A CASE STUDY OF THE WEAKNESS OF FRESHMEN CHOSEN PASSWORD FOR ACADEMIC INFORMATION SYSTEM

Abstract

In the last decades, some extensive research explored new algorithms and protocols how to secure data or user information using password and username. There are new methods such as biometrics. The drawback of this method is that it needs other hardware or device. On the other hand, the username and password combination to authenticate user identity has been widely used because cheap and user-friendly. The latter method has some weakness such as dictionary attack, brute force or other method. The purpose of this research to find out the weakness of freshmen chosen password to protect their identity in the Academic Information System. The experiment is done in a public university in Indonesia. This research carried on around 12 faculties and 102 departments. The freshmen at this university is around 6499 students. The sampling method is population, so that all the freshmen student account investigated. The first scenario is to find out how many students use the same password as username. The second scenario is a dictionary attack on some freshmen account that cannot be found on the first scenario. The result of this experiment about 60% to 75% of freshmen’s password in each faculty can be guessed because the students used the same username and password. Other method used in this research has been revealed more password from freshmen.