Do strong web passwords accomplish anything?

2nd USENIX Workshop on Hot Topics in Security, HotSec 2007

Volumn , Issue , 2007, Pages

  Florencio, Dinei ^a   Herley, Cormac ^a   Coskun, Baris ^b  

^a MICROSOFT RESEARCH   (United States)

^b POLYTECHNIC UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME;

BRUTE-FORCE ATTACK; GUESSING ATTACKS; KEYLOGGING; ONLINE USERS; PASSWORD STRENGTH; PHISHING; STRONG PASSWORD; WEAK PASSWORDS;

AUTHENTICATION;

EID: 85044211678     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (17)

1. http://www.smat.us/sanity/.
2. http://www.openwall.com/john/.
3. Department of Defense Password Management Guideline. Technical Report CSC-STD-002-85, U.S. Dept. of Defense, Computer Security Center, 1985.
4. A. Adams and M. A. Sasse. Users are not the enemy. Commun. ACM, 42(12), 1999.
5. A. Bortz, D. Boneh, and P. Nandy. Exposing Private Information by Timing Web Applications. WWW 2007, Ban®.
6. W. Cheswick, S.M.Bellovin, and A. Rubin. Firewalls and Internet Security. Addison-Wesley, 2003.
7. G. D. Crescenzo, R. J. Lipton, and S. Walsh. Perfectly secure password protocols in the bounded retrieval model. In Third Theory of Cryptography Conference, TCC 2006, New York, NY, USA, pages 225{244, March 2006.
8. Dinei Florêncio and Cormac Herley. How To Login From an Internet Cafe without Worrying about Keyloggers. Symp. on Usable Privacy and Security, 2006.
9. D. Florêncio and C. Herley. A Large-Scale Study of Web Password Habits. WWW 2007, Ban®.
10. D. Florêncio and C. Herley. KLASSP: Entering Passwords on a Spyware Infected Machine. ACSAC, 2006.
11. K. J. Hole and V. Moen and T. Tjostheim. Case Study: Online banking Security. IEEE Security & Privacy Magazine, 2006.
12. G. Kedem and Y. Ishihara. Brute force attack on unix passwords with simd computer. In Proceedings of the 8th USENIX Security Symposium, Washington, D.C., pages 93{98, August 1999.
13. A. Pashalidis and C. J. Mitchell. Impostor: A single sign-on system for use from untrusted devices. Proceedings of IEEE Globecom, 2004.
14. B. Pinkas and T. Sander. Securing passwords against dictionary attacks. In CCS '02: Proceedings of the 9th ACM conference on Computer and communications security, pages 161{170, 2002.
15. R. Morris and K. Thompson. Password Security: A Case History. Comm. ACM, 1979.
16. D. Seeley. Password cracking: a game of wits. Commun. ACM, 32(6), 1989.
17. J. Yan, A. Blackwell, R. Anderson, and A. Grant. The memorability and security of passwords { some empirical results, 2000.