Abstract
We present a novel approach to improving the security of passwords. In our approach, the legitimate user's typing patterns (e.g., durations of keystrokes, and latencies between keystrokes) are combined with the user's password to generate a hardened password that is convincingly more secure than conventional passwords against both online and offline attackers. In addition, our scheme automatically adapts to gradual changes in a user's typing patterns while maintaining the same hardened password across multiple logins, for use in file encryption or other applications requiring a long-term secret key. Using empirical data and a prototype implementation of our scheme, we give evidence that our approach is viable in practice, in terms of ease of use, improved security, and performance.
Original language | English |
---|---|
Pages | 73-82 |
Number of pages | 10 |
DOIs | |
State | Published - 1999 |
Event | Proceedings of the 1999 6th ACM Conference on Computer and Communications Security (ACM CCS) - Singapore, Singapore Duration: 2 Nov 1999 → 4 Nov 1999 |
Conference
Conference | Proceedings of the 1999 6th ACM Conference on Computer and Communications Security (ACM CCS) |
---|---|
City | Singapore, Singapore |
Period | 2/11/99 → 4/11/99 |