{"id":"https://openalex.org/W4415251874","doi":"https://doi.org/10.1109/sp63933.2026.00191","title":"MoPE: A Mixture of Password Experts for Improving Password Guessing","display_name":"MoPE: A Mixture of Password Experts for Improving Password Guessing","publication_year":2026,"publication_date":"2026-05-18","ids":{"openalex":"https://openalex.org/W4415251874","doi":"https://doi.org/10.1109/sp63933.2026.00191"},"language":"en","primary_location":{"id":"doi:10.1109/sp63933.2026.00191","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp63933.2026.00191","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2509.16558","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019611778","display_name":"Ming Duan","orcid":"https://orcid.org/0000-0003-0837-2450"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingjian Duan","raw_affiliation_strings":["Fudan University,Laboratory for Data Security and Governance"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fudan University,Laboratory for Data Security and Governance","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100629750","display_name":"Ming Xu","orcid":"https://orcid.org/0000-0003-1061-819X"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Ming Xu","raw_affiliation_strings":["National University of Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075568384","display_name":"Shenghao Zhang","orcid":"https://orcid.org/0000-0002-3870-1975"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shenghao Zhang","raw_affiliation_strings":["Fudan University,Laboratory for Data Security and Governance"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fudan University,Laboratory for Data Security and Governance","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5143249785","display_name":"Weili Han","orcid":null},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weili Han","raw_affiliation_strings":["Fudan University,Laboratory for Data Security and Governance"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fudan University,Laboratory for Data Security and Governance","institution_ids":["https://openalex.org/I24943067"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3017","last_page":"3036"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.987500011920929,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.942799985408783},{"id":"https://openalex.org/keywords/password-cracking","display_name":"Password cracking","score":0.6352999806404114},{"id":"https://openalex.org/keywords/password-strength","display_name":"Password strength","score":0.6323000192642212},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5892999768257141},{"id":"https://openalex.org/keywords/s/key","display_name":"S/KEY","score":0.49390000104904175},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.45590001344680786}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.942799985408783},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8001000285148621},{"id":"https://openalex.org/C3847113","wikidata":"https://www.wikidata.org/wiki/Q2746524","display_name":"Password cracking","level":5,"score":0.6352999806404114},{"id":"https://openalex.org/C70530487","wikidata":"https://www.wikidata.org/wiki/Q1990841","display_name":"Password strength","level":4,"score":0.6323000192642212},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5892999768257141},{"id":"https://openalex.org/C4957475","wikidata":"https://www.wikidata.org/wiki/Q242186","display_name":"S/KEY","level":3,"score":0.49390000104904175},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.45590001344680786},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4237000048160553},{"id":"https://openalex.org/C98705547","wikidata":"https://www.wikidata.org/wiki/Q3394687","display_name":"Password policy","level":4,"score":0.4106000065803528},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.3928000032901764},{"id":"https://openalex.org/C23875713","wikidata":"https://www.wikidata.org/wiki/Q5141232","display_name":"Cognitive password","level":5,"score":0.38510000705718994},{"id":"https://openalex.org/C113328881","wikidata":"https://www.wikidata.org/wiki/Q599809","display_name":"Dictionary attack","level":3,"score":0.38089999556541443},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.34869998693466187},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.3160000145435333},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30559998750686646},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.28130000829696655},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2542000114917755}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/sp63933.2026.00191","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp63933.2026.00191","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2509.16558","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2509.16558","pdf_url":"https://arxiv.org/pdf/2509.16558","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2509.16558","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2509.16558","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2509.16558","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2509.16558","pdf_url":"https://arxiv.org/pdf/2509.16558","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Textual":[0],"passwords":[1,29,105,114,231],"remain":[2],"a":[3,59,70,91,137,147,216],"predominant":[4],"authentication":[5],"mechanism":[6],"in":[7,40,69,104,126,181,195,228],"web":[8],"security.":[9],"To":[10,49],"evaluate":[11],"their":[12,75],"strength,":[13],"existing":[14,178],"research":[15],"has":[16],"proposed":[17],"several":[18],"data-driven":[19,208],"models":[20,26,83,155,209],"across":[21],"various":[22],"scenarios.":[23],"However,":[24],"these":[25],"generally":[27],"treat":[28],"uniformly,":[30],"neglecting":[31],"the":[32,51,101,111,130,163,205],"structural":[33,47,76,102,117],"differences":[34],"among":[35],"passwords.":[36],"This":[37],"typically":[38],"results":[39],"biased":[41,52],"training":[42],"that":[43,56,113,174,200],"favors":[44],"frequent":[45],"password":[46,168,211],"patterns.":[48],"mitigate":[50],"training,":[53],"we":[54,88,214],"argue":[55],"passwords,":[57],"as":[58],"type":[60],"of":[61,93,167,207],"complex":[62],"short":[63],"textual":[64],"data,":[65],"should":[66],"be":[67],"processed":[68],"structure-aware":[71],"manner":[72],"by":[73,110],"identifying":[74],"patterns":[77,103,118],"and":[78,184,192],"routing":[79],"them":[80],"to":[81,99,106,124,151,156,190],"specialized":[82,143],"accordingly.":[84],"In":[85],"this":[86],"paper,":[87],"propose":[89],"MoPE,":[90,225],"Mixture":[92],"Password":[94,218],"Experts":[95],"framework,":[96],"specifically":[97],"designed":[98],"leverage":[100],"improveguessing":[107],"performance.":[108],"Motivated":[109],"observation":[112],"with":[115,162,234],"similar":[116],"(e.g.,":[119],"fixed-length":[120],"numeric":[121],"strings)":[122],"tend":[123],"cluster":[125],"high-density":[127],"regions":[128],"within":[129],"latent":[131],"space,":[132],"our":[133],"MoPE":[134,175,201],"introduces:":[135],"(1)":[136],"novel":[138],"structure-based":[139],"method":[140,150],"for":[141,210],"generating":[142],"expert":[144,154],"models;":[145],"(2)":[146],"lightweight":[148],"gate":[149],"select":[152],"appropriate":[153],"output":[157],"reliable":[158],"guesses,":[159],"better":[160],"aligned":[161],"high":[164],"computational":[165],"frequency":[166],"guessing":[169,186],"tasks.":[170],"Our":[171],"evaluation":[172],"shows":[173],"significantly":[176],"outperforms":[177],"state-of-the-art":[179],"baselines":[180],"both":[182],"offline":[183,224],"online":[185],"scenarios,":[187],"achieving":[188],"up":[189],"38.80%":[191],"9.27%":[193],"improvement":[194],"cracking":[196],"rate,":[197],"respectively,":[198],"showcasing":[199],"can":[202],"effectively":[203],"exploit":[204],"capabilities":[206],"guessing.":[212],"Additionally,":[213],"implement":[215],"real-time":[217],"Strength":[219],"Meter":[220],"(PSM)":[221],"based":[222],"on":[223],"assisting":[226],"users":[227],"choosing":[229],"stronger":[230],"more":[232],"precisely":[233],"millisecond-level":[235],"response":[236],"latency.":[237]},"counts_by_year":[],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-16T00:00:00"}