Metrics of password management policy

Authors:
Carlos Villarrubia;Eduardo Fernández-Medina;Mario Piattini
Affiliations:
Alarcos Research Group, Information Systems and Technologies Department, UCLM-Soluziona Research and Development Institute, University of Castilla-La Mancha, Ciudad Real, Spain;Alarcos Research Group, Information Systems and Technologies Department, UCLM-Soluziona Research and Development Institute, University of Castilla-La Mancha, Ciudad Real, Spain;Alarcos Research Group, Information Systems and Technologies Department, UCLM-Soluziona Research and Development Institute, University of Castilla-La Mancha, Ciudad Real, Spain
Venue:
ICCSA'06 Proceedings of the 2006 international conference on Computational Science and Its Applications - Volume Part III
Year:
2006

Citing 7
Cited 1

Password security: a case history

Communications of the ACM
Adversary work factor as a metric for information assurance

Proceedings of the 2000 workshop on New security paradigms
Securing passwords against dictionary attacks

Proceedings of the 9th ACM conference on Computer and communications security
Making Passwords Secure and Usable

HCI 97 Proceedings of HCI on People and Computers XII
Analyzing security costs

Communications of the ACM - E-services: a cornucopia of digital offerings ushers in the next Net-based evolution
Information Assurance Measures and Metrics " State of Practice and Proposed Taxonomy

HICSS '03 Proceedings of the 36th Annual Hawaii International Conference on System Sciences (HICSS'03) - Track 9 - Volume 9
A convenient method for securely managing passwords

WWW '05 Proceedings of the 14th international conference on World Wide Web

An Expert Panel Approach on Developing a Unified System Authentication Benchmarking Index

International Journal of Interdisciplinary Telecommunications and Networking

Quantified Score

Hi-index	0.00

Visualization

Abstract

The necessity to management the computer security of an institution implies an evaluation phase and the most common method to carry out this evaluation it consists on the use of a set of metrics. As any system of information needs of an authentication mechanism being the most used one those based on password, in this article we propose a set of metric of password management policies based on the most outstanding factors in this authentication mechanism. Together with the metrics, we propose a quality indicator derived from these metrics that allows us to have a global vision of the quality of the password management policy used and a complete example of calculation of the proposed metric. Finally, we will indicate the future works to be performed to check the validity and usefulness of the proposed metrics.