基于口令因子的web口令安全性评估方法研究

Password Security Evaluation Method Based on Password Factor for Web

口令是应用最为广泛的身份认证方法,web口令的安全性是影响网络环境安全的一个重要因素。本文通过对大规模的真实Web明文口令进行分析和挖掘,将口令拆分成口令因子的方式,总结出用户设置Web口令的特征和真实性规则。并将这些特征和设置规则作为评估参数,运用模糊综合评价法和层次分析法对web口令安全性进行评估。

Password is the most widely used authentication method, and the security of Web password is an important factor affecting the security of network environment. Through analyzing and mining large-scale real Web plaintext passwords, this paper summarizes the characteristics and authenticity rules of setting Web passwords by splitting passwords into password factors. Taking these features and setting rules as evaluation parameters, the security of Web password is evaluated by fuzzy comprehensive evaluation method and analytic hierarchy process.