Using and managing multiple passwords: A week to a view
Using and managing multiple passwords: A week to a view
复制标题
DOI：
10.1016/j.intcom.2011.03.007
复制
发表时间：
2011-05-01
影响因子：
1.3
通讯作者：
Johnson, Hilary
中科院分区：
文献类型：
--
作者：
Grawemeyer, Beate;Johnson, Hilary
需要安全策略来保护信息免受未经授权的访问，并应对用户在创建、尤其是管理不断增加的密码时所面临的挑战。本文从日常生活的角度考察了真实密码的使用情况。它展示了一项实证研究的结果，参与者在7天内完成了密码日记，然后进行了汇报访谈，以进一步了解和理解用户行为。报告的结果涉及正在使用的密码数量、参与者创建的密码类型、不同密码与敏感服务之间的关系、参与者如何检索其密码，以及用户在密码管理中采取的不同策略。最后，本文提供了一套高级密码指南，并提出了支持创建、编码、检索和执行多个密码的机制建议。(C)2011爱思唯尔B.V.保留所有权利。
Security policies are required that protect information from unauthorised access, and also respect challenges users face in creating, and particularly managing, increasing numbers of passwords. This paper investigates real password use in the context of daily life. It presents the results of an empirical study where participants completed a password diary over 7 days, followed by debrief interviews to gain further knowledge and understanding of user behaviour. The results reported relate to how many passwords are in use, the types of passwords participants created, the relationships between different passwords and to sensitive services, how participants retrieved their passwords and finally, the different strategies adopted by users in their management of passwords. The paper concludes by providing a high level set of password guidelines, along with suggestions for mechanisms to support creating, encoding, retrieving and executing multiple passwords. (C) 2011 Elsevier B.V. All rights reserved.