NDLI: Moore's curse on textual passwords

Content Provider	IEEE Xplore Digital Library
Author	Brumen, B. Taneski, V.
Copyright Year	2015
Description	Author affiliation: Fac. of Electr. Eng. & Comput. Sci., Univ. of Maribor, Maribor, Slovenia (Brumen, B.; Taneski, V.)
Abstract	Background: Passwords are still the predominant way of authentication in information systems, and are mostly at user's responsibility. They conceive, use, re-use, abuse and forget passwords. In absence of strict password policies and at minimum required user training, passwords tend to be short, easy to remember, connected to the user's personal or professional life and consequently easy to break. The additional problem with passwords is their aging: Moore's law is affecting the available computing power to crack passwords and those deemed secure today may easily be broken in the near future. Objective: The aim of this paper is to study various scenarios of the effect the Moore's law is having on passwords and their security. In addition, advancements in other fields, e.g. quantum computing and Internet of Things, are taken into the account. Method: We analyzed various password types and the lengths required to withstand an off-line brute-force attack. The analysis was performed under various scenarios and combinations thereof: the Moore's law will continue to be in the effect for years to come with varying parameters, quantum computing will become feasible, improvements in hash tables computations will speed up the cracking process, and others. Results: The paper shows the minimum password length in characters for each password type under various scenarios. Even the most optimistic scenario shows that the minimum required password length today should be of 11 randomly drawn characters, rendering most of the passwords inappropriate due to their poor memorability. Conclusion: The current textual passwords are cursed by the Moore's law and other advancements in the field. Soon, classical textual passwords will need to be replaced by other mechanisms, which are, fortunately, already emerging.
Starting Page	1360
Ending Page	1365
File Size	625266
Page Count	6
File Format	PDF
e-ISBN	9789532330823
DOI	10.1109/MIPRO.2015.7160486
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-05-25
Publisher Place	Croatia
Access Restriction	Subscribed
Rights Holder	MIPRO
Subject Keyword	Presses Computational modeling Psychology US Department of Transportation Hardware Security
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Anatomy of a cortical simulator

CIMS: A Framework for Infrastructure Interdependency Modeling and Analysis

Click to Enter: Comparing Graphical and Textual Passwords for Children

Rapid prototyping for fuzzy systems

Do you see your password?: applying recognition to textual passwords

Quantitative Evaluation of Security Metrics

Defect-oriented mixed-level fault simulation of digital systems-on-a-chip using HDL

Defect Oriented Testing for Analog/Mixed-Signal Designs

A Novel Hybrid Textual-Graphical Authentication Scheme With Better Security, Memorability, and Usability

Moore's curse on textual passwords

Similar Documents

Anatomy of a cortical simulator

CIMS: A Framework for Infrastructure Interdependency Modeling and Analysis

Click to Enter: Comparing Graphical and Textual Passwords for Children

Rapid prototyping for fuzzy systems

Do you see your password?: applying recognition to textual passwords

Quantitative Evaluation of Security Metrics

Defect-oriented mixed-level fault simulation of digital systems-on-a-chip using HDL

Defect Oriented Testing for Analog/Mixed-Signal Designs

A Novel Hybrid Textual-Graphical Authentication Scheme With Better Security, Memorability, and Usability

Moore's curse on textual passwords