User password repetitive patterns analysis and visualization

Xiaoying Yu, Qi Liao

Research output: Contribution to journalArticlepeer-review

7 Scopus citations

Abstract

Purpose: - Passwords have been designed to protect individual privacy and security and widely used in almost every area of our life. The strength of passwords is therefore critical to the security of our systems. However, due to the explosion of user accounts and increasing complexity of password rules, users are struggling to find ways to make up sufficiently secure yet easy-to-remember passwords. This paper aims to investigate whether there are repetitive patterns when users choose passwords and how such behaviors may affect us to rethink password security policy. Design/methodology/approach: - The authors develop a model to formalize the password repetitive problem and design efficient algorithms to analyze the repeat patterns. To help security practitioners to analyze patterns, the authors design and implement a lightweight, Web-based visualization tool for interactive exploration of password data. Findings: - Through case studies on a real-world leaked password data set, the authors demonstrate how the tool can be used to identify various interesting patterns, e.g. shorter substrings of the same type usedto make uplonger strings, which are then repeated tomakeup the final passwords, suggesting that the length requirement of password policy does not necessarily increase security. Originality/value - The contributions of this study are two-fold. First, the authors formalize the problem of password repetitive patterns by considering both short and long substrings and in both directions, which have not yet been considered in past. Efficient algorithms are developed and implemented that can analyze various repeat patterns quickly evenin large data set. Second, the authors design and implement four novel visualization views that are particularly useful for exploration of password repeat patterns, i.e. the character frequency charts view, the short repeat heatmap view, the long repeat parallel coordinates view and the repeat word cloud view.

Original languageEnglish
Pages (from-to)93-115
Number of pages23
JournalInformation and Computer Security
Volume24
Issue number1
DOIs
StatePublished - Mar 14 2016

Keywords

  • Computer security
  • Information visualization
  • Password analysis

Fingerprint

Dive into the research topics of 'User password repetitive patterns analysis and visualization'. Together they form a unique fingerprint.

Cite this