Murray, Hazel and Malone, David (2017) Evaluating Password Advice. In: 2017 28th Irish Signals and Systems Conference (ISSC), 20-21 June 2017, Killarney, Ireland.

Preview

Download (126kB) | Preview

Abstract

Password advice is constantly circulated by standards agencies, companies, websites and specialists. But there appears to be great diversity in terms of the advice that is given. Users have noticed that different websites are enforcing different restrictions. For example, requiring different combinations of uppercase and lowercase letters, numbers and special characters. We collected password advice and found that the advice distributed by one organization can directly contradict advice given by another. Our paper aims to illuminate interesting characteristics for a sample of the password advice distributed. We also create a framework for identifying the costs associated with implementing password advice. In doing so we identify a reason for why password advice is often both derided and ignored.

Item Type:	Conference or Workshop Item (Lecture)
Additional Information:	This is the preprint version of the published paper, which is available at DOI: 10.1109/ISSC.2017.7983609
Keywords:	password advice; security data; web sites;
Academic Unit:	Faculty of Science and Engineering > Mathematics and Statistics Faculty of Science and Engineering > Research Institutes > Hamilton Institute
Item ID:	10056
Depositing User:	Dr. David Malone
Date Deposited:	04 Oct 2018 13:49
Refereed:	Yes
URI:
Use Licence:	This item is available under a Creative Commons Attribution Non Commercial Share Alike Licence (CC BY-NC-SA). Details of this licence are available here

Repository Staff Only(login required)

Item control page

Downloads

Origin of downloads