Evaluating the effect of guidance and feedback upon password compliance

详细信息    查看全文

• 作者：Steven FurnellAuthor Vitae ; Rawan EsmaelAuthor Vitae
• 刊名：Computer Fraud & Security
• 出版年：2017
• 出版时间：January 2017
• 年：2017
• 卷：2017
• 期：1
• 页码：5-10
• 全文大小：2320 K
• 卷排序：2017

文摘

Despite frequent assertions that passwords are dead – and a web search for this phrase will throw up many such assertions – as well as increasing evidence of service providers moving away from them, they are currently very much with us in many contexts. Indeed, the fact that one of the first publications from the UK's newly-formed National Cyber Security Centre was a password infographic is a telling sign of where we currently are with password use and misuse.Passwords remain the most common form of authentication but continue to face various practical challenges, not least of which is getting users to make appropriate choices in the first place.Steven Furnell and Rawan Esmael of the University of Plymouth conducted a series of experiments to assess users' password creation behaviour with varying levels of support, ranging from unguided to feedback approaches using emoji-based indicators. The results reveal dramatic differences, but suggest there is still much work to be done to make passwords safe.