Performance Evaluating of Honeyword Generation Methods: Traditional versus AI

Objectives: Security of textual passwords is increased against offline guessability attacks by using different encryption methods. However, even after encryption textual passwords may be guessed through brute-force or dictionary attacks. Method: In this paper, a theoretical framework is developed which provides guidelines for improving password security against offline guessability attacks such as brute force and dictionary attacks. In the proposed framework different password security layers are defined which convert a password into a form which is very difficult to crack through offline guessability attacks. The framework layers are implemented at application and database level. Findings: In the proposed framework a short and easy to remember password string is converted into a long and random string which does not provide any hint of original password. However, it is important that the methodology or logic used for implementing the framework layers should be hidden from the attackers because the layers’ methodology may provide a clue for password cracking. Layers of the proposed framework can be implemented with different logics, which are helpful in hiding the implementation details of the layers. Application/Improvements: Proposed framework is not only helpful for improving security of traditional textual password scheme but it can also improve the security for graphical password schemes against offline guessability attacks. Keywords: Authentication, Guessability Attacks, Privacy, Password Security, Textual Passwords

In this paper Image Based Authentication application is applied on folder's (folders that are confidential to user) ,since the studies till date have shown that textual passwords are more prone that they are well hacked by hackers through easily available software's or programming different code to hack the password. The textual passwords use languages that can be identified using the grammar that they use, therefore our project focuses on Graphical passwords , because as such it has been observed that human brains is better at re-collecting and recognizing images than text, the images are well captured and stored rather than text. There have been phases in creating a strong graphical password scheme from 1999, with the promise that the graphical passwords would provide improved password memorability and usability. The technique that we use here is PCCP (PERSUASIVE CUED CLICK POINTS), this is a combination of recall and recognition based techniques with the implementation of SHA1 (Secure Hash Algorithm). Here PCCP is used for user to have better strong passwords by expanding password space and SHA1 is used to ensure security to folder. Keyword: Authentication, Graphical Password, Hotspot, Passpoints, Secure Hash Algorithm,

Authentication is a ubiquitous task in users' daily lives. The dominant form of user authentication are text passwords. They protect private accounts like online banking, gaming, and email, but also assets in organisations. Yet, many issues are associated with text passwords, leading to challenges faced by both, users and organisations. This thesis contributes to the body of research enabling secure and usable user authentication, benefiting both, users and organisations. To that end, it addresses three distinct challenges. The first challenge addressed in this thesis is the creation of correct, complete, understandable, and effective password security awareness materials. To this end, a systematic process for the creation of awareness materials was developed and applied to create a password security awareness material. This process comprises four steps. First, relevant content for an initial version is aggregated (i.e. descriptions of attacks on passwords and user accounts, descriptions of defences to these attacks, and common misconceptions about password and user account security). Then, feedback from information security experts is gathered to ensure the correctness and completeness of the awareness material. Thereafter, feedback from lay-users is gathered to ensure the understandability of the awareness material. Finally, a formal evaluation of the awareness material is conducted to ensure its effectiveness (i.e. whether the material improves participant's ability to assess the security of passwords as well as password-related behaviour and decreases the prevalence of common misconceptions about password and user account security). The results of the evaluation show the effectiveness of the awareness material: it significantly improved the participants' ability to assess the security of password-related behaviour as well as passwords and significantly decreased the prevalence of misconceptions about password and user account security. The second challenge addressed in this thesis is shoulder-surfing resistant text password entry with gamepads (as an example of very constrained input devices) in shared spaces. To this end, the very first investigation of text password entry with gamepads is conducted. First, the requirements of authentication in the gamepad context are described. Then, these requirements are applied to assess schemes already deployed in the gamepad context and shoulder-surfing resistant authentication schemes from the literature proposed for non-gamepad contexts. The results of this assessment show that none of the currently deployed and only four of the proposals in the literature fulfil all requirements. Furthermore, the results of the assessment also indicate a need for an empirical evaluation in order to exactly gauge the shoulder-surfing threat in the gamepad context and compare alternatives to the incumbent on-screen keyboard. Based on these results, two user studies (one online study and one lab study) are conducted to investigate the shoulder-surfing resistance and usability of three authentication schemes in the gamepad context: the on-screen keyboard (as de-facto standard in this context), the grid-based scheme (an existing proposal from the literature identified as the most viable candidate adaptable to the gamepad context during the assessment), and Colorwheels (a novel shoulder-surfing resistant authentication scheme specifically designed for the gamepad context). The results of these two user studies show that on-screen keyboards are highly susceptible to opportunistic shoulder-surfing, but also show the most favourable usability properties among the three schemes. Colorwheels offers the most robust shoulder-surfing resistance and scores highest with respect to participants' intention to use it in the future, while showing more favourable usability results than the grid-based scheme. The third challenge addressed in this thesis is secure and efficient storage of passwords in portfolio authentication schemes. Portfolio authentication is used to counter capture attacks such as shoulder-surfing or eavesdropping on network traffic. While usability studies of portfolio authentication schemes showed promising results, a verification scheme which allows secure and efficient storage of the portfolio authentication secret had been missing until now. To remedy this problem, the (t,n)-threshold verification scheme is proposed. It is based on secret sharing and key derivation functions. The security as well as the efficiency properties of two variants of the scheme (one based on Blakley secret sharing and one based on Shamir secret sharing) are evaluated against each other and against a naive approach. These evaluations show that the two (t,n)-threshold verification scheme variants always exhibit more favourable properties than the naive approach and that when deciding between the two variants, the exact application scenario must be considered. Three use cases illustrate as exemplary application scenarios the versatility of the proposed (t,n)-threshold verification scheme. By addressing the aforementioned three distinct challenges, this thesis demonstrates the breadth of the field of usable and secure user authentication ranging from awareness materials, to the assessment and evaluation of authentication schemes, to applying cryptography to craft secure password storage solutions. The research processes, results, and insights described in this thesis represent important and meaningful contributions to the state of the art in the research on usable and secure user authentication, offering benefits for users, organisations, and researchers alike.

Cloud computing is drastically growing technology which provides an on-demand software, hardware, infrastructure and data storage as services. This technology is used worldwide to improve the business infrastructure and performance. However, to utilize these services by intended customer, it is necessary to have strong password authentication. At present, cloud password authentication can be done in several ways, such as, textual password, graphical and 3D password. In this paper, we are proposing the strong password generation technique by considering multiple input parameters of cloud paradigm referred as a multidimensional password. This paper presents the multidimensional password generation technique along with architecture, sequence diagrams, algorithms and typical user interfaces. At the end, we derive the probability of breaking our authentication system.

Aims: Internet usage has become popular among children in the last decade. Little is known about how children should use the digital world. The present study aimed to investigate the relationship between Internet use, frequency of Internet use under parental supervision, and depressive symptoms in children. Material and Methods: The prospective cross-sectional study was conducted on 79 children aged 7-18 years old and their families who applied to the pediatric clinics between March 2021 and June 2021. The participants completed an online questionnaire, including sociodemographic data, children’s Internet use, and the Children’s Depression Inventory (CDI). Children’s Internet use was asked with a questionnaire created by ourselves for this study. Results: The present study found no significant relationship between Internet usage time and depressive symptoms in children. Nevertheless, we showed that children who used the Internet more frequently under parental supervision and used the Internet for study purposes had lower depressive symptoms (p=0.026, p<0.001). Conclusion: Internet use under parental supervision might protect children against the harmful effects of the digital world.

Intelligent approaches for security technologies

Text passwords are one of the most widely used authentication mechanisms on the internet. While users are responsible for creating secure passwords, application developers are responsible for writing code to store passwords securely. Despite continued reports of password database breaches, recent research studies reveal that developers continue to employ insecure password storage practices and have several misconceptions regarding secure password storage. Therefore, it is important to detect security issues relating to password storage and fix them in a timely manner before the application is deployed.

L’imagerie cerebrale a permis des progres considerables dans le domaine de la maladie d’Alzheimer (MA). Des criteres ont recemment ete proposes pour diagnostiquer la maladie a un stade plus precoce en s’appuyant sur des biomarqueurs d’imagerie. D’autre part la confrontation de multiples methodes d’imagerie permet d’evaluer les liens entre les differentes alterations qu’elles revelent afin de mieux comprendre les mecanismes de la maladie. Les objectifs principaux de cette these etaient d’une part de contribuer au developpement de biomarqueurs plus sensibles aux stades precoces de la MA, et d’autre part d’evaluer les liens entre depots amyloides, deficits metaboliques et atrophie cerebrale, en s’appuyant sur des techniques innovantes. Dans un premier temps, nous avons developpe une sequence IRM de haute resolution ciblee sur l’hippocampe ainsi qu’un protocole de delimitation des sous-champs hippocampiques que nous avons valides. Nous avons ainsi pu montrer que l’atrophie du sous-champ CA1 predominait et etait plus sensible que la mesure du volume de l’hippocampe entier pour distinguer des patients a un stade pre-dementiel de la MA. Au contraire, le vieillissement normal affectait preferentiellement un autre sous-champ : le subiculum. Dans un second temps, grâce a une approche multimodale, nous avons souligne les discordances dans la topographie des lesions caracteristiques de la MA, suggerant l’implication de differents mecanismes sous-jacents. De plus, les resultats indiquaient qu’atrophie et hypometabolisme ne sont pas correles aux depots amyloides chez les patients MA, indiquant l’absence de lien direct entre ces processus a ce stade avance de la maladie

A new grey intelligent prediction algorithm with multiobjective correction strategy

This chapter aims to enhance the security of textual passwords by adding a new layer that involves an individual's typing rhythm without requiring additional devices. It discusses authentication methods and develops a textual password authentication system, which takes advantage of the fact that every user has a distinct way of typing. Twenty participants, including novice and expert users, assessed the proposed system. The measuring metrics used were the False Acceptance Rate (FAR) and False Rejection Rate (FRR). The flight time and typing rhythm were the biometric identification template. The results indicated low false rejection and acceptance rates, with the initial session registering 0.0 FRR and 0.1 FAR. Two weeks later, the second session recorded 0.25 FRR and 0.0 FAR. Using this model, users do not need to select a complex password they might forget. Instead, they can utilize a good rhythm different from their natural typing rhythm, making it challenging to guess.

Authentication is one of the most important mechanisms to ensure system accessibility by legitimate users. Various authentication tools exist based on numerous techniques. Distinguishing factors of such authentication tools are the underlying passwords that they imply. These passwords can be textual based, graphical based, hardware based or biometric based. All such password types have their pros and cons. The principle focus of this research is picture-based graphical passwords, since they are easy to remember and can overcome the limitations of using long textual passwords for stronger security. However, mostly the picture-based passwords suffer from shoulder surfing attacks and are therefore vulnerable. If this vulnerability is overcome then such graphical passwords are highly useful because of their strength and ease of use as compared to long textual passwords. The main objective of this research is to propose and develop a picture-based authentication scheme with anti shoulder surfing capability. The proposed authentication scheme consists of both password creation and usage. Both these stages are supported by specialized technical constructs that overcome the anti shoulder surfing attack even if the attacker is standing next to the legitimate user.

In order to solve the problem that the dynamic programming of traditional intelligent scheduling algorithm is not perfect, which leads to the operation result taking too long, the author proposes an intelligent scheduling algorithm for enterprise human resources based on big data. This research creates an effective planning model based on big data, realizes the effective business plan of human resources, develops the advanced instruction of the intelligent scheduling algorithm, and proposed intelligent scheduling algorithm based on table precedence. The results showed that the average time of the experimental group was 7.261s shorter than the control group in the 20 stages of the data fusion test. The results show that, compared with the traditional intelligent scheduling algorithm, the intelligent scheduling algorithm proposed by the author can reduce the time required for data fusion and calculation in the stage, and the performance of the intelligent scheduling algorithm based on the previous table is better than those. Practice has proven that the intelligent scheduling algorithm based on the table can help reduce the work of intelligent scheduling of business human resources based on big data.

Strong passwords are fundamental to the security of password-based user authentication systems. In recent years, much effort has been made to evaluate password strength or to generate strong passwords. Unfortunately, the usability or memorability of the strong passwords has been largely neglected. In this paper, we aim to bridge the gap between strong password generation and the usability of strong passwords. We propose to automatically generate textual password mnemonics, i.e., natural language sentences, which are intended to help users better memorize passwords. We introduce \textit{DeepMnemonic}, a deep attentive encoder-decoder framework which takes a password as input and then automatically generates a mnemonic sentence for the password. We conduct extensive experiments to evaluate DeepMnemonic on the real-world data sets. The experimental results demonstrate that DeepMnemonic outperforms a well-known baseline for generating semantically meaningful mnemonic sentences. Moreover, the user study further validates that the generated mnemonic sentences by DeepMnemonic are useful in helping users memorize strong passwords.

Digital finance is a type of financial service that employs digital products like personal computers, the internet, mobile phones, cards linked to a digital payment system. Innovations in the digital world cannot be divorced from Nigerian financial services most notably the banking sector. Therefore, it means that banking industry cannot but embrace digital innovations in their services delivery. Hence, there is a need to review the impact of digital finance in the Nigerian banking sector. Desk research method was used to examine how innovations in the digital world could impact the future financial service delivery in the Nigerian banking sector. From the review, it was that the digital world is quickly changing and this impacts banking in all ramification. It is recommended that the banking industry should try to keep pace with the digital innovations, for them to be able to meet up the demands of their digitally-savvy customers.

The internet is the most popular information source in our digital world. Studies confirm that numerous people are using the internet to look up health-related information. There is no information about this trend among the Transylvanian Hungarian population. Our purpose was to assess the role of the internet in answering health-related problems for young Hungarian Transylvanian people, and its impact. The participants (N=351) completed an online questionnaire with 28 items, which was available on Facebook, on the first page indicating their consent to a voluntary and anonymous survey. Our target was the generation below the age of 45. Descriptive, then comparative analysis was performed, based on gender and region of origin. 95.3% of the participants used the internet for finding health-related information, diagnosis, treatment or diet, without significant difference between subgroups, 70% at least once a month. Only 3.3% were instructed by their physician about the websites that provide health information, while 90% would require it. At least 64% of the respondents makes self-diagnosis at least sometimes, women more often, and nearly 25% frequently or always check the doctor’s opinion and/or the recommended treatment online. 40% of cases consider that their self-diagnosis was often the same as the physician’s final diagnosis, but only 33,2% agreed totally with their doctor. 47,4% of them were scared and/or became worried because of the information from the internet, especially women. Based on the above, it is clear that online health information overtakes the traditional doctor-centered health information and makes it necessary for us to change our perspective of digital healthcare.