Password cracking using probabilistic context-free grammars

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2009, Pages 391-405

  Weir, Matt ^a   Aggarwal, Sudhir ^a   De Medeiros, Breno ^a   Glodek, Bill ^a  

^a Florida State University   (United States)

Author keywords

Computer crime; Computer security; Data security

Indexed keywords

COMPUTER SECURITY; DATA SECURITY; PASSWORD CRACKING; PROBABILISTIC CONTEXT FREE GRAMMARS; PROBABILITY ORDER; TOOLS AND TECHNIQUES; TRAINING SETS;

CRACKING (CHEMICAL); CRACKS; NETWORK SECURITY; SECURITY SYSTEMS;

COMPUTER CRIME;

EID: 70449688216     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2009.8     Document Type: Conference Paper

References (16)

1. U. Manber. A simple scheme to make passwords based on one-way functions much harder to crack. Computers & Security Journal, Volume 15, Issue 2, 1996, Pages 171-176. Elsevier.
2. J. Yan, A. Blackwell, R. Anderson, and A. Grant. Password Memorability and Security: Empirical Results. IEEE Security and Privacy Magazine, Volume 2, Number 5, pages 25-31, 2004.
3. R. V. Yampolskiy. Analyzing User Password Selection Behavior for Reduction of Password Space. Proceedings of the IEEE International Carnahan Conferences on Security Technology, pp.109-115, 2006.
4. M. Bishop and D. V. Klein. Improving system security via proactive password checking. Computers & Security Journal, Volume 14, Issue 3, 1995, Pages 233-249. Elsevier.
5. G. Kedem and Y. Ishihara. Brute Force Attack on UNIX Passwords with SIMD Computer. Proceedings of the 3rd USENIX Windows NT Symposium, 1999.
6. N. Mentens, L. Batina, B. Preneel, I. Verbauwhede. Time- Memory Trade-Off Attack on FPGA Platforms: UNIX Password Cracking. Proceedings of the International Workshop on Reconfigurable Computing: Architectures and Applications. Lecture Notes in Computer Science, Volume 3985, pages 323-334, Springer, 2006.
7. M. Hellman. A cryptanalytic time-memory trade-off. IEEE Transactions on Information Theory, Volume 26, Issue 4, pages 401-406, 1980.
8. P. Oechslin. Making a Faster Cryptanalytic Time-Memory Trade-Off. Proceedings of Advances in Cryptology (CRYPTO 2003), Lecture Notes in Computer Science, Volume 2729, pages 617-630, 2003. Springer.
9. A list of popular password cracking wordlists, 2005, [Online Document] [cited 2008 Oct 07] Available HTTP http://www.outpost9.com/files/WordLists.html.
10. A. Narayanan and V. Shmatikov, Fast Dictionary Attacks on Passwords Using Time-Space Tradeoff, CCS'05, November 7-11, 2005, Alexandria, Virginia.
11. John the Ripper password cracker, [Online Document] [cited 2008 Oct 07] Available HTTP http://www.openwall.com.
12. J.E. Hopcroft and J.D. Ullman, Introduction to Automata Theory, Languages, and Computation, Addison Wesley, 1979.
13. L. R. Rabiner, A Tutorial on Hidden Markov Models and Selected Applications in Speech Recognition, Proceedings of the IEEE, Volume 77, No. 2, February 1989.
14. N. Chomsky. Three models for the description of language. Information Theory, IEEE Transactions on, 2(3):113-124, Sep 1956.
15. Robert McMillan, Phishing attack targets Myspace users, 2006, [Online Document] [cited 2008 Oct 07] Available HTTP http://www.infoworld.com/infoworld/ article/06/10/27/HNphishingmyspace1.html.
16. Bulletin Board Announcement of the Finnish Password List, October 2007, [Online Document] [cited 2008 Oct 07] Available HTTP http://www.bat.org/news/ view-post?postid=40546&page=1&group.