Cracking associative passwords

  • Authors:
  • Kirsi Helkala;Nils Kalstad Svendsen;Per Thorsheim;Anders Wiehe

  • Affiliations:
  • Gjøvik University College, Norway;Gjøvik University College, Norway;EVRY Consulting, Norway;Gjøvik University College, Norway

  • Venue:
  • NordSec'12 Proceedings of the 17th Nordic conference on Secure IT Systems
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

Users are required and expected to generate and remember numerous good passwords, a challenge that is next to impossible without a systematic approach to the task. Associative passwords in combination with guidelines for the construction of 'Word', 'Mixed', and 'Non-word' passwords has been validated as an effective approach to creating strong, memorable passwords. The strength of associative passwords has previously been assessed by entropy-based metrics. This paper evaluates the strength of a set of collected associative passwords using a variety of password-cracking techniques. Analysis of the cracking sessions shows that current techniques for cracking passwords are not effective against associative passwords.