代码片段:真正的基于知识的认证

2013 Information Security for South Africa Pub Date : 2013-10-21 DOI:10.1109/ISSA.2013.6641059

K. Renaud, D. Kennes, J. V. Niekerk, Joseph Maguire

{"title":"代码片段:真正的基于知识的认证","authors":"K. Renaud, D. Kennes, J. V. Niekerk, Joseph Maguire","doi":"10.1109/ISSA.2013.6641059","DOIUrl":null,"url":null,"abstract":"Authentication is traditionally performed based on what you know, what you hold or what you are. The first is the most popular, in the form of the password. This is often referred to as “knowledge-based” authentication. Yet, given the guidelines for password restrictions commonly given to end-users we will argue that this is a misnomer. A strong password is actually a lengthy string of gibberish or nonsense. Common password strength guidelines advise users against choosing meaningful passwords.","PeriodicalId":300864,"journal":{"name":"2013 Information Security for South Africa","volume":"1 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2013-10-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"SNIPPET: Genuine knowledge-based authentication\",\"authors\":\"K. Renaud, D. Kennes, J. V. Niekerk, Joseph Maguire\",\"doi\":\"10.1109/ISSA.2013.6641059\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Authentication is traditionally performed based on what you know, what you hold or what you are. The first is the most popular, in the form of the password. This is often referred to as “knowledge-based” authentication. Yet, given the guidelines for password restrictions commonly given to end-users we will argue that this is a misnomer. A strong password is actually a lengthy string of gibberish or nonsense. Common password strength guidelines advise users against choosing meaningful passwords.\",\"PeriodicalId\":300864,\"journal\":{\"name\":\"2013 Information Security for South Africa\",\"volume\":\"1 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2013-10-21\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2013 Information Security for South Africa\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ISSA.2013.6641059\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2013 Information Security for South Africa","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ISSA.2013.6641059","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 1

摘要

身份验证传统上是基于您所知道的、所持有的或您的身份来执行的。第一种是最常用的，以密码的形式出现。这通常被称为“基于知识的”身份验证。然而，考虑到通常给最终用户的密码限制指导方针，我们会认为这是一个用词不当。强密码实际上是一长串乱码或废话。常用密码强度指南建议用户不要选择有意义的密码。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文本刊更多论文

SNIPPET: Genuine knowledge-based authentication

Authentication is traditionally performed based on what you know, what you hold or what you are. The first is the most popular, in the form of the password. This is often referred to as “knowledge-based” authentication. Yet, given the guidelines for password restrictions commonly given to end-users we will argue that this is a misnomer. A strong password is actually a lengthy string of gibberish or nonsense. Common password strength guidelines advise users against choosing meaningful passwords.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

2013 Information Security for South Africa

自引率

0.00%

发文量