On designing a modified-UI based honeyword generation approach for overcoming the existing limitations

Inverting hashed passwords by performing brute force computation is one of the latest security threats on password based authentication technique. New technologies are being developed for reducing complexity of brute force computation and these increase the success rate of inversion attack. Honeywor...

Full description

Saved in:
Bibliographic Details
Published in:Computers & security 2017-05, Vol.66, p.155-168
Main Authors: Chakraborty, Nilesh, Mondal, Samrat
Format: Article
Language:English
Subjects:
Authentication
Honeyword
Intrusion detection systems
Inversion attack
Modified-UI
Paired distance
Password
Passwords
Studies
User interface
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Inverting hashed passwords by performing brute force computation is one of the latest security threats on password based authentication technique. New technologies are being developed for reducing complexity of brute force computation and these increase the success rate of inversion attack. Honeyword base authentication protocol can successfully mitigate this threat by making password cracking detectable. However, existing honeyword based methods have several limitations like Multiple System Vulnerability, Weak DoS Resistivity, Storage Overhead, etc. In this paper, we have proposed a new modified-UI based honeyword generation approach, identified as Paired Distance Protocol (PDP), which overcomes most of the drawbacks of previously proposed honeyword generation approaches. The comprehensive analysis shows that PDP not only attains a high detection rate of 97.23%, but also reduces the storage overhead to a great extent.
ISSN:0167-4048
1872-6208
DOI:10.1016/j.cose.2017.01.011