{"id":"https://openalex.org/W4288057720","doi":"https://doi.org/10.1109/sp46214.2022.9833598","title":"How to Attack and Generate Honeywords","display_name":"How to Attack and Generate Honeywords","publication_year":2022,"publication_date":"2022-05-01","ids":{"openalex":"https://openalex.org/W4288057720","doi":"https://doi.org/10.1109/sp46214.2022.9833598"},"language":"en","primary_location":{"id":"doi:10.1109/sp46214.2022.9833598","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833598","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030674762","display_name":"Ding Wang","orcid":"https://orcid.org/0000-0002-1667-2237"},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ding Wang","raw_affiliation_strings":["Nankai University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nankai University","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019414019","display_name":"Yunkai Zou","orcid":null},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunkai Zou","raw_affiliation_strings":["Nankai University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nankai University","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051027812","display_name":"Qiying Dong","orcid":"https://orcid.org/0000-0002-4099-7154"},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiying Dong","raw_affiliation_strings":["Nankai University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nankai University","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072019551","display_name":"Yuanming Song","orcid":"https://orcid.org/0000-0002-3672-1796"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuanming Song","raw_affiliation_strings":["Peking University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031931063","display_name":"Xinyi Huang","orcid":"https://orcid.org/0000-0003-0070-1707"},"institutions":[{"id":"https://openalex.org/I111753288","display_name":"Fujian Normal University","ror":"https://ror.org/020azk594","country_code":"CN","type":"education","lineage":["https://openalex.org/I111753288"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinyi Huang","raw_affiliation_strings":["Fujian Normal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fujian Normal University","institution_ids":["https://openalex.org/I111753288"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.5422,"has_fulltext":false,"cited_by_count":39,"citation_normalized_percentile":{"value":0.9837574,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"966","last_page":"983"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9793000221252441,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12553","display_name":"Psychedelics and Drug Studies","score":0.9778000116348267,"subfield":{"id":"https://openalex.org/subfields/3203","display_name":"Clinical Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6154018640518188},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3471810519695282}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6154018640518188},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3471810519695282}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46214.2022.9833598","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833598","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.800000011920929,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W1955134710","https://openalex.org/W1980697618","https://openalex.org/W2007488200","https://openalex.org/W2030112111","https://openalex.org/W2048755632","https://openalex.org/W2056711010","https://openalex.org/W2093397575","https://openalex.org/W2111397260","https://openalex.org/W2135359429","https://openalex.org/W2137395708","https://openalex.org/W2212366452","https://openalex.org/W2218132318","https://openalex.org/W2354711464","https://openalex.org/W2463456957","https://openalex.org/W2488850733","https://openalex.org/W2513151097","https://openalex.org/W2528123348","https://openalex.org/W2538793708","https://openalex.org/W2582719221","https://openalex.org/W2623402483","https://openalex.org/W2734150319","https://openalex.org/W2750634282","https://openalex.org/W2788102356","https://openalex.org/W2788565076","https://openalex.org/W2790382682","https://openalex.org/W2794001933","https://openalex.org/W2794659749","https://openalex.org/W2795675112","https://openalex.org/W2796769806","https://openalex.org/W2799210599","https://openalex.org/W2888827248","https://openalex.org/W2889060472","https://openalex.org/W2891698757","https://openalex.org/W2891820333","https://openalex.org/W2902061482","https://openalex.org/W2968267813","https://openalex.org/W2994997076","https://openalex.org/W3035133096","https://openalex.org/W4299818415","https://openalex.org/W6640709003","https://openalex.org/W6719406283","https://openalex.org/W6722583902","https://openalex.org/W6738839776","https://openalex.org/W6754080259","https://openalex.org/W6754888849","https://openalex.org/W6767270520"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Honeywords":[0],"are":[1,24],"decoy":[2],"passwords":[3],"associated":[4],"with":[5,62,110,141,155],"each":[6,111,168],"user":[7],"account":[8],"to":[9,20,26,74,121,137,145,220],"timely":[10],"detect":[11],"password":[12,143,177,192],"leakage.":[13],"The":[14],"key":[15],"issue":[16],"lies":[17],"in":[18,54,65,92,228],"how":[19],"generate":[21],"honeywords":[22,63],"that":[23,210,226],"hard":[25],"be":[27],"differentiated":[28],"from":[29],"real":[30],"passwords.":[31],"This":[32],"security":[33],"mechanism":[34],"was":[35],"first":[36,97],"introduced":[37],"by":[38,48,172],"Juels":[39],"and":[40,44,52,70,80,130,200,206],"Rivest":[41],"at":[42],"CCS\u201913,":[43],"has":[45],"been":[46],"covered":[47],"hundreds":[49],"of":[50,56,118,150,170,183,190,232],"media":[51],"adopted":[53],"dozens":[55],"research":[57,60,243],"domains.":[58],"Existing":[59],"deals":[61],"primarily":[64],"an":[66],"ad":[67],"hoc":[68],"manner,":[69],"it":[71],"is":[72,194],"challenging":[73],"develop":[75,162],"a":[76,93,115,151,181,233],"secure":[77],"honeyword-generation":[78,153,165],"method":[79,166],"well":[81],"evaluate":[82,146],"(attack)":[83],"it.":[84],"In":[85],"this":[86,90,238],"work,":[87],"we":[88,161,186,218],"tackle":[89],"problem":[91],"principled":[94],"approach.":[95],"We":[96,236],"propose":[98],"four":[99,157],"theoretic":[100],"models":[101,193],"for":[102,167],"characterizing":[103],"the":[104,126,147,156,163,188,229,241],"attacker":[105],"$\\mathcal{A}$\u2019s":[106],"best":[107,158],"distinguishing":[108],"strategies,":[109],"model":[112],"based":[113],"on":[114],"different":[116],"combination":[117],"information":[119,129],"available":[120],"$\\mathcal{A}$":[122],"(e.g.,":[123],"public":[124],"datasets,":[125],"victim\u2019s":[127],"personal":[128],"registration":[131],"order).":[132],"These":[133],"theories":[134],"guide":[135],"us":[136],"design":[138],"effective":[139],"experiments":[140,205],"real-world":[142],"datasets":[144],"goodness":[148],"(flatness)":[149],"given":[152],"method.Armed":[154],"attacking":[159],"theories,":[160],"corresponding":[164],"type":[169],"attackers,":[171],"using":[173],"various":[174],"representative":[175],"probabilistic":[176],"guessing":[178],"models.":[179],"Through":[180],"series":[182],"exploratory":[184],"investigations,":[185],"show":[187],"use":[189],"these":[191],"not":[195],"straightforward,":[196],"but":[197],"requires":[198],"creative":[199],"significant":[201],"efforts.":[202],"Both":[203],"empirical":[204],"user-study":[207],"results":[208],"demonstrate":[209],"our":[211],"methods":[212],"significantly":[213],"outperform":[214],"prior":[215],"art.":[216],"Besides,":[217],"manage":[219],"resolve":[221],"several":[222],"previously":[223],"unexplored":[224],"challenges":[225],"arise":[227],"practical":[230],"deployment":[231],"honeyword":[234,242],"method.":[235],"believe":[237],"work":[239],"pushes":[240],"towards":[244],"statistical":[245],"rigor.":[246]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":11},{"year":2022,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}