Abstract:Users speaking different languages may prefer different patterns in creating their passwords, and thus knowledge on English passwords cannot help to guess passwords from other languages well. Research has already shown Chinese passwords are one of the most difficult ones to guess. We believe that the conclusion is biased because, to the best of our knowledge, little empirical study has examined regional differences of passwords on a large scale, especially on Chinese passwords. In this paper, we study the differences between passwords from Chinese and English speaking users, leveraging over 100 million leaked and publicly available passwords from Chinese and international websites in recent years. We found that Chinese prefer digits when composing their passwords while English users prefer letters, especially lowercase letters. However, their strength against password guessing is similar. Second, we observe that both users prefer to use the patterns that they are familiar with, e.g., Chinese Pinyins for Chinese and English words for English users. Third, we observe that both Chinese and English users prefer their conventional format when they use dates to construct passwords. Based on these observations, we improve a PCFG (Probabilistic Context-Free Grammar) based password guessing method by inserting Pinyins (about 2.3% more entries) into the attack dictionary and insert our observed composition rules into the guessing rule set. As a result, our experiments show that the efficiency of password guessing increases by 34%.

Input Chinese Sentences Using Digits

A large-scale empirical analysis of chinese web passwords

CHIME: an efficient error-tolerant Cinese pinyin input method

A Chinese Text Input Brain–Computer Interface Based on the P300 Speller

IMPROVED STRATEGIES FOR INTELLIGENT SENTENCE INPUT METHOD ENGINE SYSTEM

Keyboard for inputting Chinese language

A Chinese fuzzy autocompletion approach.

DURATION MODELING IN MANDARIN CONNECTED DIGIT RECOGNITION

A Virtual Chinese Keyboard BCI System Based on P300 Potentials

Research on User Input Behavior Based on Log Analysis of a Chinese Input Method Editor

Accurate Braille-Chinese Translation Towards Efficient Chinese Input Method for Blind People

PERT: A New Solution to Pinyin to Character Conversion Task

Application of Grammatical Parsing Technique in Chinese Input

Chinese Pinyin Aided IME, Input What You Have Not Keystroked Yet

Integrating Pinyin to Improve Spelling Errors Detection for Chinese Language

Character Usage in Chinese Short Message Service (SMS): a Real-World Study in Mainland China

A Computer System for Chinese Character Speech Input

C-SAK: Chinese Scanning Ambiguous Keyboard for Parkinson's Disease Patients

Jurilinguistic engineering in Cantonese Chinese: an N-gram-based speech to text transcription system

Count, Decode and Fetch: A New Approach to Handwritten Chinese Character Error Correction

Automatic Identification of Chinese Dialect Based on the Data from Chinese Pinyin Input Method