Research Article
PCWQ: A Framework for Evaluating Password Cracking Wordlist Quality
3 downloads
@INPROCEEDINGS{10.1007/978-3-031-06365-7_10, author={Aikaterini Kanta and Iwen Coisel and Mark Scanlon}, title={PCWQ: A Framework for Evaluating Password Cracking Wordlist Quality}, proceedings={Digital Forensics and Cyber Crime. 12th EAI International Conference, ICDF2C 2021, Virtual Event, Singapore, December 6-9, 2021, Proceedings}, proceedings_a={ICDF2C}, year={2022}, month={6}, keywords={Password cracking Wordlist Dictionary Contextual information}, doi={10.1007/978-3-031-06365-7_10} }- Aikaterini Kanta
Iwen Coisel
Mark Scanlon
Year: 2022
PCWQ: A Framework for Evaluating Password Cracking Wordlist Quality
ICDF2C
Springer
DOI: 10.1007/978-3-031-06365-7_10
Abstract
The persistence of the single password as a method of authentication has driven both the efforts of system administrators to nudge users to choose stronger, safer passwords and elevated the sophistication of the password cracking methods chosen by their adversaries. In this constantly moving landscape, the use of wordlists to create smarter password cracking candidates begs the question of whether there is a way to assess which is better. In this paper, we present a novel modular framework to measure the quality of input wordlists according to several interconnecting metrics. Furthermore, we have conducted a preliminary analysis where we assess different input wordlists to showcase the framework’s evaluation process.
Copyright © 2021–2025 ICST
