User Study, Analysis, and Usable Security of Passwords Based on Digital Objects
| Autor: | Tara Whalen, Mohammad Mannan, Robert Biddle, P. C. van Oorschot |
|---|---|
| Rok vydání: | 2011 |
| Předmět: |
Password
Password policy Cognitive password Computer Networks and Communications computer.internet_protocol Computer science Password cracking Computer security computer.software_genre Login One-time password S/KEY Password strength ComputingMilieux_MANAGEMENTOFCOMPUTINGANDINFORMATIONSYSTEMS Message authentication code Password authentication protocol Safety Risk Reliability and Quality Password psychology computer |
| Zdroj: | IEEE Transactions on Information Forensics and Security. 6:970-979 |
| ISSN: | 1556-6021 1556-6013 |
| Popis: | Despite all efforts, password schemes intended to deploy or encourage the use of strong passwords have largely failed. As an alternative to enable users to create, maintain, and use high-quality passwords willingly, we propose Object-based Password (ObPwd), leveraging the universe of personal or personally meaningful digital content that many users now own or have access to. ObPwd converts user-selected digital objects to high-entropy text passwords. Memorization of exact passwords is replaced by remembering password objects. We present the design details, variants, and usability and security analysis of ObPwd, and report on the results of a hybrid in-lab/at-home user study on 32 participants. The results suggest the scheme has good usability, with excellent memorability, acceptable login times, and very positive user perception, achieved while providing strong security for the threat context explored. We believe this work lays the foundation for a promising password selection paradigm. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|