论文标题
感知的阴影 - 识别密码强度的用户因素
Shades of Perception- User Factors in Identifying Password Strength
论文作者
论文摘要
这项研究的目的是衡量参与者的教育,职业和技术技能水平是否与密码强度的识别表现出关系。参与者审查了50个密码,并将每个密码标记为弱或强。相对于弱密码识别频率,使用卡方检验的独立性测试用于衡量教育,职业,技术技能水平之间的关系。结果表明,除技术技能和强大密码外,所有可变组合的关系都有显着的关系。这项研究有三个局限性。数据收集取决于参与者的自我报告,并且外部化功率有限。此外,根据所有参与者都可以阅读英语并理解密码强度的概念的假设,该仪器的构建。最后,我们没有控制外部工具使用(即密码强度计)。结果基于现有文献的基础,因为结果将对用户对密码的集体理解总体而言,总体而言。尽管先前的研究已经探索了类似的领域,但通过让参与者创建密码来做到这一点。这项工作衡量了对预生成密码的感知。结果表明,需要进一步调查用户为什么继续依靠弱密码。这项工作的独创性在于招募广泛的参与者并衡量参与者教育,职业和技术技能水平之间的潜在相关性。
The purpose of this study was to measure whether participant education, profession, and technical skill level exhibited a relationship with identification of password strength. Participants reviewed 50 passwords and labeled each as weak or strong. A Chi-square test of independence was used to measure relationships between education, profession, technical skill level relative to the frequency of weak and strong password identification. The results demonstrate significant relationships across all variable combinations except for technical skill and strong passwords which demonstrated no relationship. This research has three limitations. Data collection was dependent upon participant self-reporting and has limited externalized power. Further, the instrument was constructed under the assumption that all participants could read English and understood the concept of password strength. Finally, we did not control for external tool use (i.e., password strength meter). The results build upon existing literature insofar as the outcomes add to the collective understanding of user perception of passwords in specific and authentication in general. Whereas prior research has explored similar areas, such work has done so by having participants create passwords. This work measures perception of pre-generated passwords. The results demonstrate a need for further investigation into why users continue to rely on weak passwords. The originality of this work rests in soliciting a broad spectrum of participants and measuring potential correlations between participant education, profession, and technical skill level.