Beyond Chunking: Re-Engineering Password Segmentation for Better Honeywords
Satya Sannihith Lingutla, Meher Viswanath Nety, Miguel Vargas Martín · 2023
Passwords play a major role in the field of network security. However, passwords are vulnerable to various types of attacks making it essential to ensure that they are strong, unique, and confidential. One of the major techniques that evolved over time to enhance password security is the use of honeywords that are decoy passwords designed to alert the administrator when a data breach has happened. Our work addresses one of the limitations of a honeyword generation technique, called Chunk-GPT3, by performing better password segmentation through a re-engineered chunking algorithm that maps digits into characters, and which would seem to lead to better honeywords. We justify our re-engineering method and generate honeywords that we compare to those generated by Chunk-GPT3. Nonetheless, after evaluating honeywords using the HWSimilarity metric, our results suggest that improved chunking does not necessarily lead to better honeywords in all cases.