Password advice shouldn't be boring: Visualizing password guessing attacks

eCrime Researchers Summit, eCrime

Volumn , Issue , 2013, Pages

  Zhang Kennedy, Leah ^a   Chiasson, Sonia ^a   Biddle, Robert ^a  

^a CARLETON UNIVERSITY   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

SURVEYS; VISUAL COMMUNICATION;

BRUTE FORCE; HOME USERS; INFOGRAPHIC; LEARNING OUTCOME; MENTAL MODEL; PASSWORD GUESSING ATTACK; WEAK PASSWORDS;

AUTHENTICATION;

EID: 84900811528     PISSN: 21591237     EISSN: 21591245     Source Type: Conference Proceeding    
DOI: 10.1109/eCRS.2013.6805770     Document Type: Conference Paper

References (41)

1. R. Biddle, S. Chiasson, and P. C. van Oorschot, "Graphical passwords learning from the first twelve years," ACM Computing Surveys, vol. 44, no. 4, 2012.
2. D. Florencio and C. Herley, "Where do security policies come from," in Proceedings of the 10th Symposium on Usable Privacy and Security, 2010.
3. D. Weirich and M. Sasse, "Pretty good persuasion a first step towards effective password security in the real world," in Proceedings of the New Security Paradigms Workshop (NSPW). ACM, 2001, pp. 137-143.
4. R. Wash, "Folk models of home computer security," in Proceedings of the 6th Symposium on Usable Privacy and Security. ACM, 2010.
5. C. Herley, "So long, and no thanks for the externalities," in New Security Paradigms Workshop (NSPW), 2009.
6. S. G̈orling, "The myth of user education," in Virus Bulletin Conference, vol. 11, 2006, p. 13.
7. J. Nielsen, "User education is not the answer to security problems," Alertbox, October, 2004.
8. R. Mayer, W. Bove, A. Bryman, R. Mars, and L. Tapangco, "When less is more Meaningful learning from visual and verbal summaries of science textbook lessons." Journal of educational psychology, vol. 88, no. 1, p. 64, 1996.
9. L. Chanlin, "The effects of verbal elaboration and visual elaboration on student learning." International Journal of Instructional Media, vol. 24, no. 4, pp. 333-39, 1997.
10. -, "Animation to teach students of different knowledge levels." Journal of Instructional Psychology, 1998.
11. J. Risch, "On the role of metaphor in information visualization," arXiv preprint arXiv0809.0884, 2008.
12. P. Kelley, J. Bresee, L. Cranor, and R. Reeder, "A nutrition label for privacy," in Proceedings of the 5th Symposium on Usable Privacy and Security. ACM, 2009, p. 4.
13. P. Kumaraguru, S. Sheng, A. Acquisti, L. Cranor, and J. Hong, "Teaching johnny not to fall for phish," ACM Transactions on Internet Technology (TOIT), vol. 10, no. 2, p. 7, 2010.
14. S. Srikwan and M. Jakobsson, "Using cartoons to teach internet security," Cryptologia, vol. 32, no. 2, pp. 137-154, 2008.
15. Zhang-Kennedy, L. and Chiasson, S. and Biddle, R., "Versipass," http//www.versipass.com/edusec/.
16. S. Gaw and E. Felten, "Password management strategies for online accounts," in Proceedings of the 2nd Symposium on Usable Privacy and Security. ACM, 2006, pp. 44-55.
17. M. Devillers, "Analyzing password strength," Radboud University Nijmegen, Tech. Rep, 2010.
18. F. Asgharpour, D. Liu, and L. Camp, "Mental models of security risks," Financial Cryptography and Data Security, pp. 367-377, 2007.
19. L. Camp, "Mental models of privacy and security," Technology and Society Magazine, IEEE, vol. 28, no. 3, pp. 37-46, 2009.
20. R. Wash and E. Rader, "Influencing mental models of security A research agenda," in Proceedings of the New Security Paradigms Workshop (NSPW). ACM, 2011, pp. 57-66.
21. A. Paivio, "Dual coding theory Retrospect and current status." Canadian Journal of Psychology/Revue canadienne de psychologie, vol. 45, no. 3, p. 255, 1991.
22. V. Gyselinck and H. Tardieu, "The role of illustrations in text comprehension What, when, for whom, and why?" 1999.
23. H. M. Cuevas, S. M. Fiore, and R. L. Oser, "Scaffolding cognitive and metacognitive processes in low verbal ability learners Use of diagrams in computer-based training environments," Instructional Science, vol. 30, no. 6, pp. 433-464, 2002.
24. G. Lakoff and M. Johnson, "The metaphorical structure of the human conceptual system," Cognitive Science, vol. 4, no. 2, pp. 195-208, 2010.
25. F. Raja, K. Hawkey, S. Hsu, K. Wang, and K. Beznosov, "A brick wall, a locked door, and a bandit a physical security metaphor for firewall warnings," in Proceedings of the 7th Symposium on Usable Privacy and Security. ACM, 2011.
26. A. Marcus, "Metaphors and user interfaces in the 21st century," interactions, vol. 9, no. 2, pp. 7-10, 2002.
27. Royal Bank of Canada, "Don't be a Target," Accessed March 2013, http//www.rbc.com/privacysecurity/ca/popup-dontbe-A-target.html.
28. Fontana, J., "Password life expectancy down to seconds," Accessed March 2013, http//www.zdnet.com/password-lifeexpectancy-down-to- seconds-7000009851.
29. Microsoft Developer Network, "Password Policy," Accessed March 2013, http//msdn.microsoft.com/en-us/library/ ms161959.aspx.
30. Deloitte, "P$$1234 the end of strong password-only security," Accessed March 2013, http//deloitte.com/view/ en-GX/global/industries/ technologymediatelecommunications/ tmt-predictions- 2013.
31. G. Notoatmodjo and C. Thomborson, "Passwords and perceptions," in Proceedings of the 7th Australasian Conference on Information Security-Volume 98. Australian Computer Society, Inc., 2009, pp. 71-78.
32. M. Keith, B. Shao, and P. Steinbart, "A behavioral analysis of passphrase design and effectiveness," Journal of the Association for Information Systems, vol. 10, no. 2, pp. 63-89, 2009.
33. M. Smiciklas, The Power of Infographics Using Pictures to Communicate and Connect With Your Audiences. Que Publishing, 2012.
34. S. McCloud, Reinventing comics How imagination and technology are revolutionizing an art form. William Morrow Paperbacks, 2000.
35. Wikipedia, "Password Cracking," Accessed March 2013, http//en.wikipedia.org/wiki/Password-cracking.
36. J. Yan, A. Blackwell, R. Anderson, and A. Grant, "Password memorability and security Empirical results," Security &Privacy, IEEE, vol. 2, no. 5, pp. 25-31, 2004.
37. Adams, S., "Dilbert," Accessed December 2012, http//search.dilbert.com/comic/Security.
38. Munroe, R., "XKCD a webcomic of romance, sarcasm, math, and language," Accessed December 2012, http//xkcd.com/936/.
39. Google Chrome Team, McCloud, S., "Google Chrome," Accessed June 2012, http//www.google.com/googlebooks/chrome.
40. C. Dormann and R. Biddle, "A review of humor for computer games Play, laugh and more," Simulation &gaming, vol. 40, no. 6, pp. 802-824, 2009.
41. A. Nijholt, "Embodied agents A new impetus to humor research," in The April Fools' Day Workshop on Computational Humour, ser. Twente Workshops on Language Technology, vol. 20. University of Twente, 2002.