Password Security Research Articles

Enhancing Security with Binary Bit Password Protection Techniques

The Objective of this Paper is to Develop a Password Security System Utilizing BinaryBit Technology logic gates AND, XOR, and NOT. A separate color light will glow to signify incorrect password entry (as opposed to the value previously stored). A colorful light will glow if the password you entered matches the password you previously stored. I’ll try to put this approach into practice using the Multisim and Verilog programs. This password security system is an approachable one that may be used in homes, workplaces, and other institutions. Passwords are used throughout the system to restrict access. This simple circuit can be installed in residential areas to increase safety. It can be used in businesses to ensure authorized access to places with high security requirements. I’ll be attempting to use a counter in the real-time circuit to lower the number of password entry tries as a result, the security system will be significantly safer and less error-prone.

Manager's Practical Toolkit to Improve Password Security in Organizations

Manager's Practical Toolkit to Improve Password Security in Organizations

A Study on Markov-Based Password Strength Meters

A Study on Markov-Based Password Strength Meters

Honeywords Generation Technique based on Meerkat Clan Algorithm and WordNet

The efficiency of the Honeywords approach has been proven to be a significant tool for boosting password security. The suggested system utilizes the Meerkat Clan Algorithm (MCA) in conjunction with WordNet to produce honeywords, thereby enhancing the level of password security. The technique of generating honeywords involves data sources from WordNet, which contributes to the improvement of authenticity and diversity in the honeywords. The method encompasses a series of consecutive stages, which include the tokenization of passwords, the formation of alphabet tokens using the Meerkat Clan Algorithm (MCA), the handling of digit tokens, the creation of unique character tokens, and the consolidation of honeywords. The optimization of the performance of the Meerkat Clan Algorithm (MCA) involves the careful selection of parameters. The experimental findings have exhibited noteworthy levels of precision and optimum efficacy, particularly in tasks such as proposing words with similar meanings, forecasting numerical values, and producing distinctive symbols. The attainment of this achievement is facilitated by a confluence of factors, encompassing the caliber of data, the judicious use of algorithms or models, and the ongoing process of iterative improvement to consistently enhance outcomes. In order to achieve the appropriate levels of accuracy and functionality, it is crucial to engage in the process of conducting experiments, thoroughly testing the system, and making necessary improvements. The empirical findings provide confirmation of the effectiveness of the MCA in producing a varied and protected collection of honeywords. This is especially evident in the case of alphabet tokens, which are distinguished by their autonomous creation and strong security characteristics. The analysis of correction rates, specifically in relation to the password "Lion1999*," demonstrates the aforementioned results. This study reveals an average accuracy of honeyword production up to 0.729847632111541. In the same manner, the accuracy of the password "house2000" is determined to be 0.761325846711256. Additionally, when considering a sample of 100 passwords, the mean accuracy of honeyword creation is calculated to be 0.7073897168887518. The findings collectively highlight the effectiveness of the MCA in generating honeywords that possess improved security characteristics.

Evolution and State of the Art in Password Storage

Passwords have historically been pivotal for access control and authentication, yet their security remains a recurring concern in today’s digital world. As evidenced by high-profile data breaches, secure password storage has always been paramount, but often not achieved. While users grapple with the creation of strong, memorable passwords, the burden also falls on service providers to store these passwords securely. Even though alternative authentication mechanisms have emerged, password-based authentication remains pervasive. Surprisingly, studies highlight that developers frequently exhibit misconceptions or negligence towards password storage security. This paper traces the progression of password storage methods by explaining four password hashing methods. By informing of four modern password storage systems, this work seeks to bridge the knowledge gap, advocating for better practices and illuminating the significance of prioritizing security alongside functionality.

Functional integration of handwritten digit recognition and encryption/decryption based on Pt/GaOx/TiN memristor array for a new data security system

In the age of big data, information security has become more and more essential for the Internet of Things. Since the software encryption algorithm can be easily hacked, the hardware security system has emerged as a reliable way to safeguard information. Here, a GaOx-based memristor array is experimentally demonstrated, which features a good multi-level storage capacity, 20 ns switching speed, and highly linear conductance modulation of over 500 states by multi pulses. An artificial neural network and an XOR circuit were further constructed based on this memristor array. This work connects memristor array-based handwritten digit recognition and data security circuit, forming a new data security management system for secure password input and transmission.

Fortifying Data Security

This paper delves into the crucial aspects of authentication and authorization in modern web applications with a focus on enhancing data security. It explores the use of Node.js, a versatile server-side language, for building web applications and discusses the significance of a secure website for establishing trust between clients and servers. The research covers the implementation of authentication using packages and hashing algorithms, emphasizing the importance of "salt" and "pepper" for password security. Authorization methods, including cookies, sessions, and middleware, are also explored. The paper highlights the necessity of robust security measures to safeguard user data from the dark web and points to future directions in web security, including the role of blockchain and artificial intelligence in the WEB3 landscape.

Tell Me Where You Live and I Will Tell Your P@Ssw0rd: Understanding the Macrosocial Variables Influencing Password’s Strength

Users’ habits in relation to cybersecurity are frequently examined from the micro perspective, using survey results to obtain impactful variables from individuals, focusing on usability and security factors of passwords. In this paper, the influence of macrosocial factors on password strength is studied in order to offer a global comprehension of the influence of the environment on users. Using the list of the 200 most common passwords by countries released by NordPass in 2021, logistic regression has been used to predict macrosocial variable influencing password strength. Results show that (1) Literacy level of a population; (2) Voice and accountability; (3) Level of global cybersecurity; and (4) Level of data breaches exposure significantly predict users’ password strength performance. The author discusses the impact of government on password hygiene of users hoping to influence the development of policies around cyber security configurations and investment set by nations and institutions.

Personal CAPTCHA-based authentication protocol

In recent years, the number of personal accounts assigned to a single user has considerably increased. According recent study, the average employee had above 190 individual login credentials. The most important problems users face with such a large number of passwords are the strength of passwords and the user's ability to remember them. Researchers have shown that, in general, users are aware of what a secure password should look like, but may forgot these security measures in favour of more convenient passwords, depending largely on the type of account (le Bras, 2015). Repeating the same password across multiple platforms or creating it using dictionary words has also proven to be a common practice among many people. In this article, a new password reminder scheme will be presented. The goal was for the user to create a CAPTCHA-like image with a hidden meaning that only the user would be able to reveal. The image must have some connection to the person's experience and memory or unique knowledge. With such an image, presented each time the user logs in, he is asked to associate a password consisting of two or more words and a number. If the image is appropriately selected and associated with a strong association with the person's visual memory, the chances of recalling the long password he created in this way should not be a problem.

Combination of Alphanumeric Password and Graphic Authentication for Cyber Security

The main objective of this research is to create a more secure and user-friendly password-generation method that is less vulnerable to attacks such as shoulder surfing. Similarly, while textual or alphanumeric passwords are not entirely secure, they also come with certain limitations, including issues related to memory. The novelty of this research is the development of a new algorithm (Secure Password Algorithm/SPA) for password generation that uses graphics to generate textual input from users based on user perceptions. This method is more resilient against attacks like shoulder surfing and offers a more secure and user-friendly way of creating passwords. This research uses a combination of literature review and SPA proposals to create passwords with graphical and encryption techniques. The literature review examines the weaknesses of existing graphical and text password methods. The proposed algorithm focuses on user perception and confidential data to create more secure and easy-to-use passwords. The research results show that this research can provide a new, more secure, and user-friendly method of generating passwords such as shoulder surfing. Research supports software implementation of these algorithms and psychometric, psychological, and psychiatric studies to improve user input and protect systems from malicious attacks. Graphical passwords provide better recall compared to textual passwords, and the proposed algorithm for password generation using graphical and encryption techniques provides a more secure and user-friendly method of password generation that is less vulnerable to attacks such as shoulder surfing. The proposed new encryption algorithm has succeeded in overcoming various potential weaknesses and attacks on previous encryption methods. The test results demonstrate the efficiency and near invulnerability of the SPA algorithm against brute force attacks on specific security parameters. Tested alongside AES, shows comparable security levels, particularly in resource-constrained environments. To address doubts, the paper establishes evaluation standards for computational complexity, resistance to known attacks, and adaptability to evolving threats. The algorithm has the potential to be a stronger and more secure solution for generating passwords to safeguard confidential user information.

Исследование механизмов защиты облачных сервисов

The article analyzes the protection mechanisms of cloud services. Criteria for adequate evaluation of these mechanisms are identified. In the framework of experimental research, the best mechanism of cloud service protection is identified, taking into account the requirements and needs of the user. In the modern information society, everyone is faced with the problem of securely storing various passwords, logins and other data. Someone wrote them down in a notebook or just on a piece of paper that was glued to the computer from which they authenticated. All this is long in the past. Any data leak will cause moral and material harm to both an ordinary person and a large company. Today, cloud computing is used for this as the main method of storing data at work or at home. The leaders in cloud technologies are the following Internet services: Dropbox, OneDrive, Google Drive, iCloud, Yandex.Disk, Cloud Mail.Ru, MegaDisk, Mega, BOX, pCloud, Files.fm, WDfiles.ru, wdho.ru, Anonfile.com, My-Files.Ru. Not only must cloud service providers protect their customers, network infrastructure, applications and platforms, but the user himself must ensure the security of his data and applications using strong passwords and authentication measures.

Cybersecurity awareness among university students in Mogadishu: a comparative study

<span>This study aimed to assess the level of cyber security awareness among graduate and undergraduate students in five universities in Mogadishu. The study used a one-way analysis of variance (ANOVA) to examine the difference in cyber security awareness levels between graduate and undergraduate students across five reputable universities. The questionnaire method was used to collect data from 250 graduate and undergraduate students from SIMAD, SIU, UNISO, Jamhuriya, and Mogadishu universities. The cross-tabulation result showed that there was a significant difference in cyber security awareness levels between the universities. Specifically, the results showed that students from SIMAD and Jamhuriya universities suffered from virus attacks, while SIU students struggled with password strength and social network misuse. Mogadishu students faced phishing and virus attacks, and UNISO students dealt with both virus attacks and password strength issues. The study recommended that universities educate their students and parents on safe internet usage and cybersecurity and monitor and secure their internet and computer services. Additionally, the authors recommended the development of cybersecurity software to help students use their data confidently and securely.</span>

THE LANDSCAPE OF AUTHENTICATION SYSTEMS: A COMPREHENSIVE SURVEY

Nowadays, authentication systems are extremely important in many aspects of digital life. They help to protect personal and confidential data from unauthorized access. authentication systems are effective ways to prevent hacking and fraud attacks. Also, They are crucial in ensuring digital security and protecting sensitive data in our connected world. The authentication can be done in multiple ways, one of which is using a password, such system is called a password-based authentication system. Password is the basic and most common method of authentication. This paper overviews the authentication systems, types, and objectives and mentions each type's disadvantages, advantages, and problems. The paper then highlights the text password authentication system, its weak points, and attacks they are exposed to, in addition to developing means and methods to increase the strength of passwords so that they can overcome the attacks they face. The paper provides a good background for anyone who wants to start in this field, as it gives a detailed idea of the systems used, making it easier for the reader to choose the authentication system to desire

Cyber Security Awareness Model (Among Children) Using Protection Motivation Theory: A Review

In recent times, there has been a growing concern regarding children's cyber security due to their increased access to the Internet and exposure to various online threats. This issue has garnered significant attention as it poses a considerable risk to children's safety and well-being. As a result, research on children's cyber security awareness has become an area of rapid growth. To contribute to the understanding of this topic, this paper aims to review the latest findings regarding the application of the Protection Motivation Theory (PMT) in developing a Cyber Security Awareness Model for children. The Protection Motivation Theory offers a valuable framework for understanding individuals' motivations and decision-making processes regarding protective behaviors in the face of perceived threats. By applying PMT to children's cyber security awareness, researchers can gain insights into the factors that influence children's motivation to engage in protective actions while navigating the online environment. This review paper will explore and analyze recent studies that have employed the Protection Motivation Theory in developing Cyber Security Awareness Models tailored specifically for children. The models derived from PMT can provide a deeper understanding of children's threat appraisal, including their perception of the severity and vulnerability to online risks. Moreover, the coping appraisal aspect of PMT allows researchers to examine children's evaluation of the effectiveness and feasibility of protective actions, such as employing secure passwords, avoiding sharing personal information, and recognizing potential online dangers. By synthesizing the most recent research findings, this paper aims to contribute to the knowledge base on children's cyber security awareness. Understanding how the Protection Motivation Theory can be applied in the context of children's cyber security will enable the development of effective interventions and educational programs to enhance children's online safety. Ultimately, the goal is to empower children with the necessary skills and knowledge to protect themselves from online threats and make informed decisions while navigating the digital world.

Effective Password Strengthening Techniques

Abstract: Protecting passwords from hackers is a formidable challenge in the current technological landscape, given the myriad of tools available in the hacking domain. This paper delves into an exploration of various password types and lengths, highlighting those that are ill-advised for use. Additionally, it discusses password types that offer comparatively greater security and outlines prevalent cracking techniques employed by hackers. The document further outlines effective measures to enhance password security, incorporating algorithms designed for this purpose. Comprehensive coverage is provided on methods to safeguard passwords from potential attacks. Notably, the paper extends its scope to include insights into the various types of WiFi passwords.

How memory anxiety can influence password security behavior

Password reuse and modification are insecure password behaviors that are becoming increasingly prevalent as users are obliged to remember more passwords to access various digital services. Many users adopt these risky behaviors as a memory strategy in the belief that they have too many passwords for their memories to cope with. One important avenue in password research is metamemory, which encompasses the knowledge and understanding of memory capabilities and strategies. Previous research on password metamemory has examined the role that metamemory plays in memory performance (i.e., how well memory performs) and password recall. However, no previous research to date has investigated whether password reuse and modification are adopted as memory strategies due to an increase in knowledge and understanding of metamemory. To address this gap, two survey studies (Study1: N = 50, Study 2: N = 303) were implemented to examine the role that password metamemory plays in reusing and modifying passwords. Our findings suggest that of all metamemory constructs, users’ anxiety regarding their perceived ability to remember passwords can influence them to reuse and modify their passwords. These findings have potentially important implications because with an enhanced understanding of how users’ anxiety towards remembering passwords influences their security behavior, this could identify means of reducing password reuse and modification, thereby increasing password security and ultimately reduce some of the consequences of insecure password behaviors.

Measuring Individuals Cybersecurity Awareness Based on Demographic Features

Cybersecurity awareness has a huge impact on individuals and an even bigger impact on firms, universities, and institutes to those individuals belong. Consequently, it is essential to explore and asses the factors affecting the awareness level of cybersecurity. More specifically this research study examines the impact of demographic features of individuals on cybersecurity awareness. The Studied literature’s limitations have been addressed and overcome in our research from the variability, and ambiguity aspects. A questionnaire was developed and responses were collected from 613 participants. Reliability and validity tests as well as correlations have been applied for the instruments and data employed in this study. Coefficients were calculated via multiple linear regression for the weights of each of the cybersecurity components. Data reliability test showed that Cronbach's Alpha value of 0.707 for the used data which is acceptable for research purposes. Results analysis showed r-value for each of the questions is greater than the r table which was 0.07992. Examining the proposed hypotheses showed that there is a difference as the null hypothesis is rejected for one of the demographic features being tested namely, gender. While there is no significant difference when it comes to the other two factors, education level, and age. Using the weight for each of the components, password security, technical behavior, and social influence could provide a solid base for decision-makers to focus on and implement the available resources for gender-specific developments to raise the cybersecurity awareness level.

Web Framework

The purpose of this paper is to demonstrate how to extend a web framework (WF) for developing web apps that can meet the diverse needs of different fields. This work aims to provide computer science senior project students with an opportunity to work on a wide range of projects using Apache, HTML, CSS, JavaScript, PHP, and MySQL. The paper presents a WF that manages jokes, based on the book PHP MySQL: Novice to Ninja (6th ed.) by T. Butler and K. Yank. The WF is interactive, responsive, secure, password-protected and database-driven. It consists of generic and specific components that use a MySQL database on the web server-side to store jokes. The specific components can be modified or added to create custom apps. Admin users can log in with their email and password and perform various actions (view, add, delete and edit) on jokes and categories, depending on their level of permission. Admins with full permissions can also edit the permissions of other registered accounts and access the Manage Categories, Manage Jokes, and Manage Authors pages. The original WF is enhanced and expanded for the senior project starting point by adding the following features: a hierarchical main menu with admin menus as the second level, a highlighted selected menu item, responsive design - accessibility on all devices, improved password security (minimum of 8 characters, 1 lowercase letter, 1 uppercase letter, 1 digit, 1 special character), a two-factor authentication security subsystem, cascaded deletion and uploaded and retrieved binary files (images and documents). In conclusion, the project is designed and implemented following the best practices and tested on a web hosting server provider.

ANALYZING USER PASSWORDS WORLDWIDE IN TERMS OF CYBER THREATS

Analysing user passwords used around the world is a very broad topic and involves a variety of factors. Password analysis is usually based on detailed studies by security experts, cyber security researchers and encryption experts. Weak passwords, repeated passwords, simple patterns, short passwords, personal information are critical contents that create vulnerabilities and are ignored by users. Attackers or attack tools working for password interception can easily intercept passwords that contain security measures below a certain level, that is, passwords that are not complex. The purpose of this study is to analyse global password usage, to increase users' awareness about password security and to encourage users to use stronger passwords. Small program snippets and new tools have been coded to achieve this goal. In future studies, it is aimed to improve the current application by automating the control of the distance of the texts from each other as a new password suggestion method and hybridising machine learning methods.

Neuro-Robotic Synergy: Crafting the Secure Future of Industries in the Post Pandemic Era

In recent years, ICSs have become increasingly commonplace in virtually every industry. The abbreviation “ICSs” refers to industrial control systems. These are specially designed computers used for monitoring, managing, and controlling procedures and tasks across a wide range of industries and vital infrastructure sectors. Production, power, disinfection of water, transport, and other sectors all greatly benefit from ICS use. The authors of this paper aim to detect ICS cyber hazards in industry. This article is the result of the writers’ extensive research on ICS programs and the impact of cyberattacks on them as well. The study narrowed its attention to just three ICS applications because there are simply too many to count: power plants, water reservoirs, and gas pipelines. The present paper focuses on the development and evaluation of neural networks for use in cyberattacks. An early form of neural network, the residual system, came first in the field. When a breach is detected in the ICS, the neural network sorts it into one of several categories. The produced datasets must not compromise users’ privacy or cause harm to the relevant industry if they fall into the wrong hands. An encoding device, decoder, pseudo-encoder, and critical model neural networks work together to generate random data. Finally, a set of trials is conducted in which a residual neural network is utilized to classify cyberattacks based on both the created and original datasets. Results from a series of studies indicate that using the created dataset is an effective technique to train high-quality neural networks for use in cybersecurity on a large amount of data without sacrificing the accuracy of the models. The Kullback-Leibler and Jensen-Shannon divergences also serve as the theoretical foundation and technique, respectively. In particular, the paper recommends operational and maintenance cybersecurity standards for ICS. This entails such things as secure password practices, patch management, and anti-malware defense. Physical safeguards for ICS is another topic that is covered.