Enhanced System for Securing Password Manager Using Honey Encryption

Abstract

Brute-force is a threat for the password manager since they include all user's passwords in one consolidated place. To overcome this drawback, we present an enhanced system that implements honey encryption (HE) in the password manager to provide resilience against brute-force attacks. The proposed system detects and prevents the intruder's attempt to grant access to any account. The detection recognizes the abnormal tries of invalid passwords by matching the intruder's entered passwords with auto-generated honeywords that mimic the actual passwords. Additionally, prevention works by redirecting the intruder to a fake account with dummy passwords to mislead the intruder. The proposed system provides high security and integrity to the password manager with 0.36 seconds of execution time. In addition, we perform a comparative analysis between honey with the OTP algorithm and our three scenarios of the proposed solution Experiments show that our system that applying the honey encryption with other security techniques would require more time, but it would result in achieving better security features than applying honey encryption alone.