Special Characters Usage and Its Effect on Password Security

【Author】 He, Daojing; Liu, Zhiyong; Zhu, Shanshan; Chan, Sammy; Guizani, Mohsen

【Source】IEEE INTERNET OF THINGS JOURNAL

【影响因子】10.238

【Abstract】Continuously preventing weak password attacks is one of the most important initiatives to secure IoT and smart contract platforms. Despite their significance as crucial components of passwords, special character segments have been overlooked. This study systematically investigates the basic characteristics and semantic patterns of special character segments. We assess the efficacy of special character segment characteristics in cracking trials through assimilation into the latest probabilistic context-free grammar (PCFG(v4)) method for password cracking by updating the preterminal structure or performing special character segment transformation. Experimental findings demonstrate that a mere 6% transformation rate improves the cracking rate by 3.72% under the optimal assimilation combination. Our investigation reveals that the current password creation policies of mainstream IoT platforms and smart contract wallets overestimate the strength of passwords with special characters. To enhance their passwords, users can employ low-frequency special character semantic strings. For IoT platforms or smart contract wallets, the use of blacklist constructed from special character segment characteristics can effectively mitigate the risk of overestimating the strength of passwords with special characters.

【Keywords】Internet of Things; Internet of Things (IoT) platforms security; password analysis; password protection; smart contract wallet security; weak password attack

【发表时间】2024 JUN 1

【收录时间】2024-08-19

【文献类型】实验仿真

【主题类别】

区块链应用-实体经济-物联网