Improved hashing and honey-based stronger password prevention against brute force attack

Abstract

Nowadays, security of password file is one of the most important problems for millions of users and companies in various fields. So, many systems store the password files in database using the various hashing and salting algorithm. However, password hashing is not secure by attackers because they try to get user's password in password file that are stored in the database using various attacks such as brute force attack, password guessing attack, etc. Therefore, some systems store the passwords in the database with honeywords or fake passwords using honeywords generation algorithm to prevent the attacks from hackers. But the current existing system using honeywords generation algorithm meets the two problems. The first problem is typo safety problem and the last problem is storage overhead problem. In this paper, we propose a novel honeyword generation approach which decreases the storage overhead, typo safety problem and also reduces the other drawbacks of existing honeywords generation techniques such as old password management problem, etc. Our proposed system stores the other users' passwords as honeywords in the database instead of creating the honeywords for reducing storage overhead problem and typo safety problem. Moreover, we store the password and honeywords into the database using a unique hashing algorithm with very low time complexity as most of the steps involved simple binary operations.