Repository logo

Infoscience

  • English
  • French
Log In
Logo EPFL, École polytechnique fédérale de Lausanne

Infoscience

  • English
  • French
Log In
  1. Home
  2. Academic and Research Output
  3. Conferences, Workshops, Symposiums, and Seminars
  4. Your Email Address Holds the Key: Understanding the Connection Between Email and Password Security with Deep Learning
 
conference paper

Your Email Address Holds the Key: Understanding the Connection Between Email and Password Security with Deep Learning

Salimbeni, Etienne
•
Mainusch, Nina
•
Pasquini, Dario  
January 1, 2023
2023 Ieee Security And Privacy Workshops, Spw
44th IEEE Security and Privacy Workshops (SPW)

In this work, we investigate the effectiveness of deep-learning-based password guessing models for targeted attacks on human-chosen passwords. In recent years, service providers have increased the level of security of users' passwords. This is done by requiring more complex password generation patterns and by using computationally expensive hash functions. For the attackers this means a reduced number of available guessing attempts, which introduces the necessity to target their guess by exploiting a victim's publicly available information. In this work, we introduce a contextaware password guessing model that better capture attackers' behavior. We demonstrate that knowing a victim's email address is already critical in compromising the associated password and provide an in-depth analysis of the relationship between them. We also show the potential of such models to identify clusters of users based on their password generation behaviour, which can spot fake profiles and populations more vulnerable to context-aware guesses. The code is publicly available at https://github.com/spring-epfl/DCM_sp.

  • Details
  • Metrics
Type
conference paper
DOI
10.1109/SPW59333.2023.00015
Web of Science ID

WOS:001039152300011

Author(s)
Salimbeni, Etienne
Mainusch, Nina
Pasquini, Dario  
Date Issued

2023-01-01

Publisher

IEEE COMPUTER SOC

Publisher place

Los Alamitos

Published in
2023 Ieee Security And Privacy Workshops, Spw
ISBN of the book

979-8-3503-1236-2

Series title/Series vol.

IEEE Security and Privacy Workshops

Start page

94

End page

104

Subjects

Computer Science, Information Systems

•

Computer Science, Interdisciplinary Applications

•

Computer Science

Editorial or Peer reviewed

REVIEWED

Written at

EPFL

EPFL units
SPRING  
Event nameEvent placeEvent date
44th IEEE Security and Privacy Workshops (SPW)

San Francisco, CA

May 22-25, 2023

Available on Infoscience
August 28, 2023
Use this identifier to reference this record
https://infoscience.epfl.ch/handle/20.500.14299/200079
Logo EPFL, École polytechnique fédérale de Lausanne
  • Contact
  • infoscience@epfl.ch

  • Follow us on Facebook
  • Follow us on Instagram
  • Follow us on LinkedIn
  • Follow us on X
  • Follow us on Youtube
AccessibilityLegal noticePrivacy policyCookie settingsEnd User AgreementGet helpFeedback

Infoscience is a service managed and provided by the Library and IT Services of EPFL. © EPFL, tous droits réservés