arrow
返回

Cracking More Password Hashes With Patterns

delete2015-08-01
delete44
PRE
AI
E
Emin İslam Tatlı *
DOI:10.1109/TIFS.2015.2422259delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
It is a common mistake of application developers to store user passwords within databases as plaintext or only as their unsalted hash values. Many real-life successful hacking attempts that enabled attackers to get unauthorized access to sensitive database entries including user passwords have been experienced in the past. Seizing password hashes, attackers perform brute-force, dictionary, or rainbow-table attacks to reveal plaintext passwords from their hashes. Dictionary attacks are very fast for cracking hashes but their success rate is not sufficient. In this paper, we propose a novel method for improving dictionary attacks. Our method exploits several password patterns that are commonly preferred by users when trying to choose a complex and strong password. In order to analyze and show success rates of our developed method, we performed cracking tests on real-life leaked password hashes using both a traditional dictionary and our pattern-based dictionary. We observed that our pattern-based method is superior for cracking password hashes.
Keyword:
Password security
authentication
data security
dictionary attacks
hash cracking
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Transactions on Information Forensics and Security 封面图
IEEE Transactions on Information Forensics and Security
IF:
8
论文数:
5.3K
被引数:
2.3W

机构

暂无机构信息
引用论文

引用论文

An Information Model for Modernizing Brownfield Plants in the Process Industry
err2023-07-18
err0
PREAI
errDorothea Pantfoerder; Birgit Vogel-Heuser; Joseph Alterbaum; Linda Rudolph; Felix Ocker
err分享
err收藏
Chemistry of High-Energy Materials
err
IF0
err2019-09-21
err0
PREAI
errThomas M. Klapötke
err分享
err收藏
15‐1: PWM Pixel Circuit with LTPS TFTs for Micro‐LED Displays
err2019-05-29
err0
PREAI
errJin-Ho Kim; Sangmin Shin; Kisun Kang; Chulgyu Jung; Youngki Jung; Tetsuya Shigeta; Sang-Young Park; Ho Seop Lee; Jongsul Min; Jongsu Oh; Yong-Sang Kim
err分享
err收藏
Analysis of dictionary methods for PIN selection
err2013-11-01
err8
PREAI
errStanekova, L'ubica; Stanek, Martin
err分享
err收藏
MHSEER: A Meta-Heuristic Secure and Energy-Efficient Routing Protocol for Wireless Sensor Network-Based Industrial IoT
err2023-05-19
err0
errOAAI
errAnshika Sharma; Himanshi Babbar; Shalli Rani; Dipak Kumar Sah; Sountharrajan Sehar; Gabriele Gianini
err分享
err收藏
学者 查看更多内容