{"id":"https://openalex.org/W7124149276","doi":"https://doi.org/10.1109/tdsc.2026.3654193","title":"PentaPassBreaker: Intelligent Password Prediction via Neural Networks by Analyzing Password Update Patterns","display_name":"PentaPassBreaker: Intelligent Password Prediction via Neural Networks by Analyzing Password Update Patterns","publication_year":2026,"publication_date":"2026-01-14","ids":{"openalex":"https://openalex.org/W7124149276","doi":"https://doi.org/10.1109/tdsc.2026.3654193"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3654193","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3654193","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113342771","display_name":"DongHo Jeon","orcid":null},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Dongho Jeon","raw_affiliation_strings":["Attached Institute of Electronics and Telecommunications Research Institute (ETRI), Daejeon, South Korea"],"raw_orcid":"https://orcid.org/0009-0007-8685-0477","affiliations":[{"raw_affiliation_string":"Attached Institute of Electronics and Telecommunications Research Institute (ETRI), Daejeon, South Korea","institution_ids":["https://openalex.org/I142401562"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043660997","display_name":"Wooyoung Go","orcid":null},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Wooyoung Go","raw_affiliation_strings":["Attached Institute of Electronics and Telecommunications Research Institute (ETRI), Daejeon, South Korea"],"raw_orcid":"https://orcid.org/0000-0001-9112-3281","affiliations":[{"raw_affiliation_string":"Attached Institute of Electronics and Telecommunications Research Institute (ETRI), Daejeon, South Korea","institution_ids":["https://openalex.org/I142401562"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122999378","display_name":"Seokhie Hong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Seokhie Hong","raw_affiliation_strings":["SmartM2M, Busan, South Korea"],"raw_orcid":"https://orcid.org/0000-0001-7506-4023","affiliations":[{"raw_affiliation_string":"SmartM2M, Busan, South Korea","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5123037185","display_name":"Heeseok Kim","orcid":null},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"HeeSeok Kim","raw_affiliation_strings":["Department of Cyber Security, College of Science and Technology, Korea University, Sejong, South Korea"],"raw_orcid":"https://orcid.org/0000-0001-8137-4810","affiliations":[{"raw_affiliation_string":"Department of Cyber Security, College of Science and Technology, Korea University, Sejong, South Korea","institution_ids":["https://openalex.org/I197347611"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.03133419,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"3","first_page":"5387","last_page":"5403"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0012000000569969416,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.9143999814987183},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.6809999942779541},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.48170000314712524},{"id":"https://openalex.org/keywords/password-cracking","display_name":"Password cracking","score":0.4799000024795532},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.45080000162124634},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4278999865055084},{"id":"https://openalex.org/keywords/password-strength","display_name":"Password strength","score":0.4189999997615814},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.36890000104904175}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.9143999814987183},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8389000296592712},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.6809999942779541},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.48170000314712524},{"id":"https://openalex.org/C3847113","wikidata":"https://www.wikidata.org/wiki/Q2746524","display_name":"Password cracking","level":5,"score":0.4799000024795532},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4715999960899353},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.45080000162124634},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4278999865055084},{"id":"https://openalex.org/C70530487","wikidata":"https://www.wikidata.org/wiki/Q1990841","display_name":"Password strength","level":4,"score":0.4189999997615814},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41280001401901245},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.40939998626708984},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.36890000104904175},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.35089999437332153},{"id":"https://openalex.org/C4957475","wikidata":"https://www.wikidata.org/wiki/Q242186","display_name":"S/KEY","level":3,"score":0.33149999380111694},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3230000138282776},{"id":"https://openalex.org/C98705547","wikidata":"https://www.wikidata.org/wiki/Q3394687","display_name":"Password policy","level":4,"score":0.29649999737739563},{"id":"https://openalex.org/C2778565505","wikidata":"https://www.wikidata.org/wiki/Q2207566","display_name":"Spec#","level":2,"score":0.28690001368522644},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.28200000524520874},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.27970001101493835},{"id":"https://openalex.org/C23875713","wikidata":"https://www.wikidata.org/wiki/Q5141232","display_name":"Cognitive password","level":5,"score":0.27810001373291016},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.2768999934196472},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2750999927520752},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.2662000060081482},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.26089999079704285}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3654193","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3654193","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2142148948","display_name":null,"funder_award_id":"RS-2025-25411243","funder_id":"https://openalex.org/F4320312071","funder_display_name":"Ministry of Education, Libya"}],"funders":[{"id":"https://openalex.org/F4320312071","display_name":"Ministry of Education, Libya","ror":"https://ror.org/02w030k33"},{"id":"https://openalex.org/F4320322120","display_name":"National Research Foundation of Korea","ror":"https://ror.org/013aysd81"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W2007488200","https://openalex.org/W2073342447","https://openalex.org/W2086553822","https://openalex.org/W2135359429","https://openalex.org/W2538793708","https://openalex.org/W2680793898","https://openalex.org/W2765667105","https://openalex.org/W2931153881","https://openalex.org/W2963532563","https://openalex.org/W2982664727","https://openalex.org/W3158562336","https://openalex.org/W3206499061","https://openalex.org/W4225295240","https://openalex.org/W4225308903","https://openalex.org/W4247857566","https://openalex.org/W4386526245","https://openalex.org/W4402263804"],"related_works":[],"abstract_inverted_index":{"Despite":[0],"advancements":[1],"in":[2,127],"password":[3,55,79,183],"policy":[4],"enforcement":[5],"and":[6,39,84,163,185,193],"user":[7,141,191],"awareness,":[8],"individuals":[9],"continue":[10],"to":[11],"follow":[12],"predictable":[13],"patterns":[14],"when":[15],"updating":[16],"or":[17,33],"creating":[18],"new":[19],"passwords":[20,99],"across":[21],"different":[22],"sites-often":[23],"making":[24],"minor":[25],"changes":[26],"such":[27,41,154],"as":[28,155],"appending":[29],"digits,":[30],"capitalizing":[31],"letters,":[32],"adding":[34],"special":[35],"characters.":[36],"To":[37],"model":[38,53],"exploit":[40],"behavioral":[42,145],"regularities,":[43],"we":[44,65],"present":[45],"<italic":[46],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[47,170],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">PentaPassBreaker</i>,":[48],"a":[49,58,67],"novel":[50],"sequence-to-sequence":[51],"generative":[52],"for":[54,60,189],"prediction.":[56],"As":[57],"foundation":[59],"learning":[61],"real-world":[62],"update":[63],"patterns,":[64],"introduce":[66],"large-scale":[68],"lexical":[69],"similarity":[70],"filtering":[71],"of":[72,95,105,119],"leaked":[73],"credentials,":[74],"extracting":[75],"307":[76],"million":[77],"high-similarity":[78],"pairs":[80],"through":[81],"noise":[82],"cleaning":[83],"similarity-based":[85],"clustering.":[86],"Our":[87],"analysis":[88,131],"reveals":[89,133],"that":[90,112,134],"users":[91],"reuse":[92,107,184],"an":[93,115],"average":[94,116],"3.2":[96],"closely":[97],"related":[98],"per":[100],"account,":[101],"highlighting":[102],"the":[103,157,177,187],"prevalence":[104],"fine-grained":[106],"behavior.":[108],"Experimental":[109],"results":[110],"show":[111],"PentaPassBreaker":[113],"achieves":[114],"top-5":[117],"accuracy":[118],"22.1%,":[120],"with":[121,181],"simple":[122],"transformation":[123,165],"paths":[124,166],"exceeding":[125],"35%":[126],"top-25":[128],"accuracy.":[129],"Qualitative":[130],"further":[132],"even":[135],"incorrect":[136],"guesses":[137],"often":[138],"resemble":[139],"plausible":[140],"updates,":[142],"demonstrating":[143],"strong":[144,151],"fidelity.":[146],"Moreover,":[147],"PPB":[148],"consistently":[149],"outperforms":[150],"rule-based":[152],"baselines":[153],"John":[156],"Ripper":[158],"(JTR),":[159],"particularly":[160],"on":[161],"structural":[162],"multi-edit":[164],"under":[167],"strict":[168],"top-<inline-formula":[169],"xmlns:xlink=\"http://www.w3.org/1999/xlink\"><tex-math":[171],"notation=\"LaTeX\">$k$</tex-math></inline-formula>":[172],"budgets.":[173],"These":[174],"findings":[175],"highlight":[176],"overlooked":[178],"risks":[179],"associated":[180],"incremental":[182],"emphasize":[186],"need":[188],"stronger":[190],"awareness":[192],"authentication":[194],"safeguards.":[195]},"counts_by_year":[],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2026-01-15T00:00:00"}