Investigating the distribution of password choices

WWW'12 - Proceedings of the 21st Annual Conference on World Wide Web

Volumn , Issue , 2012, Pages 301-310

  Malone, David ^a   Maher, Kevin ^a  

^a NATIONAL UNIVERSITY OF IRELAND   (Ireland)

Author keywords

Dictionary attack; Distribution; Passwords; Zipf

Indexed keywords

DICTIONARY ATTACK; DISTRIBUTION; HIGH FREQUENCY HF; PASSWORD CRACKING; PASSWORDS; SITE SECURITY; ZIPF; ZIPF'S LAW;

COMPUTATIONAL LINGUISTICS; COMPUTER CRIME;

WORLD WIDE WEB;

EID: 84860859593     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2187836.2187878     Document Type: Conference Paper

References (16)

1. L. A. Adamic. Zipf, power-laws, and pareto-a ranking tutorial. Xerox Palo Alto Research Center, http://www.hpl.hp.com/research/idl/papers/ranking/ ranking.html, 2000.
2. E. Arikan. An inequality on guessing and its application to sequential decoding. IEEE Transactions on Information Theory, 42, Janurary 1996.
3. A. Clauset, C. Shalizi, and M. Newman. Power-law distributions in empirical data. SIAM review, 51(4):661-703, 2009.
4. M. Dell'Amico, P. Michiardi, and Y. Roudier. Password strength: An empirical analysis. In INFOCOM, pages 1-9, 2010.
5. D. E. Eastlake, J. I. Schiller, and S. Crocker. RFC 4086: Randomness requirements for security. pages 1-47, 2005.
6. W. Hastings. Monte carlo sampling methods using markov chains and their applications. Biometrika, 57(1):97, 1970.
7. C. Herley. So long, and no thanks for the externalities: the rational rejection of security advice by users. In Proceedings of the 2009 workshop on New security paradigms, pages 133-144. ACM, 2009.
8. D. Malone and W. Sullivan. Guesswork is not a substitute for entropy. In Proceedings of the Information Technology and Telecommunications Conference, 2005.
9. D. Malone and W. G. Sullivan. Guesswork and entropy. IEEE Transactions on Information Theory, 50(3):525-526, 2004.
10. J. L. Massey. Guessing and entropy. In In Proceedings of the 1994 IEEE International Symposium on Information Theory, page 204, 1994.
11. M. McDowell, J. Rafail, and S. Hernan. Cyber security tip. http://www.us-cert.gov/cas/tips/ST04-002.html, 2009.
12. N. Metropolis, A. Rosenbluth, M. Rosenbluth, A. Teller, and E. Teller. Equation of state calculations by fast computing machines. The journal of chemical physics, 21(6):1087, 1953.
13. J. O. Pliam. The disparity between work and entropy in cryptology. Theory of Cryptography Library: Record, pages 98-24, 1998.
14. V. Samar. Unified login with pluggable authentication modules (PAM). In Proc. CCS'96, pages 1-10, 1996.
15. S. Schechter, C. Herley, and M. Mitzenmacher. Popularity is everything: a new approach to protecting passwords from statistical-guessing attacks. In Proc. HotSec'10, pages 1-6, 2010.
16. twitter.com. Source code from twitter registration page. view-source:https://twitter.com/signup(searchfortwttr.BANNEDPASSWORDS, 2010.