[PDF][PDF] The tangled web of password reuse.

A Das, J Bonneau, M Caesar, N Borisov, XF Wang - NDSS, 2014 - cs.umd.edu
Today's Internet services rely heavily on text-based passwords for user authentication. The
pervasiveness of these services coupled with the difficulty of remembering large numbers of …

The next domino to fall: Empirical analysis of user passwords across online services

C Wang, STK Jan, H Hu, D Bossart… - Proceedings of the Eighth …, 2018 - dl.acm.org
Leaked passwords from data breaches can pose a serious threat if users reuse or slightly
modify the passwords for other services. With more services getting breached today, there is …

Password management strategies for online accounts

S Gaw, EW Felten - Proceedings of the second symposium on Usable …, 2006 - dl.acm.org
Given the widespread use of password authentication in online correspondence,
subscription services, and shopping, there is growing concern about identity theft. When …

Do password managers nudge secure (random) passwords?

S Zibaei, DR Malapaya, B Mercier… - … Symposium on Usable …, 2022 - usenix.org
Passwords are the most popular authentication method due to their simplicity and
widespread adoption. However, the prevalence of password reuse undermines its security …

An {Administrator's} Guide to Internet Password Research

D Florêncio, C Herley, PC Van Oorschot - 28th large installation system …, 2014 - usenix.org
The research literature on passwords is rich but little of it directly aids those charged with
securing web-facing services or setting policies. With a view to improving this situation we …

That was then, this is now: A security evaluation of password generation, storage, and autofill in browser-based password managers

S Oesch, S Ruoti - Proceedings of the 29th USENIX Conference on …, 2020 - usenix.org
Password managers have the potential to help users more effectively manage their
passwords and address many of the concerns surrounding password-based authentication …

" I Added'!'at the End to Make It Secure": Observing Password Creation in the Lab

B Ur, F Noma, J Bees, SM Segreti, R Shay… - Eleventh symposium on …, 2015 - usenix.org
Users often make passwords that are easy for attackers to guess. Prior studies have
documented features that lead to easily guessed passwords, but have not probed why users …

Password strength: An empirical analysis

M Dell'Amico, P Michiardi… - 2010 Proceedings IEEE …, 2010 - ieeexplore.ieee.org
It is a well known fact that user-chosen passwords are somewhat predictable: by using tools
such as dictionaries or probabilistic models, attackers and password recovery tools can …

Multiple password interference in text passwords and click-based graphical passwords

S Chiasson, A Forget, E Stobert… - Proceedings of the 16th …, 2009 - dl.acm.org
The underlying issues relating to the usability and security of multiple passwords are largely
unexplored. However, we know that people generally have difficulty remembering multiple …

Measuring password guessability for an entire university

ML Mazurek, S Komanduri, T Vidas, L Bauer… - Proceedings of the …, 2013 - dl.acm.org
Despite considerable research on passwords, empirical studies of password strength have
been limited by lack of access to plaintext passwords, small data sets, and password sets …