Passlab：蓝队的密码安全工具
Passlab: A Password Security Tool for the Blue Team
摘要：
如果我们希望作为攻击者（即红队的一员）破坏一些受密码保护的系统，我们有大量流行的和积极维护的工具可供选择，以帮助我们实现我们的目标。密码哈希破解硬件和软件、在线猜测工具、漏洞利用框架以及大量帮助我们在目标系统上执行侦察的工具都是广泛可用的。相比之下，如果我们希望保护一个受密码保护的系统免受这种攻击（即作为蓝队的一员），我们可以选择的工具相对较少。在本研究摘要中，我们介绍了我们迄今为止在Passlab上的工作，Passlab是一种密码安全工具，旨在帮助系统管理员利用正式的方法，使用干净直观的用户界面做出明智和基于证据的安全决策。
英文摘要：
If we wish to compromise some password-protected system as an attacker (i.e. a member of the red team), we have a large number of popular and actively-maintained tools to choose from in helping us to realise our goal. Password hash cracking hardware and software, online guessing tools, exploit frameworks, and a wealth of tools for helping us to perform reconnaissance on the target system are widely available. By comparison, if we wish to defend a password-protected system against such an attack (i.e. as a member of the blue team), we have comparatively few tools to choose from. In this research abstract, we present our work to date on Passlab, a password security tool designed to help system administrators take advantage of formal methods in order to make sensible and evidence-based security decisions using a clean and intuitive user interface.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
