{"id":"https://openalex.org/W4414692709","doi":"https://doi.org/10.1109/tifs.2025.3616595","title":"Improving Password Guessing With Isomorphism Modeling","display_name":"Improving Password Guessing With Isomorphism Modeling","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4414692709","doi":"https://doi.org/10.1109/tifs.2025.3616595"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3616595","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3616595","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Xudong Yang","orcid":"https://orcid.org/0009-0008-3178-0819"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xudong Yang","raw_affiliation_strings":["School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0009-0008-3178-0819","affiliations":[{"raw_affiliation_string":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043386406","display_name":"Zhen Xiao","orcid":"https://orcid.org/0000-0002-1387-583X"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenjia Xiao","raw_affiliation_strings":["School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005485454","display_name":"Xiaoyu Wu","orcid":"https://orcid.org/0000-0002-2870-8276"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoyu Wu","raw_affiliation_strings":["School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119792207","display_name":"Kaiwen Xing","orcid":"https://orcid.org/0009-0006-0074-0959"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kaiwen Xing","raw_affiliation_strings":["School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100531482","display_name":"He Tang","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"He Tang","raw_affiliation_strings":["School of Life Sciences, Biocomputing Facility, Technology Center for Protein Sciences, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Life Sciences, Biocomputing Facility, Technology Center for Protein Sciences, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101827453","display_name":"Tao Yang","orcid":"https://orcid.org/0000-0002-0714-2904"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tao Yang","raw_affiliation_strings":["School of Life Sciences, Biocomputing Facility, Technology Center for Protein Sciences, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Life Sciences, Biocomputing Facility, Technology Center for Protein Sciences, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001485404","display_name":"Kaitai Liang","orcid":"https://orcid.org/0000-0003-0262-7678"},"institutions":[{"id":"https://openalex.org/I155660961","display_name":"University of Turku","ror":"https://ror.org/05vghhr25","country_code":"FI","type":"education","lineage":["https://openalex.org/I155660961"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Kaitai Liang","raw_affiliation_strings":["Department of Computing, University of Turku, Turku, Finland"],"raw_orcid":"https://orcid.org/0000-0003-0262-7678","affiliations":[{"raw_affiliation_string":"Department of Computing, University of Turku, Turku, Finland","institution_ids":["https://openalex.org/I155660961"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100643589","display_name":"Hu Xiong","orcid":"https://orcid.org/0000-0001-6137-6667"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hu Xiong","raw_affiliation_strings":["School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0001-6137-6667","affiliations":[{"raw_affiliation_string":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.36564893,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"20","issue":null,"first_page":"11107","last_page":"11119"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9933000206947327,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9805999994277954,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.8838000297546387},{"id":"https://openalex.org/keywords/password-strength","display_name":"Password strength","score":0.5601999759674072},{"id":"https://openalex.org/keywords/password-cracking","display_name":"Password cracking","score":0.4778999984264374},{"id":"https://openalex.org/keywords/s/key","display_name":"S/KEY","score":0.4422999918460846},{"id":"https://openalex.org/keywords/dictionary-attack","display_name":"Dictionary attack","score":0.38749998807907104},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.3653999865055084},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.35569998621940613}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.8838000297546387},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.86080002784729},{"id":"https://openalex.org/C70530487","wikidata":"https://www.wikidata.org/wiki/Q1990841","display_name":"Password strength","level":4,"score":0.5601999759674072},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.5242999792098999},{"id":"https://openalex.org/C3847113","wikidata":"https://www.wikidata.org/wiki/Q2746524","display_name":"Password cracking","level":5,"score":0.4778999984264374},{"id":"https://openalex.org/C4957475","wikidata":"https://www.wikidata.org/wiki/Q242186","display_name":"S/KEY","level":3,"score":0.4422999918460846},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4246000051498413},{"id":"https://openalex.org/C113328881","wikidata":"https://www.wikidata.org/wiki/Q599809","display_name":"Dictionary attack","level":3,"score":0.38749998807907104},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.3653999865055084},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.35569998621940613},{"id":"https://openalex.org/C23875713","wikidata":"https://www.wikidata.org/wiki/Q5141232","display_name":"Cognitive password","level":5,"score":0.35260000824928284},{"id":"https://openalex.org/C180356752","wikidata":"https://www.wikidata.org/wiki/Q727035","display_name":"Adjacency matrix","level":3,"score":0.3384999930858612},{"id":"https://openalex.org/C110484373","wikidata":"https://www.wikidata.org/wiki/Q264398","display_name":"Adjacency list","level":2,"score":0.3334999978542328},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.3208000063896179},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C188615804","wikidata":"https://www.wikidata.org/wiki/Q8069448","display_name":"Zero-knowledge password proof","level":5,"score":0.29820001125335693},{"id":"https://openalex.org/C203436722","wikidata":"https://www.wikidata.org/wiki/Q902950","display_name":"Isomorphism (crystallography)","level":3,"score":0.2766999900341034},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.2736999988555908},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.27090001106262207},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2637999951839447}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3616595","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3616595","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5141996592","display_name":null,"funder_award_id":"2022YFB2701400","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W821002660","https://openalex.org/W1487941708","https://openalex.org/W1636244751","https://openalex.org/W2007488200","https://openalex.org/W2014833947","https://openalex.org/W2019578814","https://openalex.org/W2064327548","https://openalex.org/W2073342447","https://openalex.org/W2080051698","https://openalex.org/W2086553822","https://openalex.org/W2093397575","https://openalex.org/W2131681506","https://openalex.org/W2135359429","https://openalex.org/W2157151879","https://openalex.org/W2164736940","https://openalex.org/W2204575588","https://openalex.org/W2254621492","https://openalex.org/W2490171383","https://openalex.org/W2524553946","https://openalex.org/W2528123348","https://openalex.org/W2538793708","https://openalex.org/W2680793898","https://openalex.org/W2734150319","https://openalex.org/W2743151892","https://openalex.org/W2743597791","https://openalex.org/W2765667105","https://openalex.org/W2799900537","https://openalex.org/W2963532563","https://openalex.org/W2964015378","https://openalex.org/W2982664727","https://openalex.org/W2997591727","https://openalex.org/W3035773903","https://openalex.org/W3087524242","https://openalex.org/W3155266060","https://openalex.org/W3159217552","https://openalex.org/W3162121909","https://openalex.org/W3212185415","https://openalex.org/W4205610099","https://openalex.org/W4214501820","https://openalex.org/W4225308903","https://openalex.org/W4285231999","https://openalex.org/W4287849804","https://openalex.org/W4288057720","https://openalex.org/W4386246847","https://openalex.org/W4388594071","https://openalex.org/W4402263804","https://openalex.org/W4406727820","https://openalex.org/W4408354266","https://openalex.org/W4408354830","https://openalex.org/W4408564006"],"related_works":[],"abstract_inverted_index":{"Passwords":[0],"remain":[1],"one":[2],"of":[3,9,43,195],"the":[4,84,124],"most":[5],"widely":[6],"used":[7],"forms":[8],"authentication":[10,28],"in":[11,23,154,184],"modern":[12],"systems.":[13],"However,":[14],"their":[15,135],"inherent":[16],"predictability,":[17],"stemming":[18],"from":[19],"common":[20],"user":[21],"behaviors":[22],"password":[24,46,64,98,110,156,189],"creation,":[25],"renders":[26],"password-based":[27],"vulnerable":[29],"to":[30,62,82,126,161],"guessing":[31,65,99,190],"attacks.":[32],"To":[33,90,138],"balance":[34],"memorability":[35],"and":[36,75,119,134,167,187,197],"security,":[37],"users":[38],"often":[39],"construct":[40],"isomorphic":[41,136],"variants":[42,58],"a":[44,97,109,112,145],"base":[45,132],"by":[47],"altering":[48],"its":[49],"structure,":[50],"such":[51,71],"as":[52,72,111],"transforming":[53],"123abc":[54],"into":[55],"1a2b3c.":[56],"These":[57],"pose":[59],"significant":[60],"challenges":[61],"traditional":[63],"models.":[66],"In":[67],"particular,":[68],"mainstream":[69],"approaches":[70],"Markov":[73],"model":[74,80,125],"Probabilistic":[76],"Context-Free":[77],"Grammar":[78],"(PCFG)":[79],"struggle":[81],"capture":[83],"structural":[85,129,165],"relationships":[86],"among":[87],"these":[88],"variants.":[89,137],"address":[91],"this":[92],"challenge,":[93],"we":[94,142],"propose":[95],"PassGIN,":[96],"framework":[100],"based":[101],"on":[102,173],"Graph":[103],"Isomorphism":[104],"Networks":[105],"(GIN).":[106],"By":[107],"modeling":[108],"graph,":[113],"PassGIN":[114,179],"captures":[115],"both":[116,185],"local":[117],"adjacency":[118,151],"character":[120],"rearrangement":[121],"patterns,":[122],"enabling":[123],"distinguish":[127],"subtle":[128],"differences":[130],"between":[131],"passwords":[133],"further":[139],"enhance":[140],"performance,":[141],"introduce":[143],"PassCluster,":[144],"dynamic":[146],"edge-weighting":[147],"mechanism":[148],"that":[149,178],"leverages":[150],"frequencies":[152],"observed":[153],"large-scale":[155],"datasets.":[157],"This":[158],"allows":[159],"GIN":[160],"more":[162],"effectively":[163],"learn":[164],"variations":[166],"generate":[168],"accurate":[169],"guesses.":[170],"Extensive":[171],"experiments":[172],"eight":[174],"real-world":[175],"datasets":[176],"demonstrate":[177],"consistently":[180],"outperforms":[181],"state-of-the-art":[182],"models":[183],"intra-site":[186],"cross-site":[188],"scenarios,":[191],"achieving":[192],"relative":[193],"improvements":[194],"23.49%":[196],"74.53%,":[198],"respectively.":[199]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}