A note on proactive password checking
A note on proactive password checking
复制标题
关于主动密码检查的注意事项
DOI：
--
复制
发表时间：
2001
期刊：
影响因子：
--
通讯作者：
Jeff Yan
中科院分区：
文献类型：
--
作者：
Jeff Yan
目前，主动密码检查算法都是基于字典攻击的原理，对一些低熵的弱密码往往防范不力。本文提出了一种通过（粗略地）测量熵来处理这类新弱密码的新方法。作为基于熵的主动密码检查的第一步，给出了一个利用有效模式来防止低熵密码的简单示例。
Nowadays, proactive password checking algorithms are based on the philosophy of the dictionary attack, and they often fail to prevent some weak passwords with low entropy. In this paper, a new approach is proposed to deal with this new class of weak passwords by (roughly) measuring entropy. A simple example is given to exploit effective patterns to prevent low-entropy passwords as the first step of entropy-based proactive password checking.