显微镜下的密码猜测者：深入分析以告知部署人员
Password Guessers Under a Microscope: An In-Depth Analysis to Inform Deployments
摘要：
密码猜测器有助于评估密码的强度。尽管他们的多样性和丰富性，很少有人知道如何不同的猜测相互比较。我们对密码猜测者的猜测能力和行为进行了深入的分析和比较。为了将分析扩展到破解的密码数量之外，我们设计了一个分析框架来比较猜测者在各种条件下生成的密码类型（例如，有限的训练数据、有限数量的猜测以及不同的训练和目标数据）。我们的研究结果表明，猜测者经常产生不同的猜测，即使在相同的数据训练。我们利用这一结果表明，计算成本低的猜测者的组合与计算密集型猜测者一样有效，但效率更高。我们的见解使我们能够在执行密码检查时为系统管理员提供一套具体的建议。
英文摘要：
Password guessers are instrumental for assessing the strength of passwords. Despite their diversity and abundance, little is known about how different guessers compare to each other. We perform in-depth analyses and comparisons of the guessing abilities and behavior of password guessers. To extend analyses beyond number of passwords cracked, we devise an analytical framework to compare the types of passwords that guessers generate under various conditions (e.g., limited training data, limited number of guesses, and dissimilar training and target data). Our results show that guessers often produce dissimilar guesses, even when trained on the same data. We leverage this result to show that combinations of computationally-cheap guessers are as effective as computationally intensive guessers, but more efficient. Our insights allow us to provide a concrete set of recommendations for system administrators when performing password checking.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
