StopGuessing: Using Guessed Passwords to Thwart Online Password Guessing
Yuan Tian, Cormac Herley, Stuart E. Schechter · IEEE Security & Privacy · 2020
Practitioners who are seeking to defend against online password-guessing attacks usually find a shortage of techniques. We present an open source system to defend against password-guessing attacks using information ignored previously: the guessed passwords themselves. We examine passwords to detect and are more forgiving of login failures caused by users mistyping their passwords.