cued mnemonics for better security and memorability · 2014. 7. 21. · cued mnemonics for better...
TRANSCRIPT
![Page 1: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/1.jpg)
Cued Mnemonics for Better Security and Memorability
Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin Beznosov
Laboratory for Education and Research in Secure Systems Engineering ( LERSSE)University of British Columbia
![Page 2: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/2.jpg)
Passwords … things we all know
![Page 3: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/3.jpg)
Mnemonics
Chosen Phrase Password
● Generation Effect● Memorability● Security● Future Vulnerability
![Page 4: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/4.jpg)
Question time
hhelibebocnofnenamgalsipsclarkca
![Page 5: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/5.jpg)
Question time
hhelibebocnofnenamgalsipsclarkca
H He Li Be Bo C N O F Ne Na Mg Al Si P S Cl Ar K Ca
![Page 6: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/6.jpg)
Question time
hhelibebocnofnenamgalsipsclarkca
H He Li Be Bo C N O F Ne Na Mg Al Si P S Cl Ar K Ca
![Page 7: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/7.jpg)
Mnemonics in Chemistry
● Tens of Mnemonics are used in memorizing different aspects, rules, components in Chemistry.
● From RANDOM set of characters to a cued phrase.
Something to learn from Chemists ...
![Page 8: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/8.jpg)
We propose ...
● Reversing the Mnemonic process.
● Generate a random password.○ System generated complying to the policies.
● Generate a “Cued” phrase○ Self Reference effect○ Episodic Memory
![Page 9: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/9.jpg)
Example
Password: pa-3mp1y(TNB)
![Page 10: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/10.jpg)
Example
Password: pa-3mp1y(TNB)
User’s interest: Running
![Page 11: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/11.jpg)
Example
Password: pa-3mp1y(TNB)
User’s interest: Running
Phrase: personal achievement - 3 marathons per 1 year (Tokyo, New York, Boston)
![Page 12: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/12.jpg)
The Reverse Process
● Phrase is more personally related …○ Self reference effect
○ Trigger for autobiographical episodes■ Episodic memory
● Can accommodate generation effect ...
![Page 13: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/13.jpg)
Phrase Generation
● Information Gathering○ Questionnaire before password creation.○ Traverse public information - Social Networks, Blogs○ Eventual knowledge base
● Generation○ Semantics - to find words.○ NLP - to generate a meaningful sentence.
![Page 14: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/14.jpg)
Questions
![Page 15: Cued Mnemonics for Better Security and Memorability · 2014. 7. 21. · Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin](https://reader035.vdocuments.mx/reader035/viewer/2022062605/5fd96b9a97be1102e15b31bd/html5/thumbnails/15.jpg)
Fantastic Four
Primal Ivan Ayumi Kosta
http://lersse.ece.ubc.ca/
Laboratory for Education and Research in Secure Systems Engineering ( LERSSE)University of British Columbia