Password advice shouldn't be boring: Visualizing password guessing attacks | IEEE Conference Publication | IEEE Xplore

Password advice shouldn't be boring: Visualizing password guessing attacks


Abstract:

Users are susceptible to password guessing attacks when they create weak passwords. Despite an abundance of text-based password advice, it appears insufficient to help ho...Show More

Abstract:

Users are susceptible to password guessing attacks when they create weak passwords. Despite an abundance of text-based password advice, it appears insufficient to help home users create strong memorable passwords. We propose that users would be empowered to make better password choices if they understood how password guessing attacks work through visual communication. We created three infographic posters and an online educational comic to help users to learn about the threats. We conducted two studies to assess their effectiveness. All four methods led to superior learning outcomes than the text-alone approach. Our pre-test questionnaires also highlighted that users' understanding of password guessing attacks is limited to a “target” mental model. One week after viewing our materials, the majority of users created strong sample passwords, and correctly described all three attacks: targeted, dictionary, and brute-force.
Date of Conference: 17-18 September 2013
Date Added to IEEE Xplore: 28 April 2014
Electronic ISBN:978-1-4799-1158-5
Conference Location: San Francisco, CA, USA

Contact IEEE to Subscribe

References

References is not available for this document.