy (and why identity theft is about neither identity nor theft). In: Camp, L.J., Lewis, S. (eds.) Economics of Information Security, pp. 129-142. Kluwer Academic, Norwell (2004)
14. Solar Designer: John the Ripper password cracker (2006) (accessed, March 2008), http://www.openwall.com/john/
15. Sterns, A., Mayhorn, C.: Persuasive Pillboxes: Improving Medication Adherence with Personal Digital Assistants. In: IJsselsteijn, W., de Kort, Y., Midden, C., Eggen, B., van den Hoven, E. (eds.) Persuasive 2006. LNCS, vol.3962, pp. 195-198. Springer, Heidelberg (2006)
16. Weirich, D., Sasse, M.A.: Pretty Good Persuasion: A first step towards effective password security in the real world. In: 7th New Security Paradigms Workshop, pp. 137-143 (2001)
17. Whitten, A., Tygar, J.D.: Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0. In: 8th USENIX Security Symposium, pp. 169-183 (1999)
18. Yan, J., Blackwell, A., Anderson, R., Grant, A.: Password Memorability and Security: Empirical Results. IEEE Security & Privacy Magazine 2(5), 25-31 (2004)