2019IEEE AccessOpen access

Alphapwd: A Password Generation Strategy Based on Mnemonic Shape

Jianhua Song, Degang Wang, Zhongyue Yun, Xiao Han

Open full text 20 citations

Abstract

Password-based authentication is the first line of defense of most information systems. Password security concerns the security of the whole information system. Therefore, administrators will formulate corresponding password strategies to help users improve the security and usability of passwords. Several common password composition strategies are analyzed. Aiming at the problem that traditional password strategies cannot take security and usability into account, a new password generation strategy based on mnemonic shape, Alphapwd, is proposed. Alphapwd combines the order of writing strokes of letters with password generation to help users create safe and memorable passwords. The designed experiment compares the security of Alphapwd-based passwords with three leaked password sets. The result shows that Alphapwd-based password is generally stronger than real password sets in resisting unknown attacks. In addition, by analyzing the passwords generated by Alphapwd and KbCg (Keyboard Change), SpIns (Special Character Insertion), it can be found that the security of Alphapwd password is better than that of KbCg mnemonic password, and Alphapwd password is easier to remember than SpIns mnemonic password.

Open-access reader

About this research paper

What this paper is about

Password-based authentication is the first line of defense of most information systems. Password security concerns the security of the whole information system. Therefore, administrators will formulate corresponding password strategies to help users improve the security and usability of passwords. Several common password composition strategies are analyzed. Aiming at the problem that traditional password strategies cannot take security and usability into account, a new password generation strategy based on mnemonic shape, Alphapwd, is proposed. Alphapwd combines the order of writing strokes of letters with password generation to help users create safe and memorable passwords. The designed experiment compares the security of Alphapwd-based passwords with three leaked password sets. The result shows that Alphapwd-based password is generally stronger than real password sets in resisting unknown attacks. In addition, by analyzing the passwords generated by Alphapwd and KbCg (Keyboard Change), SpIns (Special Character Insertion), it can be found that the security of Alphapwd password is better than that of KbCg mnemonic password, and Alphapwd password is easier to remember than SpIns mnemonic password.

Why it matters

OpenAlex reports 20 citations for this work. Citation counts describe recorded attention and do not establish research quality.

Key contribution

A contribution statement is not available in the OpenAlex record.

Method / approach

Method details are not available in the OpenAlex metadata.

Main findings

Findings are not separately available in the OpenAlex metadata.

Limitations

Limitations are not available in the OpenAlex metadata.

Applications

Application details are not available in the OpenAlex metadata.

Available abstract

Password-based authentication is the first line of defense of most information systems. Password security concerns the security of the whole information system. Therefore, administrators will formulate corresponding password strategies to help users improve the security and usability of passwords. Several common password composition strategies are analyzed. Aiming at the problem that traditional password strategies cannot take security and usability into account, a new password generation strategy based on mnemonic shape, Alphapwd, is proposed. Alphapwd combines the order of writing strokes of letters with password generation to help users create safe and memorable passwords. The designed experiment compares the security of Alphapwd-based passwords with three leaked password sets. The result shows that Alphapwd-based password is generally stronger than real password sets in resisting unknown attacks. In addition, by analyzing the passwords generated by Alphapwd and KbCg (Keyboard Change), SpIns (Special Character Insertion), it can be found that the security of Alphapwd password is better than that of KbCg mnemonic password, and Alphapwd password is easier to remember than SpIns mnemonic password.

Key concepts: Password, Cognitive password, Password strength, Password policy, Computer science, One-time password, S/KEY, Computer security

Related papers

Back to paper searchBrowse research topicsOriginal source
Alphapwd: A Password Generation Strategy Based on Mnemonic Shape — Research Paper | ScholarLens