Graphical Dictionaries and the Memorable Space of Graphical Passwords
Graphical Dictionaries and the Memorable Space of Graphical Passwords
复制标题
DOI：
--
复制
发表时间：
2004-08
期刊：
影响因子：
--
通讯作者：
Julie Thorpe;P. V. Oorschot
中科院分区：
文献类型：
--
作者：
Julie Thorpe;P. V. Oorschot
在常见的文本密码方案中，用户选择易于回忆的密码。由于令人难忘的密码通常会显示模式，因此它们可以被使用攻击字典的暴力密码破解者利用。这让我们不禁要问，哪些类别的图形密码用户会觉得难忘。我们假设一个这样的类支持的视觉回忆，这可以被描述为镜像对称（反射）密码的认知研究的集合。我们假设攻击者会将此类放入图形密码的攻击字典中，并提出攻击者如何订购此类字典。我们通过分析镜像对称密码空间相对于杰明等人（1999）的图形密码方案的完整密码空间的大小，扩展了现有的图形密码分析，并表明它是指数较小的（假设适当的反射轴）。这种尺寸的减小可以通过更长的密码来补偿：长度约为L + 5的镜像对称密码的空间的大小超过了5 × 5网格上对应长度L ≤ 14的完整密码空间的大小。这项工作可以用来帮助制定图形密码用户的密码规则，并在创建积极的图形密码检查器。
In commonplace textual password schemes, users choose passwords that are easy to recall. Since memorable passwords typically exhibit patterns, they are exploitable by brute-force password crackers using attack dictionaries. This leads us to ask what classes of graphical passwords users find memorable. We postulate one such class supported by a collection of cognitive studies on visual recall, which can be characterized as mirror symmetric (reflective) passwords. We assume that an attacker would put this class in an attack dictionary for graphical passwords and propose how an attacker might order such a dictionary. We extend the existing analysis of graphical passwords by analyzing the size of the mirror symmetric password space relative to the full password space of the graphical password scheme of Jermyn et al. (1999), and show it to be exponentially smaller (assuming appropriate axes of reflection). This reduction in size can be compensated for by longer passwords: the size of the space of mirror symmetric passwords of length about L + 5 exceeds that of the full password space for corresponding length L ≤ 14 on a 5 × 5 grid. This work could be used to help in formulating password rules for graphical password users and in creating proactive graphical password checkers.