Towards an Empirical Cost Model for Mental Password Algorithms - Archive ouverte HAL Access content directly
Conference Papers Year :

Towards an Empirical Cost Model for Mental Password Algorithms

(1) , (2) , (3)
1
2
3
Ted Selker
  • Function : Author
  • PersonId : 1020025

Abstract

Reliance on technology has diminished our use of mental computation. However, mental computation's inherent privacy features are becoming central to new research on creating more secure and usable passwords than one gets with approaches such as password managers. This work empirically studies the validity of cognitive assumptions relative to mental computation for making codes like passwords , using as a starting point password algorithms and a cost model for mental computation developed by Blum and Vempala. Through a study on 126 participants, we refute some of their model's assumptions, and introduce evidence of behaviours where human computing costs behave counter-intuitively. We also identify three empirical questions around symmetry, repeatability, and distribution of costs whose resolution would allow the development of more predictive cognitive computation models. This would then allow the efficient creation of better security algorithms.
Fichier principal
Vignette du fichier
CHI2020_extended_abstract (6).pdf (338.83 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-02560611 , version 1 (02-05-2020)

Identifiers

Cite

Enka Blanchard, Ted Selker, Florentin Waligorski. Towards an Empirical Cost Model for Mental Password Algorithms. CHI Conference on Human Factors in Computing Systems, Apr 2020, Honolulu, United States. ⟨10.1145/3334480.3382990⟩. ⟨hal-02560611⟩
92 View
115 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More