{"id":"https://openalex.org/W2188166315","doi":null,"title":"ErsatzPasswords: ending password cracking","display_name":"ErsatzPasswords: ending password cracking","publication_year":2015,"publication_date":"2015-03-24","ids":{"openalex":"https://openalex.org/W2188166315","mag":"2188166315"},"language":"en","primary_location":{"id":"mag:2188166315","doi":null,"is_oa":false,"landing_page_url":"https://www.cerias.purdue.edu/assets/pdf/bibtex_archive/2015-2.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306417677","display_name":"Annual Information Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Annual Information Security Symposium","raw_type":null},"volume":null,"type":"conference-paper","indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012696341","display_name":"Christopher N. Gutierrez","orcid":"https://orcid.org/0000-0002-5037-4591","observed_orcids":["https://orcid.org/0000-0002-5037-4591"]},"institutions":[{"id":"https://openalex.org/I1343180700","display_name":"Intel (United States)","ror":"https://ror.org/01ek73717","country_code":"US","type":"company","lineage":["https://openalex.org/I1343180700"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Gutierrez","raw_affiliation_strings":["Intel (United States), Santa Clara, United States"],"raw_orcid":"https://orcid.org/0000-0002-5037-4591","affiliations":[{"raw_affiliation_string":"Intel (United States), Santa Clara, United States","institution_ids":["https://openalex.org/I1343180700"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046028853","display_name":"Mohammed H. Almeshekah","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohammed H. Almeshekah","raw_affiliation_strings":["Purdue University West Lafayette, West Lafayette, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University West Lafayette, West Lafayette, United States","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113562454","display_name":"Mikhail J. Atallah","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mikhail J. Atallah","raw_affiliation_strings":["Purdue University West Lafayette, West Lafayette, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University West Lafayette, West Lafayette, United States","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038958507","display_name":"Eugene Howard Spafford","orcid":"https://orcid.org/0000-0002-5555-8330","observed_orcids":["https://orcid.org/0000-0002-5555-8330"]},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eugene H. Spafford","raw_affiliation_strings":["Purdue University West Lafayette, West Lafayette, United States"],"raw_orcid":"https://orcid.org/0000-0002-5555-8330","affiliations":[{"raw_affiliation_string":"Purdue University West Lafayette, West Lafayette, United States","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5799,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.65012522,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"37","last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9556000232696533,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9556000232696533,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.025499999523162842,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.00570000009611249,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password-cracking","display_name":"password cracking","score":0.7789999842643738},{"id":"https://openalex.org/keywords/physically-unclonable-functions","display_name":"physical unclonable functions","score":0.9660000205039978},{"id":"https://openalex.org/keywords/hardware-security-modules","display_name":"hardware security modules","score":0.9980000257492065},{"id":"https://openalex.org/keywords/authentication-server","display_name":"authentication server","score":0.6679999828338623},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.5669999718666077},{"id":"https://openalex.org/keywords/legacy-system-integration","display_name":"legacy system integration","score":0.5659999847412109}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.8283337950706482},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8011130690574646},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.5377275347709656},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5363750457763672},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.5181456804275513},{"id":"https://openalex.org/C3847113","wikidata":"https://www.wikidata.org/wiki/Q2746524","display_name":"Password cracking","level":5,"score":0.5071942806243896},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5008862018585205},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.491773396730423},{"id":"https://openalex.org/C2780945871","wikidata":"https://www.wikidata.org/wiki/Q194274","display_name":"Backup","level":2,"score":0.48232099413871765},{"id":"https://openalex.org/C4957475","wikidata":"https://www.wikidata.org/wiki/Q242186","display_name":"S/KEY","level":3,"score":0.4760268032550812},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.44583678245544434},{"id":"https://openalex.org/C70530487","wikidata":"https://www.wikidata.org/wiki/Q1990841","display_name":"Password strength","level":4,"score":0.2937971353530884},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.23844438791275024},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2186351716518402},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2188166315","doi":null,"is_oa":false,"landing_page_url":"https://www.cerias.purdue.edu/assets/pdf/bibtex_archive/2015-2.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306417677","display_name":"Annual Information Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":"Annual Information Security Symposium","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, justice, and strong institutions","score":0.5699999928474426}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W997570209","https://openalex.org/W1607915502","https://openalex.org/W1811376871","https://openalex.org/W1977776704","https://openalex.org/W2008648042","https://openalex.org/W2011602498","https://openalex.org/W2030112111","https://openalex.org/W2048755632","https://openalex.org/W2073342447","https://openalex.org/W2093397575","https://openalex.org/W2097267243","https://openalex.org/W2107911557","https://openalex.org/W2116374153","https://openalex.org/W2135359429","https://openalex.org/W2141420453","https://openalex.org/W2161125296","https://openalex.org/W3216580706"],"related_works":["https://openalex.org/W2212366452","https://openalex.org/W2948086802","https://openalex.org/W2003329891","https://openalex.org/W199538112","https://openalex.org/W3209719964","https://openalex.org/W2949598092","https://openalex.org/W2751784288","https://openalex.org/W2070513900","https://openalex.org/W2787333794","https://openalex.org/W2951062405","https://openalex.org/W1429067725","https://openalex.org/W1980697618","https://openalex.org/W2158712646","https://openalex.org/W2772616417","https://openalex.org/W2968070763","https://openalex.org/W2787328792","https://openalex.org/W2254424130","https://openalex.org/W2063860068","https://openalex.org/W2735426050","https://openalex.org/W2159651836"],"abstract_inverted_index":{"In":[0],"this":[1],"work":[2],"we":[3],"present":[4],"a":[5,32,37,43,179,187],"simple,":[6],"yet":[7],"effective":[8],"and":[9,24,112,198],"practical,":[10],"scheme":[11,53,83,176],"to":[12,114,133,151,171,204],"improve":[13],"the":[14,27,49,62,69,72,82,84,87,100,108,117,124,127,146,153,162,172,184,190,205],"security":[15,45],"of":[16,64,71,86,186,189],"stored":[17],"password":[18,74,154],"hashes":[19],"rendering":[20],"their":[21],"cracking":[22,164],"detectable":[23],"insuperable":[25],"at":[26,48],"same":[28],"time.":[29],"We":[30,194],"utilize":[31],"machine-dependent":[33],"function,":[34],"such":[35],"as":[36],"physically":[38],"unclonable":[39],"function":[40],"(PUF)":[41],"or":[42,76,92],"hardware":[44,191],"module":[46],"(HSM)":[47],"authentication":[50,173,207],"server.":[51,174],"The":[52,175],"can":[54],"be":[55,143,166],"easily":[56],"integrated":[57],"with":[58,157],"legacy":[59],"systems":[60],"without":[61,168],"need":[63],"any":[65,77],"additional":[66],"servers,":[67],"changing":[68],"structure":[70,85],"hashed":[73,88,109],"file":[75,111],"client":[78],"modifications.":[79],"When":[80,130],"using":[81,135],"passwords":[89,110,119],"file,":[90],"etc/shadow":[91],"etc/master.passwd,":[93],"will":[94,121,142],"appear":[95],"no":[96],"different":[97],"than":[98],"in":[99,145,183,202],"traditional":[101,206],"scheme.1":[102],"However,":[103],"when":[104],"an":[105,131,140,158],"attacker":[106],"exfiltrates":[107],"tries":[113],"crack":[115,152],"it,":[116],"only":[118],"he":[120],"get":[122],"are":[123],"ersatzpasswords":[125,137],"---":[126],"fake":[128],"passwords.":[129],"attempt":[132],"login":[134],"these":[136],"is":[138],"detected":[139],"alarm":[141],"triggered":[144],"system":[147],"that":[148],"someone":[149],"attempted":[150],"file.":[155],"Even":[156],"adversary":[159],"who":[160],"knows":[161],"scheme,":[163],"cannot":[165],"launched":[167],"physical":[169],"access":[170],"also":[177],"includes":[178],"secure":[180],"backup":[181],"mechanism":[182],"event":[185],"failure":[188],"dependent":[192],"function.":[193],"discuss":[195],"our":[196],"implementation":[197],"provide":[199],"some":[200],"discussion":[201],"comparison":[203],"scheme.":[208]},"counts_by_year":[{"year":2017,"cited_by_count":1},{"year":2015,"cited_by_count":1}],"updated_date":"2026-09-29T14:09:16.559479","created_date":"2025-10-10T00:00:00"}