Entry Shay:2016:DPP from tissec.bib
Last update: Sun Oct 15 02:58:48 MDT 2017
Top |
Symbols |
Numbers |
Math |
A |
B |
C |
D |
E |
F |
G |
H |
I |
J |
K |
L |
M |
N |
O |
P |
Q |
R |
S |
T |
U |
V |
W |
X |
Y |
Z
BibTeX entry
@Article{Shay:2016:DPP,
author = "Richard Shay and Saranga Komanduri and Adam L. Durity
and Phillip (Seyoung) Huh and Michelle L. Mazurek and
Sean M. Segreti and Blase Ur and Lujo Bauer and Nicolas
Christin and Lorrie Faith Cranor",
title = "Designing Password Policies for Strength and
Usability",
journal = j-TISSEC,
volume = "18",
number = "4",
pages = "13:1--13:??",
month = may,
year = "2016",
CODEN = "ATISBQ",
DOI = "https://doi.org/10.1145/2891411",
ISSN = "1094-9224 (print), 1557-7406 (electronic)",
ISSN-L = "1094-9224",
bibdate = "Sat May 21 08:19:26 MDT 2016",
bibsource = "http://portal.acm.org/;
http://www.math.utah.edu/pub/tex/bib/tissec.bib",
abstract = "Password-composition policies are the result of
service providers becoming increasingly concerned about
the security of online accounts. These policies
restrict the space of user-created passwords to
preclude easily guessed passwords and thus make
passwords more difficult for attackers to guess.
However, many users struggle to create and recall their
passwords under strict password-composition policies,
for example, ones that require passwords to have at
least eight characters with multiple character classes
and a dictionary check. Recent research showed that a
promising alternative was to focus policy requirements
on password length instead of on complexity. In this
work, we examine 15 password policies, many focusing on
length requirements. In doing so, we contribute the
first thorough examination of policies requiring longer
passwords. We conducted two online studies with over
20,000 participants, and collected both usability and
password-strength data. Our findings indicate that
password strength and password usability are not
necessarily inversely correlated: policies that lead to
stronger passwords do not always reduce usability. We
identify policies that are both more usable and more
secure than commonly used policies that emphasize
complexity rather than length requirements. We also
provide practical recommendations for service providers
who want their users to have strong yet usable
passwords.",
acknowledgement = ack-nhfb,
articleno = "13",
fjournal = "ACM Transactions on Information and System Security",
journal-URL = "http://portal.acm.org/browse_dl.cfm?idx=J789",
}
Related entries
- alternative,
2(1)3,
2(1)34,
2(3)295,
10(4)3,
12(3)16,
15(2)10,
15(4)15,
17(2)8,
17(4)14
- always,
14(3)25,
15(3)14
- attacker,
2(2)159,
8(1)78,
10(1)4,
10(4)3,
10(4)6,
11(3)12,
11(3)15,
12(1)4,
12(2)12,
12(3)17,
12(4)22,
13(4)37,
14(1)7,
14(1)13,
14(4)31,
15(1)2,
15(4)16,
17(2)8,
17(3)11,
17(4)13,
17(4)16,
18(1)1,
18(2)7
- Bauer, Lujo,
12(3)19,
14(1)2
- becoming,
14(3)25,
16(3)11
- both,
1(1)26,
1(1)93,
2(1)65,
2(4)416,
9(2)181,
10(1)4,
10(3)12,
11(1)3,
11(1)4,
11(2)2,
11(3)14,
11(3)15,
11(3)16,
11(4)22,
12(1)2,
12(2)13,
12(3)15,
12(4)20,
13(4)30,
13(4)33,
14(3)24,
15(1)5,
15(2)10,
15(3)11,
15(3)13,
16(1)4,
16(2)5,
16(3)10,
16(4)17,
17(3)9,
18(1)1,
18(4)14
- check,
2(1)65,
10(2)7,
12(2)10,
12(3)19,
16(2)5,
17(3)10,
18(2)8
- class,
2(2)177,
9(4)391,
10(1)2,
10(1)3,
10(4)5,
11(2)1,
11(4)19,
12(1)2,
12(3)18,
12(4)20,
13(3)21,
14(1)13,
16(1)2,
16(4)17,
18(2)5
- collected,
11(2)3,
12(2)8,
15(4)17,
16(2)8,
17(3)10,
17(4)14,
18(2)7,
18(3)11
- commonly,
11(3)14,
11(3)16,
13(1)10,
13(3)21,
16(2)7
- complexity,
2(1)65,
9(4)391,
9(4)421,
10(2)5,
10(4)5,
11(2)6,
12(3)16,
12(3)18,
12(4)20,
13(4)36,
13(4)40,
14(1)3,
14(1)14,
15(4)16,
16(1)3,
16(1)4,
16(3)10,
17(4)16,
18(2)6,
18(3)10
- conducted,
10(4)4,
14(1)10,
16(4)14,
18(4)14
- contribute,
15(1)4,
15(3)12
- correlated,
10(1)4,
12(1)4
- create,
12(2)11,
12(2)12,
14(1)9,
18(1)1,
18(2)5
- designing,
2(1)34,
10(4)6,
16(4)15
- dictionary,
1(1)3,
2(3)230,
9(3)235,
10(4)5,
13(4)35,
14(2)17,
17(4)15,
18(1)1
- difficult,
11(2)2,
11(2)5,
11(3)15,
11(3)16,
13(3)28,
16(2)5,
17(1)4,
17(3)12,
17(4)16,
18(3)9
- doing,
11(3)16,
14(1)2,
17(1)2
- easily,
12(1)6,
14(1)7,
14(1)11,
16(4)17,
17(2)6,
17(3)11,
17(3)12
- emphasize,
17(3)12
- examination,
13(4)30
- examine,
10(4)6,
11(2)3,
13(4)35,
14(4)31,
18(2)6,
18(4)12
- example,
10(4)5,
12(1)1,
12(2)11,
12(3)19,
12(4)20,
13(3)20,
13(4)30,
13(4)35,
13(4)39,
13(4)40,
15(2)10,
16(1)3,
16(2)5,
16(3)10,
17(1)2,
17(1)4,
18(1)1,
18(2)8
- finding,
12(2)10,
13(1)10,
13(3)20,
15(2)7,
15(4)15,
16(1)4,
17(4)14,
18(1)1
- first,
2(1)34,
2(1)105,
2(4)354,
9(2)181,
10(4)6,
11(2)3,
11(2)4,
11(3)13,
11(4)18,
11(4)22,
12(1)3,
12(1)5,
12(3)18,
12(4)22,
13(4)31,
13(4)32,
14(1)13,
14(3)25,
14(4)30,
14(4)31,
15(4)17,
15(4)18,
16(3)10,
17(1)4,
17(2)6,
17(3)11,
18(1)4,
18(3)9,
18(4)12
- focus,
10(4)2,
11(2)6,
11(3)12,
11(4)19,
12(1)3,
12(2)12,
14(3)23,
15(4)16,
16(3)10
- have,
1(1)66,
1(1)93,
2(1)65,
2(2)138,
2(3)230,
2(3)269,
10(1)2,
10(1)4,
10(2)5,
10(3)10,
10(3)12,
10(4)4,
10(4)5,
10(4)6,
11(1)2,
11(2)1,
11(2)5,
11(3)15,
11(3)16,
11(4)17,
11(4)18,
11(4)21,
12(1)1,
12(1)2,
12(2)10,
12(2)13,
12(3)15,
12(3)16,
12(3)17,
12(4)20,
13(3)20,
13(3)26,
13(3)27,
13(3)28,
13(4)32,
13(4)36,
13(4)39,
13(4)40,
14(1)6,
14(1)7,
14(1)10,
14(1)13,
14(1)14,
14(3)27,
14(4)28,
14(4)29,
15(2)7,
15(2)9,
15(2)10,
15(3)12,
15(4)18,
16(2)7,
16(2)8,
16(3)10,
16(4)15,
16(4)16,
17(1)3,
17(3)11,
17(3)12,
17(4)13,
17(4)15,
18(1)1,
18(1)3,
18(2)5,
18(2)7
- however,
2(3)269,
10(2)5,
10(2)8,
11(2)6,
11(3)15,
11(4)18,
11(4)20,
11(4)22,
13(3)20,
13(3)22,
13(4)35,
13(4)38,
13(4)39,
14(1)14,
14(3)24,
14(4)28,
14(4)29,
15(2)10,
16(2)7,
16(3)11,
17(1)2,
17(1)4,
17(3)12,
17(4)15,
18(1)1,
18(2)7
- identify,
11(2)2,
11(3)12,
11(3)15,
11(3)16,
11(4)18,
11(4)20,
12(1)4,
12(4)20,
12(4)22,
13(4)35,
14(1)13,
15(4)18,
16(2)7,
17(4)13
- increasingly,
14(1)3,
14(1)9,
14(1)14,
15(2)10
- indicate,
2(3)230,
10(4)2,
12(1)6,
13(4)35,
16(3)11,
17(2)6,
18(3)9
- instead,
10(1)4,
12(2)10,
15(4)15,
16(4)13
- lead,
1(1)3,
2(1)3,
10(4)4,
10(4)5,
11(4)17,
12(1)2,
13(3)20,
13(4)29,
17(1)2,
18(3)10
- least,
10(2)5,
11(3)13,
11(4)19,
14(4)28,
15(3)14,
18(1)1
- length,
10(4)6,
12(3)18
- make,
2(3)332,
9(1)31,
10(1)2,
10(3)11,
10(4)6,
11(1)4,
11(3)13,
11(3)14,
11(4)22,
11(4)23,
12(1)1,
12(3)15,
13(3)22,
13(3)26,
13(3)28,
13(4)35,
14(4)29,
15(1)3,
15(1)4,
15(4)17,
16(3)10,
17(3)10,
18(1)1,
18(2)7
- many,
1(1)93,
2(1)65,
2(2)159,
2(3)332,
10(1)4,
10(4)1,
11(3)13,
11(4)22,
11(4)23,
12(1)2,
12(3)17,
12(3)18,
13(3)20,
13(3)22,
13(4)38,
13(4)39,
15(1)4,
15(2)6,
15(2)7,
16(2)5,
16(3)9,
16(4)17,
17(1)4,
17(3)12,
18(1)1
- more,
2(1)3,
2(1)65,
2(3)332,
9(2)181,
9(4)391,
9(4)421,
9(4)461,
10(1)4,
10(3)9,
10(4)1,
10(4)4,
10(4)6,
11(2)3,
11(2)4,
11(2)6,
11(3)14,
11(4)21,
12(1)1,
12(2)8,
12(2)10,
12(2)12,
12(2)13,
12(3)18,
13(1)10,
13(3)20,
13(3)21,
13(3)22,
13(3)28,
13(4)32,
13(4)34,
13(4)39,
14(3)27,
14(4)31,
15(1)2,
15(1)5,
15(2)8,
15(2)9,
15(3)11,
15(3)12,
15(4)16,
16(1)2,
16(2)8,
16(3)10,
16(3)11,
16(4)17,
17(1)2,
17(1)3,
17(3)9,
17(4)14,
17(4)16,
18(1)1,
18(3)11
- multiple,
2(2)138,
2(2)177,
2(4)390,
11(1)4,
11(4)18,
11(4)22,
11(4)23,
12(1)3,
13(4)32,
13(4)36,
14(1)4,
14(1)6,
14(3)25,
14(4)31,
15(1)2,
15(3)13,
15(4)16,
15(4)17
- necessarily,
12(1)1,
15(2)10
- not,
1(1)26,
2(1)65,
2(2)177,
2(3)230,
2(3)269,
2(4)390,
9(4)421,
10(1)3,
10(4)2,
11(1)3,
11(1)4,
11(2)2,
11(2)4,
11(2)5,
11(3)12,
11(3)13,
11(3)15,
11(3)16,
11(4)19,
11(4)20,
11(4)22,
12(1)1,
12(1)2,
12(1)3,
12(1)6,
12(2)10,
12(2)11,
12(2)13,
12(3)14,
12(4)22,
13(1)10,
13(3)28,
13(4)33,
13(4)35,
13(4)36,
13(4)37,
13(4)39,
13(4)40,
14(3)23,
14(3)27,
14(4)28,
14(4)29,
14(4)31,
15(2)6,
15(2)9,
15(2)10,
15(3)12,
15(3)13,
16(1)1,
16(2)5,
16(2)6,
16(3)9,
16(3)12,
16(4)13,
16(4)15,
16(4)16,
17(1)2,
17(3)10,
17(4)15,
18(1)1,
18(3)9
- one,
1(1)26,
1(1)93,
2(1)3,
2(1)65,
2(3)295,
9(4)461,
10(1)2,
10(2)5,
10(2)8,
10(3)12,
10(4)3,
11(2)6,
11(3)14,
12(1)1,
12(1)5,
12(2)13,
12(3)14,
13(3)21,
13(3)25,
13(3)26,
13(3)27,
13(4)41,
14(1)3,
14(1)5,
14(4)30,
14(4)32,
15(2)10,
15(3)11,
15(4)16,
15(4)18,
16(1)3,
16(1)4,
16(3)9,
16(4)14,
17(2)8,
17(4)13,
18(1)1,
18(3)11
- online,
1(1)3,
9(3)235,
11(2)5,
11(4)19,
12(2)13,
12(4)22,
13(4)41,
14(1)11,
14(4)32,
15(2)9,
16(2)7,
16(4)14,
17(4)14,
18(1)1
- participant,
10(2)7,
10(3)10,
12(1)4,
14(4)28
- password,
1(1)3,
2(3)230,
2(4)390,
10(4)5,
11(4)17,
13(4)37,
16(4)15,
17(2)6,
17(4)14,
18(1)1
- password-strength,
18(1)1
- practical,
2(4)390,
4(2)158,
7(2)319,
9(3)325,
10(2)6,
10(4)1,
11(2)1,
11(2)5,
11(4)18,
12(3)19,
14(1)7,
14(1)14,
14(2)20,
14(4)29,
15(1)4,
15(2)6,
15(2)7,
15(4)16,
16(3)10,
16(3)12,
16(4)13,
17(4)16,
18(1)3
- promising,
10(3)12,
11(1)2,
16(4)14
- provide,
1(1)3,
1(1)93,
2(1)3,
2(1)34,
2(1)65,
2(1)105,
2(3)230,
2(4)390,
7(2)319,
10(1)3,
10(2)8,
10(3)10,
10(4)2,
10(4)6,
11(1)3,
11(1)4,
11(2)2,
11(3)12,
11(3)13,
11(4)17,
11(4)20,
11(4)23,
12(1)2,
12(1)3,
12(2)8,
12(2)9,
12(3)14,
12(3)15,
12(3)16,
12(4)22,
13(3)22,
13(3)24,
13(4)31,
13(4)34,
13(4)38,
13(4)41,
14(1)4,
14(1)7,
14(1)8,
14(3)25,
14(4)28,
15(2)6,
15(2)10,
15(4)17,
15(4)18,
16(1)3,
16(2)5,
16(3)9,
16(3)11,
16(4)17,
17(2)5,
17(3)11,
17(3)12,
17(4)16,
18(1)1,
18(1)2,
18(2)5,
18(2)7,
18(4)14
- provider,
2(2)177,
10(4)4,
11(1)3,
11(3)15,
13(4)39,
14(1)10,
16(3)12,
18(2)7
- rather,
2(1)65,
2(3)332,
9(4)461,
10(2)8,
12(3)16,
13(1)10,
13(4)31,
15(4)15
- recall,
10(4)5
- recent,
2(1)65,
2(2)138,
10(2)8,
10(3)9,
11(1)2,
11(4)22,
12(1)2,
12(2)12,
14(1)7,
14(1)14,
14(4)29,
15(1)3,
16(2)7,
16(3)10,
18(1)1,
18(2)5,
18(2)7
- recommendations,
7(2)319,
16(1)2
- reduce,
2(3)295,
7(2)319,
9(4)391,
11(3)14,
11(4)17,
12(2)13,
12(3)17,
13(3)27,
13(4)40,
14(1)12,
15(3)12,
16(1)4,
16(3)10,
16(4)17,
18(4)12
- require,
2(3)269,
10(1)2,
11(1)3,
11(2)2,
11(4)22,
12(1)3,
12(1)6,
12(3)16,
12(4)20,
13(3)20,
13(3)21,
13(4)29,
13(4)33,
13(4)35,
13(4)40,
14(1)2,
14(3)27,
15(2)6,
15(4)16,
16(4)13,
17(2)5,
17(3)9,
17(3)10,
17(4)16,
18(1)2
- requirements,
2(2)177,
2(3)295,
10(2)7,
11(1)4,
12(1)1,
12(1)5,
12(2)8,
13(3)20,
13(3)22,
15(2)6,
15(3)13,
16(1)4,
17(3)10,
18(1)3
- requiring,
11(1)2,
11(3)14,
11(3)16,
15(2)9,
17(4)13
- research,
2(1)65,
13(3)27,
15(2)10,
15(3)12,
16(2)8,
16(3)10,
17(3)12,
18(1)1,
18(4)14
- restrict,
14(1)10,
18(2)7
- result,
1(1)3,
1(1)26,
2(3)230,
2(4)390,
9(2)162,
10(1)3,
10(1)4,
10(2)5,
10(2)6,
10(3)9,
10(3)11,
10(4)2,
10(4)5,
11(2)3,
11(2)5,
11(3)13,
11(3)15,
11(4)18,
11(4)20,
11(4)21,
11(4)22,
12(1)4,
12(2)9,
12(3)14,
12(3)17,
13(1)10,
13(3)22,
13(3)24,
13(3)25,
13(4)33,
13(4)35,
14(1)2,
14(1)14,
14(2)19,
15(1)5,
15(2)7,
15(2)8,
15(3)12,
15(3)13,
15(3)14,
15(4)15,
16(1)2,
16(1)3,
16(2)5,
16(2)6,
16(2)7,
16(3)10,
16(3)11,
16(4)14,
16(4)17,
17(2)7,
17(3)9,
17(3)10,
17(3)12,
17(4)14,
18(1)4,
18(2)5,
18(2)6,
18(3)9,
18(3)11,
18(4)12
- secure,
1(1)93,
2(2)159,
2(2)177,
2(3)332,
2(4)390,
4(1)72,
4(2)103,
4(2)134,
4(4)321,
5(3)290,
6(4)472,
7(4)523,
9(1)1,
9(1)31,
9(1)94,
9(2)162,
9(4)461,
10(2)8,
10(3)10,
10(3)11,
10(4)3,
10(4)6,
11(2)4,
11(2)5,
11(3)13,
11(3)14,
11(4)18,
11(4)22,
11(4)23,
12(1)2,
12(1)3,
12(1)6,
12(3)16,
12(3)18,
12(4)21,
12(4)22,
13(1)9,
13(3)21,
13(3)28,
13(4)29,
14(3)23,
14(3)27,
14(4)31,
15(2)6,
15(2)9,
16(3)11,
16(4)15,
17(2)5,
17(2)6,
17(4)13,
18(2)5
- service,
2(4)354,
4(4)453,
6(4)472,
10(1)2,
10(2)8,
10(3)11,
10(4)4,
10(4)6,
11(1)2,
11(1)4,
11(3)15,
11(4)19,
12(2)12,
12(3)16,
13(4)38,
13(4)39,
13(4)41,
14(1)5,
14(3)23,
15(2)6,
15(3)12,
15(3)13,
16(2)5,
16(2)6,
16(3)11,
16(3)12,
16(4)14,
17(4)13,
17(4)15,
18(1)1,
18(1)2,
18(4)12
- showed,
11(2)5
- space,
2(3)295,
6(1)43,
6(3)327,
10(4)5,
12(2)8,
12(3)18,
12(3)19,
14(1)14,
15(1)2
- strength,
2(3)269,
2(4)416,
10(2)5,
10(4)6,
11(1)2,
11(4)22,
17(2)7,
18(1)1
- strength, password-,
18(1)1
- strong,
2(3)230,
2(4)390,
3(3)161,
10(3)11,
11(3)13,
12(4)21,
13(1)7,
13(4)39,
15(1)3,
15(1)4,
16(2)6,
16(3)12,
18(1)1
- stronger,
12(2)8,
18(1)1
- study,
2(3)230,
2(4)416,
7(2)206,
10(2)5,
10(4)5,
11(1)3,
11(2)3,
11(4)23,
12(1)6,
12(3)14,
12(4)20,
13(4)40,
14(1)7,
14(2)18,
14(2)19,
15(1)5,
15(2)7,
15(2)8,
15(2)10,
15(3)13,
17(1)1,
17(2)7,
17(3)12,
17(4)14,
18(1)1,
18(1)2,
18(1)4,
18(2)5,
18(2)7,
18(3)9
- than,
2(1)3,
2(1)65,
2(3)332,
9(4)391,
9(4)461,
10(1)4,
11(2)3,
11(2)6,
11(3)14,
12(1)1,
12(2)10,
12(3)16,
12(4)22,
13(1)10,
13(3)21,
13(4)29,
13(4)31,
13(4)35,
14(3)27,
14(4)31,
15(1)5,
15(2)9,
15(2)10,
15(4)15,
15(4)16,
16(2)8,
16(4)17,
17(1)2,
17(3)9,
17(3)10,
17(3)12,
17(4)14,
17(4)16
- thorough,
11(4)17,
16(3)11,
17(3)9
- thus,
2(2)138,
10(3)12,
10(4)5,
13(3)20,
14(1)12,
14(3)26,
14(3)27,
15(1)4,
16(2)7,
17(3)10,
17(3)11,
18(1)1
- two,
1(1)26,
2(4)416,
9(4)391,
10(1)4,
10(2)6,
10(2)8,
10(3)10,
10(4)4,
11(2)1,
11(2)4,
11(2)6,
11(3)13,
11(4)22,
12(1)2,
12(1)3,
12(1)4,
12(1)6,
12(3)14,
12(4)20,
13(3)22,
13(3)27,
13(4)40,
14(1)4,
14(1)5,
14(4)30,
15(1)2,
15(1)5,
15(2)6,
15(3)11,
15(3)12,
16(1)1,
16(1)2,
16(1)4,
16(3)9,
16(3)10,
16(4)15,
17(4)13,
18(2)5,
18(4)12,
18(4)14
- usability,
14(2)19
- usable,
14(3)24
- used,
1(1)3,
2(1)65,
2(4)416,
7(2)319,
9(2)181,
10(1)2,
10(2)5,
10(2)7,
10(2)8,
10(4)2,
11(1)2,
11(1)3,
11(2)3,
11(3)14,
11(3)15,
11(3)16,
11(4)21,
11(4)22,
12(2)8,
12(3)15,
13(1)10,
13(3)22,
13(3)25,
13(4)29,
13(4)34,
14(1)3,
14(1)12,
14(1)13,
14(3)27,
15(1)3,
15(1)5,
15(3)12,
15(4)17,
15(4)18,
16(2)7,
16(2)8,
16(3)10,
17(1)1,
17(2)7,
17(3)9,
17(4)13,
18(1)3,
18(2)5,
18(2)6,
18(3)9,
18(4)14
- want,
10(1)4,
11(4)19,
11(4)23,
12(1)6,
12(4)22
- was,
2(1)105,
11(1)2,
12(3)16,
13(1)10,
14(1)8,
16(3)10,
16(3)11,
16(4)16,
17(1)1,
18(1)3
- who,
1(1)26,
1(1)66,
10(4)3,
11(3)12,
11(4)19,
11(4)23,
12(1)2,
12(2)9,
13(4)39,
13(4)40,
15(3)14,
16(2)8,
17(1)4
- work,
2(2)138,
2(3)269,
2(4)416,
10(3)10,
10(4)6,
11(2)2,
11(2)3,
11(3)15,
11(4)17,
11(4)19,
12(2)10,
12(2)11,
12(2)12,
12(3)16,
12(3)17,
12(3)18,
13(3)25,
13(4)38,
14(1)2,
14(1)14,
15(2)7,
15(2)10,
15(3)12,
15(4)15,
15(4)17,
16(1)3,
16(1)4,
16(2)8,
16(3)10,
16(3)11,
16(4)13,
16(4)15,
17(3)12,
18(2)6
- yet,
11(4)17,
11(4)21,
12(1)6,
13(3)21,
13(3)28,
13(4)35,
14(1)9