PSV (Password Security Visualizer): From Password Checking to User Education
PSV (Password Security Visualizer): From Password Checking to User Education
复制标题
DOI：
10.1007/978-3-319-58460-7_13
复制
发表时间：
2017-07
期刊：
影响因子：
--
通讯作者：
Nouf Aljaffan;Haiyue Yuan;Shujun Li
中科院分区：
文献类型：
--
作者：
Nouf Aljaffan;Haiyue Yuan;Shujun Li
本文介绍了密码安全可视化（PSV），一个交互式的可视化系统，专门设计的密码安全教育。PSV可以被看作是一个可重新配置的“盒子”，包含不同的主动密码检查器（PPC）和密码安全信息的可视化工具，允许它像“多合一”或“混合”PPC一样使用。PSV可以提供许多传统PPC中不存在的新功能，因此具有更大的潜力来实现其教育用户的目标。使用纯粹的客户端基于Web的技术，我们实现了一个原型的PSV作为一个开源软件工具的2-D动画画布。为了评估我们实现的PSV原型对传统PPC的实际性能，我们进行了一个半结构化的采访，涉及20人参与。我们对结果的定性分析表明，PSV被认为是最具信息性的，并被大多数参与者推荐为一种良好的教育工具。据我们所知，PSV是第一个将不同PPC结合在一起进行用户教育的系统，而用户研究是第一个比较不同PPC（以及类似PPC的密码安全工具，如PSV）的教育效果的系统。
This paper presents the Password Security Visualizer (PSV), an interactive visualization system specifically designed for password security education. PSV can be seen as a reconfigurable “box” containing different proactive password checkers (PPCs) and visualizers of password security information, allowing it to be used like a “many in one” or “hybrid” PPC. PSV can provide many new features that do not exist in traditional PPCs, thus having a greater potential to achieve its goals of educating users. Using purely client-side Web-based technologies, we implemented a prototype of PSV as an open-source software tool on a 2-D animated canvas. To evaluate the actual performance of our implemented PSV prototype against traditional PPCs, we conducted a semi-structured interview involving 20 human participants. Our qualitative analysis of the results showed that PSV was considered the most informative and recommended by most participants as a good educational tool. To the best of our knowledge, PSV is the first system combining different PPCs together for user education, and the user study is the first of this kind on comparing educational effectiveness of different PPCs (and PPC-like password security tools such as PSV).