Home › Categories › Technology› Protecting Passwords From Statistical Guessing Attacks: A New Internet-Scale Approach

Protecting Passwords From Statistical Guessing Attacks: A New Internet-Scale Approach.pdf

hotsec2010.pdf

Preview of Protecting Passwords from Statistical Guessing Attacks: A New Internet-Scale Approach

🔗 Source: eecs.harvard.edu

📊 Size: 319 KB

📄 Pages: 6 pages

⬇️ Downloads: 21

Summary

Instead of relying on complex password policies or strength meters, the method focuses on limiting the popularity of passwords.

Key elements:

1. Oracle for Password Popularity: An oracle is created using a probabilistic data structure known as a count-min sketch. This sketch tracks existing user passwords and updates with each new one, identifying passwords that become too popular.

2. Minimizing False Positives: Unlike traditional applications of probabilistic data structures which aim for minimal false positives, this system sets a minimum acceptable rate to confound attackers who might query the oracle or obtain a copy.

3. Benefits:

- Security: Prevents attackers from guessing popular passwords, significantly reducing the fraction of accounts compromised.
- Usability: Users don't need to learn complex rules; they are only inconvenienced when choosing a password that's already too common.

4. Implementation: Leverages existing data from large-scale authentication systems like those used by major online platforms (AOL, Facebook, Google, Microsoft, Yahoo). Uses Bloom filters to efficiently store and query password popularity information.

Download File

Description

A novel method protects user passwords from statistical guessing by limiting popularity, using a count-min sketch data structure to identify and block commonly chosen passwords. This approach ensures a minimum false-positive rate to thwart attackers.

Technical Information

File Format: PDF
File Size: 319 KB
Pages: 6
Language: EN
Total Downloads: 21
Last Updated: 6 days ago

Document Overview

This PDF document about Protecting Passwords from Statistical Guessing Attacks: A New Internet-Scale Approach provides comprehensive information and guidance. Whether you're a beginner or advanced user, this resource offers valuable insights into Protecting Passwords from Statistical Guessing Attacks: A New Internet-Scale Approach.