Desktop security and usability trade-offs: An evaluation of password management systems

Information Systems Security

Volumn 14, Issue 2, 2005, Pages 10-19

  Mulligan, J ^a   Elbirt, A J ^a  

^a University of Massachusetts   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 85011548130     PISSN: 1065898X     EISSN: None     Source Type: Journal    
DOI: 10.1201/1086/45241.14.2.20050501/88289.3     Document Type: Article

References (22)

1. Cranor, L. and S. Garfinkel, “Secure or Usable?,” IEEE Security & Privacy, 2(5), 16-18, 2004.
2. Weirich, D. and M. Sasse, “Pretty Good Persuasion: A First Step to Effective Password Security in the Real World,” Proceedings of the 2001 Workshop on New Security Paradigms, pp. 137-143, September 11-13, Cloudcroft, NM, 2001.
3. Summers, W. and E. Bosworth, “Password Policy: The Good, The Bad, The Ugly,” Proceedings of the Winter International Symposium on Information and Communication Technologies, Cancun, Mexico, 2004, pp. 1-6.
4. Ives, B., K. Walsh, and H. Schneider, “The Domino Effect of Password Reuse,” Communications of the ACM, 47(4), 75-78, 2004.
5. Gehringer, E., “Choosing Passwords: Security and Human Factors,” IEEE International Symposium on Technology and Society — ISTAS ‘02, June 6-8, 2002, pp. 369-373.
6. Adams, A. and M. Sasse: “Users Are Not the Enemy,” Communications of the ACM, 42(12), 40-46, 1999.
7. Patrick, A., A. Long, and S. Flinn, “HCI and Security Systems,” Conference on Human Factors in Computing Systems — CHI ‘03, Ft. Lauderdale, FL, April 2003, pp. 1056-1057.
8. Patterson, B., “Securing User Passwords,” Communications of the ACM, 43(4), 11-12, 2000.
9. Yan, J., A. Blackwell, R. Anderson, and A. Grant, “Password Memorability and Security: Empirical Results,” IEEE Security & Privacy, 2(5), 25-31, 2004.
10. Pinkas, B. and T. Sander, “Securing Passwords against Dictionary Attacks,” Proceedings of the Ninth ACM Conference on Computer and Communications Security, Washington, D.C., November 2002, pp. 161-170.
11. Avolio, F., “Putting It Together: A Multi-Dimensional Approach to Internet Security,” net Worker, 2(2), 15-22, 1998.
12. Jain, A.K., A. Ross, and S. Prabhakar, “An Introduction to Biometric Recognition,” IEEE Transactions on Circuits and Systems for Video Technology, 14(1), 4-20, 2004.
13. Bunnell, J., J. Podd, R. Henderson, R. Napier, and J. Kennedy-Moffatt, “Cognitive, Associative and Conventional Passwords: Recall and Guessing Rates,” Computers & Security, 16(7), 1997.
14. Farrow, R., “Not So Secret Passwords,” December 2004, http://www.spirit.com/Network/net0101.html.
15. Coleridge, R., “The Cryptography API, or How to Keep a Secret,” August 19, 1996, available at http://msdn.microsoft.com/library/default.asp? url=/library/en-us/dncapi/html/pkcs12.asp.
16. Farkas, S., “Which Cryptographic Operations Are Available?,” March 8, 2004, http://blogs. msdn.com/shawnfa/archive/2004/03/08/86233. aspx.
17. Schneier, B., Applied Cryptography, 2nd ed., John Wiley & Sons, New York, 1996.
18. Bolyard, N., “Re: Password Manager File,” November 13, 2002, available at http://groups- beta.google.com/group/netscape.public.mozilla. security/msg/d8b5fc4a5553de64.
19. Staikos, G., “KWallet — The KDE Wallet System,” October 2003, http://www.staikos.net/~staikos/papers/2003/kwallet-kastle-2003.ps.
20. Hollebeek, T. and J. Viega, “Bad Cryptography in the Netscape Browser: A Case Study,” http://www.viega.org/papers/netscape-draft.ps.
21. Hatch, B., J. Lee, and G. Kurtz, Hacking Linux Exposed, 2nd ed., McGraw-Hill/Osborne, Berkeley, CA, 2003, p. 381.
22. Staikos, G., “Re: Password less Wallets,” November 2004, available at http://dot.kde.org/1100328273/1100333612/1100342945/1100347133/1100348011/1100362286/1100438646.