Abstract:Password-based authentication has been widely used as the primary authentication mechanism.However,occasional large-scale password leaks have highlighted the vulnerability of passwords to risks such as guessing or theft.In recent years,research on password analysis using natural language processing techniques has progressed,treating passwords as a special form of natural language.Nevertheless,limited studies have investigated the impact of password text segmentation granularity on the effectiveness of password analysis with large language models.A multi-granularity password-analyzing framework was proposed based on a large language model,which follows the pre-training paradigm and autonomously learns prior knowledge of password distribution from large unlabelled da-tasets.The framework comprised three modules:the synchronization network,backbone network,and tail network.The synchronization network module implemented char-level,template-level,and chunk-level password segmenta-tion,extracting knowledge on character distribution,structure,word chunk composition,and other password features.The backbone network module constructed a generic password model to learn the rules governing password compo-sition.The tail network module generated candidate passwords for guessing and analyzing target databases.Experi-mental evaluations were conducted on eight password databases including Tianya and Twitter,analyzing and sum-marizing the effectiveness of the proposed framework under different language environments and word segmenta-tion granularities.The results indicate that in Chinese user scenarios,the performance of the password-analyzing framework based on char-level and chunk-level segmentation is comparable,and significantly superior to the framework based on template-level segmentation.In English user scenarios,the framework based on chunk-level segmentation demonstrates the best password-analyzing performance.

Generation of Password Dictionary based on Data Mining Technology

Mangling Rules Generation with Density-Based Clustering for Password Guessing

An Algorithm to Generate Password Structure Dictionary Based on Gene Bank

Analysis of Real Password Based on Attributes Resolution and Data Mining

Analysis Method of Password Attributes Based on Neural Network

WebCrack: Dynamic Dictionary Adjustment for Web Weak Password Detection based on Blasting Response Event Discrimination

Advances in Password Security

GENPass: A Multi-Source Deep Learning Model for Password Guessing.

Dynamically Generate Password Policy Via Zipf Distribution

1 Zipf ’ s Law in Passwords

An Alternative Method for Understanding User-Chosen Passwords.

Zipf's Law in Passwords.

Genpass: A General Deep Learning Model For Password Guessing With Pcfg Rules And Adversarial Generation

Improving Users' Passwords with DPAR: a Data-driven Password Recommendation System

Password Guessing Time Based on Guessing Entropy and Long-Tailed Password Distribution in the Large-Scale Password Dataset

Using personal information to aid in guessing passwords of Chinese webs

The Effect of Domain Terms on Password Security

A Universal Distributed Model for Password Cracking.

Research on Multi-Granularity Password Analysis Based on LLM

Making A Higher Hit Ratio Cryptanalytic Time-Memory Trade-Off Attack on Passwords

Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries