Password Management Research Articles

Exploring Perceptions and Habits of Sri Lankan Users: A Study on Password Management and Adoption of Password Managers

Exploring Perceptions and Habits of Sri Lankan Users: A Study on Password Management and Adoption of Password Managers

PhishGuard: Integrating Fine-Tuned Large Language Models (LLMs) into Password Management

PhishGuard: Integrating Fine-Tuned Large Language Models (LLMs) into Password Management

Training And Recognition of The Importance of Cybersecurity For Umkm In Entering The Digital Market

Borobudur district is a district located in Magelang district with 20 districts. Dusun Ngaran I is one of the dunes in Borobudur, with a number of UMKM perpetrators more than 15 UMKM. Asoy Warung UMKM is a UMKM in Dusun ngaran I that shakes in the field of processing of soy milk snakes. UMKM itself is a productive enterprise that is considered by individuals or enterprises that have met the criteria as a micro enterprise. The Covid-19 pandemic encourages UMKM to conduct business activities through digital platforms. So UMKM becomes a potential target for cyber security attacks. Lack of education and introduction to cyber security, many UMKM perpetrators are not aware of the threat of cyberattacks.The urgency of this activity is that the attacks targeting UMKM indirectly are the effect of the Covid-19 pandemic that requires to shift the process of transactions mainly sales and sales and promotions using digital media and the Internet. The education and training provided is to recognize digital assets, security defence updates, password management, threats of phishing and malware attacks as well as backup and data recovery. The objective of this activity is to provide training training and recognition of the importance of cyber capabilities for UMKM in entering the digital market. The methods carried out are training and support to know the digital asset and the application of the basics of cybersecurity in preventing cyber attacks.

Information Security Practices and Intervention Among Teenagers

ABSTRACT In the digital age, information is drastically exchanged among users. This data exchange paved the way for unsolicited access by cybercriminals, which could lead to psychological and financial loss. In this study, through a pre- and posttest experimental design, 668 Indian teenagers aged between fifteen and nineteen were evaluated last year. The preliminary study revealed low performance by teenagers in e-mail practices, password management, software practices, social media usage, and privacy settings. Through a novel intervention, 36 teenagers were observed through a curated information security module. The pretest and posttest analyses significantly supported the effects of security training, and Cohen’s d effect size reiterated the importance of progressive outcomes in their security literacy and practices. The intervention focused on the importance of threat perception and coping appraisal for inculcating security parameters and behavioral change among the teenagers.

A framework for analyzing authentication risks in account networks

Our everyday life depends more and more on online services and, therefore, access to related user accounts. The security of user accounts, again, is tied to the security of the corresponding primary and fallback authentication methods. Accounts can be linked to each other – by fallback authentication, through SSO, or by using the same authentication devices – creating an account network. These account networks enhance login comfort and are needed in case of account recovery, but they also increase each account's attack surface. In addition, misconfigurations might result in account inaccessibility. However, these problems can only be detected by analyzing single accounts first and then the resulting account networks. Despite the importance to understand account security and accessibility, almost no analysis methods exist.To address this need, this article presents the Authentication Analysis Framework (AAF). AAF evaluates account types and primary and fallback authentication methods for each account, before analyzing the overall account network. By detecting transitive risks, weak links can be discovered and subsequently strengthened. We further propose maturity models to rank the primary and fallback authentication methods based on risks and a description language to exchange the required information. AAF is implemented as a plugin for the password manager KeePass to assist end users and as a standalone tool for researchers.

Security Aspects of Cryptocurrency Wallets—A Systematic Literature Review

Cryptocurrencies are gaining prominence among individuals and companies alike, resulting in the growing adoption of so-called cryptocurrency wallet applications, as these simplify transactions. These wallets are available in a myriad of different forms and specifications. All of them are susceptible to various ways the attacker can exploit the vulnerabilities and steal money from victims. Cryptocurrency wallets create a unique field as they combine features of password managers, banking applications, and the need to keep their users and their transactions anonymous. We collect the findings from previous literature to provide an overview of the different attack surfaces, possible countermeasures, and further research. Existing literature focused on one of the features mentioned before, while we considered all of them. Our systematic study shows that there is a considerable variety of attack vectors, which we have divided into six subcategories, (i) Memory and Storage, (ii) Operating Systems, (iii) Software Layer, (iv) Network Layer, (v) Blockchain Protocol, and (vi) Others. We have found a large gap between the possible countermeasures and their actual adoption. Therefore, we provide a list of possible directions for future research to tackle this gap.

Challenges and Opportunities in Password Management: A Review of Current Solutions

For over six decades, passwords have served as the primary authentication mechanism for almost all modern computer systems. However, password management is a challenging task for most computer users, and that has led users to many malpractices that open the door for most information security breaches over time. Despite many efforts, no alternative solution has ever succeeded in replacing passwords as the primary authentication mechanism. As a result, users are now heavily relying on password managers to alleviate the burden of manual password management. This paper addresses the topic of password management about different types of password managers and their inherent limitations. By evaluating the existing password management approaches and identifying potential improvements, this paper aims to signify an important research gap that exists in the study area; the need for fully automating the process of manual password management.

PASSWORD MANAGER SECURITY USING HONEY ENCRYPTION ALGORITHM AND HONEYPOT TECHNIQUE

Password managers are crucial tools for securely storing and managing multiple passwords. However, they can become targets for attackers attempting to gain unauthorized access to sensitive user data. In this paper, we propose an approach to password manager security by combining the Honey Encryption algorithm with the Honeypot technique. By implementing Honey Encryption on the authorization process of the password manager, we can effectively divert attackers to a honeypot, which contains a list of fake/honeyword passwords. The honeypot is designed to be high interaction, allowing us to gather valuable information about the attacker, such as their IP address and MAC address. This information can be crucial for further analysis and taking appropriate actions to mitigate the security breach. Our proposed system provides an additional layer of security to password managers, making them more robust against unauthorized access attempts.

DIGITAL TRANSFORMATION VULNERABILITIES: ASSESSING THE RISKS AND STRENGTHENING CYBER SECURITY

Digital transformation has revolutionized the way organizations operate, enabling them to leverage advanced technologies for increased efficiency and productivity. However, along with the benefits, digital transformation also brings new vulnerabilities and risks, particularly in the realm of cybersecurity. This abstract aims to provide an overview of the vulnerabilities associated with digital transformation and highlight the importance of assessing risks and strengthening cybersecurity measures to mitigate potential threats. The rapid adoption of cloud computing, Internet of Things devices, and interconnected systems has expanded the attack surface for cybercriminals. Organizations must recognize the potential vulnerabilities introduced by these technologies, such as data breaches, system failures, and unauthorized access. Understanding the specific risks associated with digital transformation is crucial for developing effective cybersecurity strategies. Assessing risks involves evaluating the organization’s digital infrastructure, identifying potential weak points, and determining the likelihood and potential impact of various threats. This process enables organizations to prioritize cybersecurity efforts and allocate resources effectively. It also involves evaluating the security measures in place, including firewalls, intrusion detection systems, encryption protocols, and employee training programs, to ensure they are up to date and resilient against emerging threats. Strengthening cybersecurity requires a multi-layered approach that encompasses technical measures, organizational policies, and a culture of security awareness. Implementing robust security controls, such as regular software updates, network segmentation, and access controls, helps fortify digital systems against attacks. Additionally, establishing incident response plans and conducting regular security audits aids in identifying vulnerabilities and responding swiftly to cyber incidents. Furthermore, fostering a culture of cybersecurity awareness among employees is essential. Educating staff on best practices, such as strong password management, phishing awareness, and safe browsing habits, empowers them to become the first line of defence against cyber threats.

Implementation of Secure Password Manager

In everyday life, we have many files which we want to safeguard against prying eyes. For that, this paper introduces a vault encrypted with AES to save those important files. Also, with growing internet usage, and usernames and passwords required everywhere, there is a need for a safe vault to store can if the person can forget. A desktop application for this purpose is discussed in this paper. This is a 2-part project, consisting of a secure file value and a secure password manager. The password manager uses a database. The whole of the project is developed in Python, using its various libraries that serve its purposes. Cryptography is another highlight here. But, by only using Python libraries and the functions included in them, this is possible. Extensive coding for only cryptography is not done, it is done using various functions.

Education, Online Presence and Cybersecurity Implications: A Study of Information Security Practices of Computing Students in Saudi Arabia

Information technology is considered as a key enabler to achieve “education for all” as a sustainable development goal; however, involvement in the education sector has introduced security risks along with benefits. Students’ exposure to the internet has increased the probability of cybersecurity attacks. To foster a more sustainable use of technology, it is crucial that students are made aware of information security risks and can keep themselves protected in the online sphere. In this paper, we present the results of a cross-sectional study that explores information-security awareness among students in Saudi Arabia. Empirical data were collected using an online questionnaire and a factor analysis was conducted using partial least-squares structured equation modelling. Based on the existing literature, we focused on four key constructs: password management, infrastructure management, email management, and the perception of security. The results of this study have highlighted that email management and infrastructure management were seen as relevant factors, whereas password management and the perception of security were not considered relevant factors by the respondents. We have also chalked out recommendations to improve cybersecurity awareness among students. The findings of this study will potentially help educational institutions and parents to prepare students in adopting security practices while they are online.

Cyber security in university libraries and implication for library and information science education in Nigeria

Purpose Technological expansion and adoption in university libraries have precipitated cybercrimes and the need to equip library personnel with the required knowledge to combat this menace. Consequently, this study aims to examine cyber security in university libraries and its implication for Library and Information Science education. Design/methodology/approach The study adopted descriptive research design, while questionnaire and interview were used to elicit data from library personnel and heads of library schools, respectively. A total of 134 responses were elicited through structured questionnaire (administered online due to the closure of universities) while six heads of library schools were interviewed, one from each of the six geopolitical zones in Nigeria. Findings The data from the questionnaire which were descriptively analysed revealed that the perceived knowledge of cyber security among the librarians was moderately low. Also, the university libraries were exposed to various cyber threats, with cyber security/guideline been one of the critical measures to combat cybercrime. Also, the result showed that librarians displayed high level of adherence to cyber ethics. However, the disposition of library management towards cyber security issues was revealed to be the main challenge to the deployment of cyber security in university libraries, follow by poor password management. Majority of the librarians possess basic knowledge of cyber security, though with serious interest to learn more about it. They were not taught cyber security in library school and they indicated enthusiasm to learn about it. The result of the interview with heads of library schools showed majority of these schools do not offer cyber security course due to dearth in skilled manpower. Originality/value The study presents cybercrime as a menace, if not tackled, would affect the university libraries’ sustainability as information institution, compromising their ability to deliver quality services.

Creating Password Protector Application for Preventing Unauthorised Hackers Using Java

Password managers utilise the master password or security key to safeguard user passwords. The security of Master Password users gets compromised when they use a weak Master Password. Because users always require a token to log in, the advantages of using security keys are minimal. In this article, we present an entirely novel password administration platform that uses secret sharing and a user's server to offer excellent security and convenience of use. Password protection systems are still vulnerable to various attacks ten years after their inception. SECRYPT is an all-in-one encrypted password manager that takes care of your security and privacy. Protects the user's web service password in the cloud service password file. The fact that the application works as SaaS in the cloud increases the usability and reliability of the application. All passwords stored in our app are encrypted and stored in a cloud database. Your passwords and encrypted keys are stored in multiple databases for added security. To address this issue, we attempted to create a safe password manager that can recover multiple user accounts and passwords locally, relieving users of the stress of remembering many accounts and passwords. The data is encrypted with the AES encryption algorithm for maximum user security and the password manager is integrated into the browser to provide many important functions to the end users

Cloud Based Password Wallet and Manager

Although various solutions have been suggested for password management systems, most methods require the support of external physical hardware infrastructure. Due to the increase in complexity and cost of set-up of supporting hardware requirements, scalability will always be an issue with such systems. In this paper, we present the design of a Cloud based password management system. The proposed method uses Cryptography for better encryption and is supported by a web-based architecture, for easily managing passwords and providing an indoor cloud based password manager system . Keyword: Cloud Computing Restful API Cyber Security Password Manager

An Empirical Study of Password Policy Compliance

Cybersecurity exploits that take advantage of weak passwords continue to succeed in virtually every industry. This motivates interest in empirically determining the extent to which websites that invite visitors to create new user accounts on them encourage or require users to engage in better password management practices, including strong passwords. This project examined a statistically significant sample of websites to assess how closely they voluntarily adhere to the National Institute of Standards and Technology’s authoritative guidance on password policies. Over 100 representative websites were selected from industries that consistently report the most breaches in the Verizon Data Breach Investigation Report. Their respective user account creation processes were assessed via a scorecard approach based on observations collected when following standardized experimental procedures. Scorecard data then were aggregated and analyzed for trends. The research findings highlight potential vulnerabilities that persist in online account password creation practices, leaving many websites susceptible to brute force attacks due to cyber hygiene lapses. Recommendations to help remediate compliance gaps and as paths forward to build upon this work include refining the proposed scorecard, creating and using standardized user registration and profile manager plugins, widely adopting user-friendly password management tools, and enacting tougher legal consequences for website hosts when breaches occur.

A Study of Password Management Behaviors of Young People

Password-based authentication is still the most widely used authentication method today. Unfortunately, passwords are the main culprit leading to cyberattacks. This study examines the behaviors of young people towards password generation and usage. The young people will ultimately become the future for society. An online survey with a sample of 265 respondents aged 10–24 was conducted between April and August 2021. The research utilized descriptive statistical analyses and compared the responses from young people with older people. The results suggest that although the survey participants seemed to have basic knowledge of creating complex passwords, they still possessed some aspects, which could lead to being a cyberattack target. This preliminary study provides information and increases awareness for policymakers and educators in such a way that it could be used to create an educational program on the importance of managing passwords securely. In addition, the study provides insights into the password management of young people between the ages of 10 and 24.

Impact of Password Management Strategies on the Trust Enhancement in the Digital Era

Impact of Password Management Strategies on the Trust Enhancement in the Digital Era

Positively Fearful: Activating the Individual’s HERO Within to Explain Volitional Security Technology Adoption

Regardless of what security professionals do to motivate personal users to adopt security technologies volitionally, the end result seems to be the same—low adoption rates. To increase these rates, we propose activating their positive psychological capital (PsyCap), which consists of hope, self-efficacy, resilience, and optimism (i.e., their “HERO within”). We propose that greater PsyCap toward a security technology is associated with greater adoption rates (and intentions thereof) because positivity increases motivation. We further posit that PsyCap both moderates and is moderated by other constructs. We suggest that personal users’ conditioned fear from the security threat moderates the effect of PsyCap on adoption intentions because some fear is necessary to activate their positive PsyCap to form their behavioral intentions to adopt security technologies. We further hypothesize that PsyCap moderates the effect of adoption intentions on actual adoption rates because activating an individual’s HERO within encourages individuals to exert the effort necessary to translate their intentions into actual adoption. Finally, we theorize that enhancing fear appeal messages with appeals to an individual’s HERO has a greater effect on volitional adoption rates relative to messages without these PsyCap-related appeals. To support our hypotheses, we conducted two experiments using the volitional adoption of a password manager application and a two-factor authentication (2FA) service. We found differential support for our hypotheses across the two security technologies, which suggests technology characteristics might mitigate the impact of PsyCap on volitional adoption decisions.

Impact of password management strategies on the trust enhancement in the digital era

Impact of password management strategies on the trust enhancement in the digital era

Strategies for Managing Reliable and Secure Passwords: Modern Approaches and Recommendations

In today's digital world, where the number of online services and resources is constantly growing, ensuring the security and reliability of passwords is an important task for users. This article provides an overview of current password management strategies and recommendations for creating strong and secure password combinations.