Textual password security hinges on the guessing models adopted by attackers, in which a
suitable password composition representation is an influential factor. Unfortunately, the …

During software maintenance, testing is a crucial activity to ensure the quality of program
code as it evolves over time. With the increasing size and complexity of software, adequate …

Users speaking different languages may prefer different patterns in creating their passwords,
and thus knowledge on English passwords cannot help to guess passwords from other …

Risk-based authentication (RBA) is an adaptive security measure to strengthen password-
based authentication. RBA monitors additional implicit features during password entry such …

Password reuse is widespread, so a breach of one provider's password database threatens
accounts on other providers. When companies find stolen credentials on the black market …

Single Sign-On (SSO) allows users to effortlessly navigate the Web and obtain a
personalized experience without the hassle of creating and managing accounts across …

Password managers, though commonly recommended by security experts, are still not used
by many users. Understanding why some choose to use password managers while others …

We explore how to manage a portfolio of passwords. We review why mandating exclusively
strong passwords with no re-use gives users an impossible task as portfolio size grows. We …

Leaked passwords from data breaches can pose a serious threat if users reuse or slightly
modify the passwords for other services. With more services getting breached today, there is …

Credential-guessing attacks often exploit passwords that were reused across a user's online
accounts. To learn how organizations can better protect users, we retrospectively analyzed …