{"id":"https://openalex.org/W4408564006","doi":"https://doi.org/10.1109/tdsc.2025.3552583","title":"Understanding User Passwords Through Parsing Tree","display_name":"Understanding User Passwords Through Parsing Tree","publication_year":2025,"publication_date":"2025-03-18","ids":{"openalex":"https://openalex.org/W4408564006","doi":"https://doi.org/10.1109/tdsc.2025.3552583"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3552583","doi":"https://doi.org/10.1109/tdsc.2025.3552583","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3552583","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-a","cwts-core","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030674762","display_name":"Ding Wang","orcid":"https://orcid.org/0000-0002-1667-2237","observed_orcids":["https://orcid.org/0000-0002-1667-2237"]},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ding Wang","raw_affiliation_strings":["College of Cryptology and Cyber Science, Nankai University, Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0002-1667-2237","affiliations":[{"raw_affiliation_string":"College of Cryptology and Cyber Science, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068608786","display_name":"Xuan Shan","orcid":"https://orcid.org/0009-0007-4074-9349","observed_orcids":["https://orcid.org/0009-0007-4074-9349"]},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuan Shan","raw_affiliation_strings":["College of Cryptology and Cyber Science, Nankai University, Tianjin, China"],"raw_orcid":"https://orcid.org/0009-0007-4074-9349","affiliations":[{"raw_affiliation_string":"College of Cryptology and Cyber Science, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yuxuan Wu","orcid":"https://orcid.org/0009-0007-7071-557X","observed_orcids":["https://orcid.org/0009-0007-7071-557X"]},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuxuan Wu","raw_affiliation_strings":["College of Cryptology and Cyber Science, Nankai University, Tianjin, China"],"raw_orcid":"https://orcid.org/0009-0007-7071-557X","affiliations":[{"raw_affiliation_string":"College of Cryptology and Cyber Science, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005646333","display_name":"Chunfu Jia","orcid":"https://orcid.org/0000-0002-5588-9690","observed_orcids":["https://orcid.org/0000-0002-5588-9690"]},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunfu Jia","raw_affiliation_strings":["College of Cryptology and Cyber Science, Nankai University, Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0002-5588-9690","affiliations":[{"raw_affiliation_string":"College of Cryptology and Cyber Science, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I205237279"],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":3.2477,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.92386708,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":96},"biblio":{"volume":"22","issue":"5","first_page":"4722","last_page":"4736"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password-guessing","display_name":"password guessing","score":0.9750000238418579},{"id":"https://openalex.org/keywords/password-strength","display_name":"password strength","score":0.6859999895095825},{"id":"https://openalex.org/keywords/personally-identifiable-information","display_name":"personally identifiable information","score":0.8709999918937683},{"id":"https://openalex.org/keywords/password-cracking","display_name":"password cracking","score":0.7549999952316284}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8529118299484253},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.658726692199707},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.6232136487960815},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.5040373206138611},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34355485439300537},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2001059353351593},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3552583","doi":"https://doi.org/10.1109/tdsc.2025.3552583","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3552583","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-a","cwts-core","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G347215597","display_name":null,"funder_award_id":"62172240","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6401220598","display_name":null,"funder_award_id":"62222208","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W821002660","https://openalex.org/W1987516957","https://openalex.org/W2007488200","https://openalex.org/W2019578814","https://openalex.org/W2022580268","https://openalex.org/W2025448348","https://openalex.org/W2030112111","https://openalex.org/W2037202491","https://openalex.org/W2066345778","https://openalex.org/W2073342447","https://openalex.org/W2086553822","https://openalex.org/W2093397575","https://openalex.org/W2100783932","https://openalex.org/W2135359429","https://openalex.org/W2157151879","https://openalex.org/W2411725940","https://openalex.org/W2490171383","https://openalex.org/W2528123348","https://openalex.org/W2538793708","https://openalex.org/W2743597791","https://openalex.org/W2751688886","https://openalex.org/W2795753884","https://openalex.org/W2885376490","https://openalex.org/W2891114826","https://openalex.org/W2904985786","https://openalex.org/W2910394228","https://openalex.org/W2931153881","https://openalex.org/W2940184589","https://openalex.org/W2979778546","https://openalex.org/W3017171081","https://openalex.org/W3031972324","https://openalex.org/W3097523736","https://openalex.org/W3153466684","https://openalex.org/W3155266060","https://openalex.org/W3162121909","https://openalex.org/W3194311276","https://openalex.org/W3200024119","https://openalex.org/W3212185415","https://openalex.org/W3215903849","https://openalex.org/W4225308903","https://openalex.org/W4288057720","https://openalex.org/W4319079550","https://openalex.org/W4386554886"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W143386018","https://openalex.org/W2656445685","https://openalex.org/W1004582678","https://openalex.org/W2115218409","https://openalex.org/W2090949570","https://openalex.org/W2263162522","https://openalex.org/W107495730"],"abstract_inverted_index":{"Passwords":[0],"are":[1,204],"today\u2019s":[2],"dominant":[3],"form":[4],"of":[5,33,81,190,229,253],"authentication,":[6],"and":[7,26,101,136,171,232,247],"password":[8,17,20,65,75,258],"guessing":[9,21,167,174,202],"is":[10,69],"the":[11,39,46,51,73,115,131,137,149,151,157,188,214,230],"most":[12],"effective":[13],"method":[14],"for":[15,114],"evaluating":[16],"strength.":[18],"Most":[19],"models":[22],"(e.g.,":[23],"PCFG,":[24],"Markov,":[25],"RFGuess)":[27],"regard":[28],"passwords":[29,56,90,121,135,246],"as":[30,122],"sequences":[31],"composed":[32],"basic":[34,152],"units":[35],"(i.e.,":[36,44],"characters/segments),":[37],"with":[38,105],"information":[40,180],"flow":[41],"being":[42,233],"unidirectional":[43],"predicting":[45],"next":[47],"unit":[48],"based":[49,176],"on":[50,110,156,177,243],"preceding":[52],"units).":[53],"However,":[54],"modeling":[55],"in":[57,148,218],"a":[58,92,160,165,172,209,240,249],"single":[59],"direction":[60],"fails":[61],"to":[62,119,213,257],"capture":[63],"users\u2019":[64],"creation":[66],"behavior":[67],"that":[68,86],"actually":[70],"impacted":[71],"by":[72,199],"full":[74],"context.":[76],"Through":[77],"an":[78],"in-depth":[79],"analysis":[80],"real-world":[82],"passwords,":[83],"we":[84],"reveal":[85,130],"users":[87,141],"often":[88],"create":[89],"around":[91],"central":[93],"keyword,":[94],"like":[95],"common":[96],"words,":[97],"names,":[98],"or":[99,107],"dates,":[100],"then":[102],"embellish":[103],"them":[104],"numbers":[106,203],"symbols.":[108],"Based":[109],"this":[111],"observation,":[112],"we,":[113],"first":[116],"time,":[117],"attempt":[118],"parse":[120],"trees.":[123],"Unlike":[124],"existing":[125],"sequence":[126],"models,":[127],"trees":[128],"can":[129],"semantic":[132],"connections":[133],"within":[134],"logical":[138],"thought":[139],"processes":[140],"follow":[142],"when":[143,201],"creating":[144],"passwords.":[145],"For":[146],"instance,":[147],"passwordiloveyou,":[150],"unitsiandyouare":[153],"semantically":[154],"dependent":[155],"predicatelove,":[158],"forming":[159],"natural":[161],"tree":[162,255],"structure.We":[163],"propose":[164],"trawling":[166],"model":[168,175],"called":[169],"PassTree":[170,194],"targeted":[173],"personally":[178],"identifiable":[179],"(PII),":[181],"named":[182],"PassTree-PII.":[183],"Our":[184,237],"extensive":[185],"experiments":[186],"demonstrate":[187],"effectiveness":[189],"our":[191],"models:":[192],"(1)":[193],"outperforms":[195],"its":[196],"leading":[197],"counterparts":[198],"0.38%-2.51%":[200],"below$10^{7}$107;":[205],"(2)":[206],"PassTree-PII":[207],"achieves":[208],"cracking":[210],"rate":[211],"comparable":[212],"state-of-the-art":[215],"RFGuess-PII":[216],"proposed":[217],"USENIX":[219],"Security\u201923,":[220],"but":[221],"operates":[222],"significantly":[223],"more":[224],"efficiently,":[225],"using":[226],"only":[227],"0.87%":[228],"memory":[231],"16.60":[234],"times":[235],"faster.":[236],"work":[238],"provides":[239],"new":[241],"perspective":[242],"understanding":[244],"user":[245],"demonstrates":[248],"feasible":[250],"technical":[251],"route":[252],"applying":[254],"structures":[256],"guessing.":[259]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2026-10-14T16:39:01.820549","created_date":"2025-10-10T00:00:00"}