Determining User Passwords From Partial Information
Dylan Clarke, Ehsan Toreini, Feng Hao · Durham Research Online (Durham University) · 2015
Memorable words have become a common technique in online banking security as a second authentication factor that is partially resistant to observation by adversaries. We formally model this technique and analyze the expected number of observations until the memorable word is known, for a range of common word lengths. We also calculate the probability of an adversary successfully passing authentication with knowledge of some but not all characters from the memorable word. © 2015 Newcastle University. Printed and published by Newcastle University, Computing Science, Claremont Tower, Claremont Road, Newcastle upon Tyne, NE1 7RU, England. Bibliographical details CLARKE, D; TOREINI, E; HAO, F; Determining User Passwords From Partial Information [By] D. Clarke, E. Toreini, F. Hao Newcastle upon Tyne: Newcastle University: Computing Science, 2015. (Newcastle University, Computing Science, Technical Report Series, No. CS-TR-1461)