{"id":"https://openalex.org/W2804959968","doi":"https://doi.org/10.1145/3210459.3210483","title":"Why Johnny Can't Store Passwords Securely?","display_name":"Why Johnny Can't Store Passwords Securely?","publication_year":2018,"publication_date":"2018-06-27","ids":{"openalex":"https://openalex.org/W2804959968","doi":"https://doi.org/10.1145/3210459.3210483","mag":"2804959968"},"language":"en","primary_location":{"id":"doi:10.1145/3210459.3210483","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3210459.3210483","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 22nd International Conference on Evaluation and Assessment in Software Engineering 2018","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://unsworks.unsw.edu.au/bitstreams/539160cd-f531-48df-bee4-afa9f98f122f/download","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057083188","display_name":"Chamila Wijayarathna","orcid":"https://orcid.org/0000-0001-5332-5341"},"institutions":[{"id":"https://openalex.org/I188329596","display_name":"University of Canberra","ror":"https://ror.org/04s1nv328","country_code":"AU","type":"education","lineage":["https://openalex.org/I188329596"]},{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chamila Wijayarathna","raw_affiliation_strings":["University of New South Wales, Canberra, ACT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New South Wales, Canberra, ACT","institution_ids":["https://openalex.org/I188329596","https://openalex.org/I31746571"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081069489","display_name":"Nalin Asanka Gamagedara Arachchilage","orcid":"https://orcid.org/0000-0002-0059-0376"},"institutions":[{"id":"https://openalex.org/I188329596","display_name":"University of Canberra","ror":"https://ror.org/04s1nv328","country_code":"AU","type":"education","lineage":["https://openalex.org/I188329596"]},{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Nalin A. G. Arachchilage","raw_affiliation_strings":["University of New South Wales, Canberra, ACT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New South Wales, Canberra, ACT","institution_ids":["https://openalex.org/I188329596","https://openalex.org/I31746571"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":22,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"205","last_page":"210"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.8804893493652344},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8216733932495117},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.7490827441215515},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5941759943962097},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.47721701860427856},{"id":"https://openalex.org/keywords/cognitive-walkthrough","display_name":"Cognitive walkthrough","score":0.4347347617149353},{"id":"https://openalex.org/keywords/application-programming-interface","display_name":"Application programming interface","score":0.4234757423400879},{"id":"https://openalex.org/keywords/usability-lab","display_name":"Usability lab","score":0.41208070516586304},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4109067916870117},{"id":"https://openalex.org/keywords/web-usability","display_name":"Web usability","score":0.37332701683044434},{"id":"https://openalex.org/keywords/usability-engineering","display_name":"Usability engineering","score":0.3187269866466522},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.2914418876171112},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.12322026491165161}],"concepts":[{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.8804893493652344},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8216733932495117},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.7490827441215515},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5941759943962097},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.47721701860427856},{"id":"https://openalex.org/C87105883","wikidata":"https://www.wikidata.org/wiki/Q1107002","display_name":"Cognitive walkthrough","level":4,"score":0.4347347617149353},{"id":"https://openalex.org/C99613125","wikidata":"https://www.wikidata.org/wiki/Q165194","display_name":"Application programming interface","level":2,"score":0.4234757423400879},{"id":"https://openalex.org/C11324603","wikidata":"https://www.wikidata.org/wiki/Q2502322","display_name":"Usability lab","level":4,"score":0.41208070516586304},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4109067916870117},{"id":"https://openalex.org/C4237393","wikidata":"https://www.wikidata.org/wiki/Q1636686","display_name":"Web usability","level":3,"score":0.37332701683044434},{"id":"https://openalex.org/C100302975","wikidata":"https://www.wikidata.org/wiki/Q1642623","display_name":"Usability engineering","level":3,"score":0.3187269866466522},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2914418876171112},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12322026491165161}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3210459.3210483","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3210459.3210483","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 22nd International Conference on Evaluation and Assessment in Software Engineering 2018","raw_type":"proceedings-article"},{"id":"pmh:oai:unsworks.library.unsw.edu.au:1959.4/unsworks_51597","is_oa":true,"landing_page_url":"http://hdl.handle.net/1959.4/unsworks_51597","pdf_url":"https://unsworks.unsw.edu.au/bitstreams/539160cd-f531-48df-bee4-afa9f98f122f/download","source":{"id":"https://openalex.org/S4306401737","display_name":"UNSWorks (University of New South Wales, Sydney, Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40053085","host_organization_name":"Australian Defence Force Academy","host_organization_lineage":["https://openalex.org/I40053085"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 22nd International Conference on Evaluation and Assessment in Software Engineering 2018","raw_type":"http://purl.org/coar/resource_type/c_5794"}],"best_oa_location":{"id":"pmh:oai:unsworks.library.unsw.edu.au:1959.4/unsworks_51597","is_oa":true,"landing_page_url":"http://hdl.handle.net/1959.4/unsworks_51597","pdf_url":"https://unsworks.unsw.edu.au/bitstreams/539160cd-f531-48df-bee4-afa9f98f122f/download","source":{"id":"https://openalex.org/S4306401737","display_name":"UNSWorks (University of New South Wales, Sydney, Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40053085","host_organization_name":"Australian Defence Force Academy","host_organization_lineage":["https://openalex.org/I40053085"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 22nd International Conference on Evaluation and Assessment in Software Engineering 2018","raw_type":"http://purl.org/coar/resource_type/c_5794"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2804959968.pdf","grobid_xml":"https://content.openalex.org/works/W2804959968.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W2011698232","https://openalex.org/W2024683376","https://openalex.org/W2117194148","https://openalex.org/W2138679593","https://openalex.org/W2305152417","https://openalex.org/W2503779953","https://openalex.org/W2541261609","https://openalex.org/W2576128915","https://openalex.org/W2604400213","https://openalex.org/W2698406033","https://openalex.org/W2742082076","https://openalex.org/W2964144088","https://openalex.org/W3105794999","https://openalex.org/W4299818415"],"related_works":["https://openalex.org/W2488259327","https://openalex.org/W2573096963","https://openalex.org/W4249900088","https://openalex.org/W110518437","https://openalex.org/W4230862284","https://openalex.org/W2017322369","https://openalex.org/W2027233529","https://openalex.org/W2580784735","https://openalex.org/W2556467320","https://openalex.org/W1601819814"],"abstract_inverted_index":{"Lack":[0],"of":[1,3,11,54,92,97,130,166,170],"usability":[2,53,71,91,102,158,210,217],"security":[4,23,119,213],"Application":[5],"Programming":[6],"Interfaces":[7],"(APIs)":[8],"is":[9,66],"one":[10],"the":[12,52,70,90,137,163],"main":[13],"reasons":[14],"for":[15,44,136,191,212],"mistakes":[16,111],"that":[17,20,32,77,106,115,160,199],"programmers":[18,45,108,127,192],"make":[19,58,78,110],"result":[21,117],"in":[22,25,104,118,162,220],"vulnerabilities":[24],"software":[26],"applications":[27,114],"they":[28],"develop.":[29],"Especially,":[30],"APIs":[31,56,76,179,214],"provide":[33,187,203],"cryptographic":[34],"functionalities":[35],"such":[36],"as":[37],"password":[38,94,145],"hashing":[39,95],"are":[40],"sometimes":[41],"too":[42],"complex":[43],"to":[46,57,61,68,81,100,109,141,186,208,215],"learn":[47,62,82],"and":[48,63,83,139,184],"use.":[49,84],"To":[50],"improve":[51],"these":[55],"them":[59,131],"easy":[60],"use,":[64],"it":[65,105],"important":[67],"identify":[69,101,216],"issues":[72,103,159,218],"exist":[73,161,219],"on":[74,206],"those":[75,79],"harder":[80],"In":[85],"this":[86,200],"work,":[87],"we":[88,153,155,197],"evaluated":[89],"SCrypt":[93,164],"functionality":[96],"Bouncycastle":[98,149,167],"API":[99],"persuade":[107],"while":[112],"developing":[113],"would":[116],"vulnerabilities.":[120],"We":[121],"conducted":[122],"a":[123,143,188,204],"study":[124,138,172],"with":[125],"10":[126],"where":[128],"each":[129],"spent":[132],"around":[133],"2":[134],"hours":[135],"attempted":[140],"develop":[142],"secure":[144],"storage":[146],"solution":[147],"using":[148],"API.":[150,168],"From":[151],"data":[152],"collected,":[154],"identified":[156],"63":[157],"implementation":[165],"Results":[169],"our":[171],"provided":[173],"useful":[174],"insights":[175],"about":[176],"how":[177,207],"security/cryptographic":[178],"should":[180],"be":[181],"designed,":[182],"developed":[183],"improved":[185],"better":[189],"experience":[190],"who":[193],"use":[194],"them.":[195,221],"Furthermore,":[196],"expect":[198],"work":[201],"will":[202],"guidance":[205],"conduct":[209],"evaluations":[211]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}