摘要
口令是应用最为广泛的身份认证方法,web口令的安全性是影响网络环境安全的一个重要因素。本文通过对大规模的真实Web明文口令进行分析和挖掘,将口令拆分成口令因子的方式,总结出用户设置Web口令的特征和真实性规则。并将这些特征和设置规则作为评估参数,运用模糊综合评价法和层次分析法对web口令安全性进行评估。
Password is the most widely used authentication method, and the security of Web password is an important factor affecting the security of network environment. Through analyzing and mining large-scale real Web plaintext passwords, this paper summarizes the characteristics and authenticity rules of setting Web passwords by splitting passwords into password factors. Taking these features and setting rules as evaluation parameters, the security of Web password is evaluated by fuzzy comprehensive evaluation method and analytic hierarchy process.
作者
李蓓蕾
唐祖锴
陈燕
LI Bei-lei;TANG Zu-kai;CHEN Yan(School of Computer Science and Technology,Wuhan University of Technology,Wuhan 430070,China)
出处
《湖北第二师范学院学报》
2018年第8期35-39,共5页
Journal of Hubei University of Education
关键词
口令因子
明文口令
口令安全性
口令组成规则
password factor
plaintext password
password security
password composition rule