The past research study on the characteristics of passwords has paid much attention to language, regional or cultural differences and usability. However, few studies have pointed out differences due to information such as application types, users’ occupations, religious beliefs, and meanings of the digits in the culture. In this article, for the first time we put forward the concept of “group” characteristics, and found that the passwords of different groups have obviously different characteristics. For example, when dividing groups by religions of users, Christian groups like to include biblical names and words in passwords, such as “jesus”, “christ”, “angels” and “faith”. Accordingly, we propose gPGM, a neural network-based password guessing method that leverages group information to increase attack success. Our experiments show that gPGM can significantly increase the password cracking rate. In addition, the cracking rates for different groups, under the same number of guesses, also vary. For example, the cracking rate of the game group is very high, but that of the hacker group is very low.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Password Cracking by Exploiting User Group Information

  • Beibei Zhou,
  • Daojing He,
  • Sencun Zhu,
  • Shanshan Zhu,
  • Sammy Chan,
  • Xiao Yang

摘要

The past research study on the characteristics of passwords has paid much attention to language, regional or cultural differences and usability. However, few studies have pointed out differences due to information such as application types, users’ occupations, religious beliefs, and meanings of the digits in the culture. In this article, for the first time we put forward the concept of “group” characteristics, and found that the passwords of different groups have obviously different characteristics. For example, when dividing groups by religions of users, Christian groups like to include biblical names and words in passwords, such as “jesus”, “christ”, “angels” and “faith”. Accordingly, we propose gPGM, a neural network-based password guessing method that leverages group information to increase attack success. Our experiments show that gPGM can significantly increase the password cracking rate. In addition, the cracking rates for different groups, under the same number of guesses, also vary. For example, the cracking rate of the game group is very high, but that of the hacker group is very low.