WordMarkov: A New Password Probability Model of Semantics
Authors:
- 23 May 2022
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- p. 3034-3038
Abstract
To date there are few researches on the semantic information of passwords, which leaves a gap preventing us from fully understanding the passwords characteristic and security. We propose a new password probability model for semantic information based on Markov Chain with both generalization and accuracy, called WordMarkov, that can capture the semantic essence of password samples. Further, we evaluate our design via password guessing attacks, on six real-world datasets, and we show that WordMarkov obtains 24.29%–67.37% improvement over the state-of-the-art password probability models. Even more surprising is that WordMarkov achieves 75.35%–96.34% attack improvement on "long" passwords, indicating the importance of semantic parts in long passwords.Keywords
Funding Information
- China Postdoctoral Science Foundation
This publication has 13 references indexed in Scilit:
- TransPCFG : Transferring the Grammars From Short Passwords to Guess Long Passwords EffectivelyIEEE Transactions on Information Forensics and Security, 2020
- Monte Carlo Strength Evaluation2015
- Cracking-Resistant Password Vaults Using Natural Language Encoders2015
- A Study of Probabilistic Password Models2014
- Effect of grammar on security of long passwords2013
- Honeywords2013
- The Benefits of Understanding Passwords2012
- Password Cracking Using Probabilistic Context-Free Grammars2009
- Fast dictionary attacks on passwords using time-space tradeoff2005
- Password securityCommunications of the ACM, 1979