Password Generation and Search Space Reduction
Kirsi Marjaana Helkala, Einar Arthur Snekkenes · Journal of Computers · 2009
Abstract — It is easy for humans to design passwords that are easily remembered. However, such passwords may have a predictable structure, making exhaustive search feasible. We have divided human-generated passwords into three categories: Non-word passwords, Mixture passwords, and Word passwords; depending on their overall structure. Within these categories, we have analyzed the search-space reduction of several common password sub-structures. From this analysis, we have derived guidelines that yield strong passwords within in each password category. Our results contribute towards the goal of achieving both strong and memorable passwords. Index Terms — Password security, password policy, search space reduction, personnel authentication