Freestyle, a randomized version of ChaCha for resisting offline brute-force and dictionary attacks

In the current Windows version (Vista), as in all previous versions, creating a user account without setting a password is possible. For a personal PC this might be without too much risk, although it is not recommended, even by Microsoft itself. However, for business computers it is necessary to restrict access to the computers, starting with defining a different password for every user account. For the earlier versions of Windows, a lot of resources can be found giving advice how to construct passwords of user accounts. In some extent they contain remarks concerning the suitability of their solution for Windows Vista. But all these resources are not very precise about what kind of passwords the user must use. To assess the protection of passwords, it is very useful to know how effective the widely available applications for cracking passwords. This research analyzes, in which way an attacker is able to obtain the password of a Windows Vista PC. During this research the physical access to the PC is needed. This research shows that password consists of 8 characters with small letter characters and numbers can easily be cracked if it has know usual combinations. Whereas a Dictionary Attack will probably not find unusual combinations. Adding captel letter characters will make the process harder as there are several more combinations, so it will take longer time but is still feasible. Taking into account special characters it will probably take too long time and even most Dictionary Attacks will fail. For rainbow tables the size of the table has to be considered. If it is not too big, even these small passwords cannot be cracked. For longer passwords probably the simplest ones, small letter characters and numbers, can be cracked only. In this case brute force takes too long time in most cases and a dictionary will contain only a few words this long and even the rainbow tables become too large for normal use. They can only be successful if enough limitations are known and the overall size of the table can be limited.

Download Full-text

AcSIS: Authentication System Based on Image Splicing

Engineering, Technology & Applied Science Research ◽

10.48084/etasr.3060 ◽

2019 ◽

Vol 9 (5) ◽

pp. 4808-4812

Author(s):

S. Hamid ◽

N. Z. Bawany ◽

S. Khan

Keyword(s):

Success Rate ◽

Brute Force ◽

Image Splicing ◽

Password Authentication ◽

Trade Off ◽

Graphical Passwords ◽

Password Security ◽

Authentication System ◽

Digital Assets ◽

Dictionary Attacks

Text-based passwords are widely used for the authentication of digital assets. Typically, password security and usability is a trade-off, i.e. easy-to-remember passwords have higher usability that makes them vulnerable to brute-force and dictionary attacks. Complex passwords have stronger security but poor usability. In order to strengthen the security in conjunction with the improved usability, we hereby propose a novel graphical authentication system. This system is a picture-based password scheme which comprises of the method of image splicing. Authentication data were collected from 33 different users. The usability of the method was evaluated via a comparison between the number of correct and incorrect authentication attempts and time taken. Additionally, a comparison was made between our proposed method and a complex text-based password authentication method using the authentication success rate. Authentication using image splicing proved to be resilient to brute-force attacks since the processing of images consumes a voluminous password space. The evaluation of the usability revealed that graphical passwords were easy-to-remember, resulting in a higher number of correct attempts. The proposed method produced 50% higher success rate compared to the text-based method. Findings motivate the use of the proposed method for securing digital assets.

Download Full-text

Graphical password scheme to diminish shoulder surfing

International Journal of Engineering & Technology ◽

10.14419/ijet.v7i1.1.9474 ◽

2017 ◽

Vol 7 (1.1) ◽

pp. 234

Author(s):

D. Sri Ram Varma ◽

K. Meghana ◽

V. Sai Deepak ◽

R. Murugan

Keyword(s):

Authentication Scheme ◽

Biometric Authentication ◽

Brute Force ◽

Graphical Password ◽

The People ◽

Shoulder Surfing ◽

Common Technique ◽

Authentication Schemes ◽

Dictionary Attacks

Many authentication schemes are known to us but none of them are completely secure. Textual password is the most common technique used by majority of the people in the industry. But Textual passwords are vulnerable to dictionary attacks, keyloggers, brute-force attacks, even guessing may work out sometimes. Alternative authentication schemes have been proposed to overcome this problem, some of them are Biometric authentication, retina based authentication, graphical password scheme ETC., Authentication Schemes such as biometric and retina scans are too costly, so they are not always preferred. Not every graphical authentication is secure and efficient. In this paper, an authentication scheme with a combination of text and colour is proposed. This allows the user to log-in to the framework a little more secure.

Download Full-text

Study and Development of Graphical Authentication System for Secure File Transmission

International Journal of Engineering & Technology ◽

10.14419/ijet.v7i4.10.21042 ◽

2018 ◽

Vol 7 (4.10) ◽

pp. 470

Author(s):

P. L.P.Ramyasri ◽

D. Malathi ◽

J. D. Dorathi Jayaseeli ◽

K. Senthilkumar

Keyword(s):

Social Engineering ◽

Survey Study ◽

Future Research ◽

Brute Force ◽

Graphical Password ◽

Graphical Passwords ◽

Password Security ◽

Authentication System ◽

Present Text ◽

Dictionary Attacks

The text-based password has been the most common practice from ancient days till present. Text based pass-words are also known for various threats, and it is prone to attacks like guessing attacks, dictionary attacks, social engineering attacks, brute force attacks, etc. The next immediate concept following the text based password is the graphical password schemes to improve password security and usability. In present days graphical passwords are being implemented more commonly. This approach is different from the traditional alpha numeric as it deals with images. In this paper a survey study is done to analyse various techniques used for authentication and also some of the methods for graphical authentication techniques like Pass Matrix, Cued Clicked points(CPP), CAPTCHA, Image distortion with text association, Doodle scheme, Standard recognition-based scheme, Stegno pin authentication method. Based on the existing methods, the future research can be done in order to improve security for graphical authentication.

Download Full-text

Implementasi Algoritma Hamming Distance dan Brute Force dalam Mendeteksi Kemiripan Source Code Bahasa Pemrograman C

Jurnal ULTIMATICS ◽

10.31937/ti.v8i2.514 ◽

2017 ◽

Vol 8 (2) ◽

Author(s):

Andreas Budiman ◽

Dennis Gunawan ◽

Seng Hansun

Keyword(s):

College Presidents ◽

Hamming Distance ◽

Source Code ◽

Structural Type ◽

Brute Force ◽

Important Thing ◽

The Past ◽

Index Terms ◽

Better Than

Plagiarism is a behavior that causes violence of copyrights. Survey shows 55% of college presidents say that plagiarism in students’ papers has increased over the past 10 years. Therefore, an application for detecting plagiarism is needed, especially for teachers. This plagiarism checker application is made by using Visual C# 2010. The plagiarism checker uses hamming distance algorithm for matching line code of the source code. This algorithm works by matching the same length string of the code programs. Thus, it needs brute will be matched with hamming distance. Another important thing for detecting plagiarism is the preprocessing, which is used to help the algorithm for detecting plagiarized source code. This paper shows that the application works good in detecting plagiarism, the hamming distance algorithm and brute force algorithm works better than levenstein distance algorithm for detecting structural type of plagiarism and this thesis also shows that the preprocessing could help the application to increase its percentage and its accuracy. Index Terms—Brute Force, Hamming Distance, Plagiarisme, Preprocessing.

Download Full-text