Wyniki wyszukiwania - BazTech

Ograniczanie wyników

1 Journal of Telecommunications and Information Technology

1 2017

Znaleziono wyników: 1

Liczba wyników na stronie

Wyniki wyszukiwania

Sortuj według:

Ogranicz wyniki do:

Detecting Password File Theft using Predeﬁned Time-Delays between Certain Password Characters

Mahmoud K. W., Mansour K., Makableh A.

Journal of Telecommunications and Information Technology

2017

nr 4

101--108

This paper presents novel mechanisms that effectively detect password ﬁle thefts and at the same time prevent uncovering passwords. The proposed mechanism uses delay between consecutive keystrokes of the password characters. In presented case, a user should not only enter his password correctly during the sign-up process, but also needs to introduce relatively large time gaps between certain password characters. The proposed novel approaches disguise stored passwords by adding a suffix value that helps in detecting password ﬁle theft at the ﬁrst sign-in attempt by an adversary who steals and cracks the hashed password ﬁle. Any attempt to login using a real password without adding the time delays in the correct positions may considered as an impersonation attack, i.e. the password ﬁle has been stolen and cracked.