{"id":"https://openalex.org/W2417993288","doi":"https://doi.org/10.1109/ecrime.2016.7487945","title":"Revisiting password rules: facilitating human management of passwords","display_name":"Revisiting password rules: facilitating human management of passwords","publication_year":2016,"publication_date":"2016-06-01","ids":{"openalex":"https://openalex.org/W2417993288","doi":"https://doi.org/10.1109/ecrime.2016.7487945","mag":"2417993288"},"language":"en","primary_location":{"id":"doi:10.1109/ecrime.2016.7487945","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ecrime.2016.7487945","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 APWG Symposium on Electronic Crime Research (eCrime)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084389654","display_name":"Leah Zhang-Kennedy","orcid":"https://orcid.org/0000-0002-0756-0022"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Leah Zhang-Kennedy","raw_affiliation_strings":["School of Computer Science Carleton University"],"affiliations":[{"raw_affiliation_string":"School of Computer Science Carleton University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048641215","display_name":"Sonia Chiasson","orcid":"https://orcid.org/0000-0001-7314-2198"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sonia Chiasson","raw_affiliation_strings":["School of Computer Science Carleton University"],"affiliations":[{"raw_affiliation_string":"School of Computer Science Carleton University","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011846293","display_name":"Paul C. van Oorschot","orcid":"https://orcid.org/0000-0002-5038-5370"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Paul van Oorschot","raw_affiliation_strings":["School of Computer Science Carleton University"],"affiliations":[{"raw_affiliation_string":"School of Computer Science Carleton University","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5084389654"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":12.4715,"has_fulltext":false,"cited_by_count":43,"citation_normalized_percentile":{"value":0.98470143,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9790999889373779,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.972000002861023,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.9426388740539551},{"id":"https://openalex.org/keywords/password-policy","display_name":"Password policy","score":0.7891548275947571},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7476942539215088},{"id":"https://openalex.org/keywords/cognitive-password","display_name":"Cognitive password","score":0.6918689012527466},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.619437575340271},{"id":"https://openalex.org/keywords/password-strength","display_name":"Password strength","score":0.5748313665390015},{"id":"https://openalex.org/keywords/s/key","display_name":"S/KEY","score":0.5551726222038269},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4593714773654938},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.3877277076244354},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3673474192619324}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.9426388740539551},{"id":"https://openalex.org/C98705547","wikidata":"https://www.wikidata.org/wiki/Q3394687","display_name":"Password policy","level":4,"score":0.7891548275947571},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7476942539215088},{"id":"https://openalex.org/C23875713","wikidata":"https://www.wikidata.org/wiki/Q5141232","display_name":"Cognitive password","level":5,"score":0.6918689012527466},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.619437575340271},{"id":"https://openalex.org/C70530487","wikidata":"https://www.wikidata.org/wiki/Q1990841","display_name":"Password strength","level":4,"score":0.5748313665390015},{"id":"https://openalex.org/C4957475","wikidata":"https://www.wikidata.org/wiki/Q242186","display_name":"S/KEY","level":3,"score":0.5551726222038269},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4593714773654938},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.3877277076244354},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3673474192619324},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/ecrime.2016.7487945","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ecrime.2016.7487945","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 APWG Symposium on Electronic Crime Research (eCrime)","raw_type":"proceedings-article"},{"id":"pmh:oai:uwspace.uwaterloo.ca:10012/18096","is_oa":false,"landing_page_url":"http://hdl.handle.net/10012/18096","pdf_url":null,"source":{"id":"https://openalex.org/S4306401661","display_name":"UWSpace (University of Waterloo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I151746483","host_organization_name":"University of Waterloo","host_organization_lineage":["https://openalex.org/I151746483"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7099999785423279}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W19073260","https://openalex.org/W1267153886","https://openalex.org/W1466389411","https://openalex.org/W1534968492","https://openalex.org/W1944720853","https://openalex.org/W1970008263","https://openalex.org/W1971295515","https://openalex.org/W1972586294","https://openalex.org/W1987516957","https://openalex.org/W2016310229","https://openalex.org/W2030112111","https://openalex.org/W2037202491","https://openalex.org/W2045591401","https://openalex.org/W2048755632","https://openalex.org/W2054393971","https://openalex.org/W2054626033","https://openalex.org/W2064064417","https://openalex.org/W2073342447","https://openalex.org/W2089241088","https://openalex.org/W2091833612","https://openalex.org/W2097267243","https://openalex.org/W2099387734","https://openalex.org/W2099419188","https://openalex.org/W2100783932","https://openalex.org/W2104773223","https://openalex.org/W2109878465","https://openalex.org/W2111397260","https://openalex.org/W2113266120","https://openalex.org/W2119545418","https://openalex.org/W2121386924","https://openalex.org/W2125927592","https://openalex.org/W2129768690","https://openalex.org/W2133824719","https://openalex.org/W2134909295","https://openalex.org/W2150341374","https://openalex.org/W2161856816","https://openalex.org/W2171920515","https://openalex.org/W2339509466","https://openalex.org/W2343130604","https://openalex.org/W2396697587","https://openalex.org/W2727405488","https://openalex.org/W4211024936","https://openalex.org/W4214501820","https://openalex.org/W4248561262","https://openalex.org/W4285719527","https://openalex.org/W6676951976","https://openalex.org/W6679081015","https://openalex.org/W6679652390","https://openalex.org/W6712361343"],"related_works":["https://openalex.org/W2969720675","https://openalex.org/W2047210152","https://openalex.org/W2359085393","https://openalex.org/W1844709308","https://openalex.org/W4283835082","https://openalex.org/W2565480008","https://openalex.org/W2079990687","https://openalex.org/W2185274381","https://openalex.org/W2993348482","https://openalex.org/W2049404317"],"abstract_inverted_index":{"Password":[0],"rules":[1,46,64,85],"were":[2],"established":[3],"in":[4,13],"the":[5,17,59,70,74,77,81,84,94],"context":[6],"of":[7,20,44,83,101],"past":[8],"security":[9,15],"concerns.":[10],"Recent":[11],"work":[12],"computer":[14],"challenges":[16],"conventional":[18],"wisdom":[19],"expert":[21],"password":[22,63,102],"advice,":[23],"such":[24],"as":[25],"change":[26],"your":[27,33,39],"passwords":[28,40],"often,":[29],"do":[30,36],"not":[31,37],"reuse":[32],"passwords,":[34],"or":[35,80],"write":[38],"down.":[41],"The":[42],"effectiveness":[43],"these":[45],"for":[47,65],"protecting":[48],"user":[49,67],"accounts":[50],"against":[51],"real":[52],"world":[53],"attacks":[54],"is":[55],"questioned.":[56],"We":[57],"review":[58],"latest":[60],"research":[61],"examining":[62],"general-purpose":[66],"authentication":[68],"on":[69,87],"web,":[71],"and":[72,90],"discuss":[73],"arguments":[75],"behind":[76],"continued":[78],"acceptance":[79],"rejection":[82],"based":[86],"empirical":[88],"evidence":[89],"solid":[91],"justifications.":[92],"Following":[93],"review,":[95],"we":[96],"recommend":[97],"an":[98],"updated":[99],"set":[100],"rules.":[103]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":10},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":6},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":1}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}