孟加拉国政府网站密码安全因素研究
A Study of Password Security Factors among Bangladeshi Government Websites
摘要：
孟加拉国政府正在积极改变其公共服务格局，通过一些网站将公共服务转变为在线服务。其动机是，这将成为公民生活各个方面变革的催化剂。一些Web服务必须受到保护，以防止任何未经授权的使用，密码仍然是用于此目的的最广泛使用的凭据机制。然而，如果密码没有被正确地采用，它们可能是安全漏洞的原因。这就是为什么在不同的网站上研究密码安全的不同方面是很重要的。在本文中，我们提出了一个36个不同的孟加拉国政府网站对六个精心挑选的密码安全策略的密码安全性的研究。这项研究是这一领域的第一项研究，提供了有趣的见解。例如，许多网站在安全方面没有采取适当的安全措施。许多网站没有采用密码构造指南，从而为用户选择强密码造成障碍。他们中的一些人允许所谓的弱密码，并且仍然没有利用安全的HTTPS通道在互联网上传输信息。
英文摘要：
The Government of Bangladesh is aggressively transforming its public service landscape by transforming public services into online services via a number of websites. The motivation is that this would be a catalyst for a transformative change in every aspect of citizen life. Some web services must be protected from any unauthorised usages and passwords remain the most widely used credential mechanism for this purpose. However, if passwords are not adopted properly, they can be a cause for security breach. That is why it is important to study different aspects of password security on different websites. In this paper, we present a study of password security among 36 different Bangladeshi government websites against six carefully chosen password security heuristics. This study is the first of its kind in this domain and offers interesting insights. For example, many websites have not adopted proper security measures with respect to security. There is no password construction guideline adopted by many websites, thus creating a barrier for users to select a strong password. Some of them allow supposedly weak passwords and still do not utilise a secure HTTPS channel to transmit information over the Internet.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
