Evaluating the Accuracy of Password Strength Meters using Off-The-Shelf Guessing Attacks

Thumbnail Image
Date
2020
Authors
Ferreira,JF
Pereira,D
Alexandra Sofia Mendes
Journal Title
Journal ISSN
Volume Title
Publisher
Abstract
In this paper we measure the accuracy of password strength meters (PSMs) using password guessing resistance against off-the-shelf guessing attacks. We consider 13 PSMs, 5 different attack tools, and a random selection of 60,000 passwords extracted from three different datasets of real-world password leaks. Our results show that a significant percentage of passwords classified as strong were cracked, thus suggesting that current password strength estimation methods can be improved. © 2020 IEEE.
Description
Keywords
Citation