Password Advice Shouldn't Be Boring: Visualizing Password Guessing Attacks
Loading...
Date
2013-09
Authors
Zhang-Kennedy, Leah
Chiasson, Sonia
Biddle, Robert
Journal Title
Journal ISSN
Volume Title
Publisher
IEEE
Abstract
Users are susceptible to password guessing attacks when they create weak passwords. Despite an abundance of text-based password advice, it appears insufficient to help home users create strong memorable passwords. We propose that users would be empowered to make better password choices if they understood how password guessing attacks work through visual communication. We created three infographic posters and an online educational comic to help users to learn about the threats. We conducted two studies to assess their effectiveness. All four methods led to superior learning outcomes than the text- alone approach. Our pre-test questionnaires also highlighted that users’ understanding of password guessing attacks is limited to a “target” mental model. One week after viewing our materials, the majority of users created strong sample passwords, and correctly described all three attacks: targeted, dictionary, and brute-force.
Description
© 2013 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
Keywords
passwords, advice, text-alone approach