调查密码选择的分布
Investigating the Distribution of Password Choices
摘要：
在本文中，我们将研究选择密码的分布。齐普夫定律通常在选择的单词列表中得到遵守。使用密码列表从四个不同的在线来源，我们将调查如果齐普夫定律是一个很好的候选人描述的频率与密码的选择。我们研究了一些标准统计数据，用于衡量密码分发的安全性，并查看使用Zipf定律对数据进行建模是否会产生对这些统计数据的良好估计。然后，我们使用猜测作为度量标准，查看每个来源的密码分布的相似性。这表明这些发行版提供了有效的破解密码的工具。最后，我们将展示如何通过偶尔要求用户选择不同的密码来塑造使用中密码的分布。
英文摘要：
In this paper we will look at the distribution with which passwords are chosen. Zipf's Law is commonly observed in lists of chosen words. Using password lists from four different on-line sources, we will investigate if Zipf's law is a good candidate for describing the frequency with which passwords are chosen. We look at a number of standard statistics, used to measure the security of password distributions, and see if modelling the data using Zipf's Law produces good estimates of these statistics. We then look at the the similarity of the password distributions from each of our sources, using guessing as a metric. This shows that these distributions provide effective tools for cracking passwords. Finally, we will show how to shape the distribution of passwords in use, by occasionally asking users to choose a different password.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
