{"id":"https://openalex.org/W7154470209","doi":"https://doi.org/10.48550/arxiv.2604.12601","title":"LLM-Guided Prompt Evolution for Password Guessing","display_name":"LLM-Guided Prompt Evolution for Password Guessing","publication_year":2026,"publication_date":"2026-04-14","ids":{"openalex":"https://openalex.org/W7154470209","doi":"https://doi.org/10.48550/arxiv.2604.12601"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.12601","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.12601","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.12601","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027062519","display_name":"Vladimir Mazin","orcid":"https://orcid.org/0009-0000-2468-5137"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mazin, Vladimir A.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133655732","display_name":"Mikhail A. Zorin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zorin, Mikhail A.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133650432","display_name":"Dmitrii S. Korzh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Korzh, Dmitrii S.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112902608","display_name":"Elvir Z. Karimov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Karimov, Elvir Z.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133680520","display_name":"Dmitrii A. Bolokhov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bolokhov, Dmitrii A.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133719608","display_name":"Oleg Y. Rogov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rogov, Oleg Y.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9811000227928162,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9811000227928162,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.004999999888241291,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.002300000051036477,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.8636999726295471},{"id":"https://openalex.org/keywords/password-cracking","display_name":"Password cracking","score":0.694599986076355},{"id":"https://openalex.org/keywords/credential","display_name":"Credential","score":0.5982000231742859},{"id":"https://openalex.org/keywords/password-strength","display_name":"Password strength","score":0.413100004196167},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.39079999923706055},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3896999955177307},{"id":"https://openalex.org/keywords/password-policy","display_name":"Password policy","score":0.3828999996185303}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.8636999726295471},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7912999987602234},{"id":"https://openalex.org/C3847113","wikidata":"https://www.wikidata.org/wiki/Q2746524","display_name":"Password cracking","level":5,"score":0.694599986076355},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6035000085830688},{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.5982000231742859},{"id":"https://openalex.org/C70530487","wikidata":"https://www.wikidata.org/wiki/Q1990841","display_name":"Password strength","level":4,"score":0.413100004196167},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.39079999923706055},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3896999955177307},{"id":"https://openalex.org/C98705547","wikidata":"https://www.wikidata.org/wiki/Q3394687","display_name":"Password policy","level":4,"score":0.3828999996185303},{"id":"https://openalex.org/C23875713","wikidata":"https://www.wikidata.org/wiki/Q5141232","display_name":"Cognitive password","level":5,"score":0.38269999623298645},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.3653999865055084},{"id":"https://openalex.org/C161615301","wikidata":"https://www.wikidata.org/wiki/Q309396","display_name":"Keystroke logging","level":2,"score":0.3345000147819519},{"id":"https://openalex.org/C2908647359","wikidata":"https://www.wikidata.org/wiki/Q2625603","display_name":"Population","level":2,"score":0.31869998574256897},{"id":"https://openalex.org/C4957475","wikidata":"https://www.wikidata.org/wiki/Q242186","display_name":"S/KEY","level":3,"score":0.2782000005245209},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.2628999948501587}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.12601","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.12601","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.12601","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.12601","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Passwords":[0],"still":[1],"remain":[2],"a":[3,25,74,82,88,96,129],"dominant":[4],"authentication":[5],"method,":[6],"yet":[7,131],"their":[8],"security":[9],"is":[10,24,128],"routinely":[11],"subverted":[12],"by":[13],"predictable":[14],"user":[15],"choices":[16],"and":[17,32,95,139],"large-scale":[18],"credential":[19],"leaks.":[20],"Automated":[21,125],"password":[22,30,49,137],"guessing":[23,50],"key":[26],"tool":[27],"for":[28,46],"stress-testing":[29],"policies":[31],"modeling":[33],"attacker":[34],"behavior.":[35],"This":[36],"paper":[37],"applies":[38],"LLM-driven":[39],"evolutionary":[40],"computation":[41],"to":[42,110,134],"automatically":[43],"optimize":[44],"prompts":[45,68,119],"the":[47,105],"LLM":[48],"framework.":[51],"Using":[52],"OpenEvolve,":[53],"an":[54,62],"open-source":[55],"system":[56],"combining":[57],"MAP-Elites":[58],"quality-diversity":[59],"search":[60],"with":[61,85],"island":[63],"population":[64],"model":[65,92],"we":[66],"evolve":[67],"that":[69],"maximize":[70],"cracking":[71,106],"rate":[72],"on":[73],"RockYou-derived":[75],"test":[76],"set.":[77],"We":[78],"evaluate":[79],"three":[80],"configurations:":[81],"local":[83],"setup":[84],"Qwen3":[86],"8B,":[87],"single":[89],"compact":[90],"cloud":[91],"Gemini-2.5":[93],"Flash,":[94],"two-model":[97],"ensemble":[98],"of":[99],"frontier":[100],"LLMs.":[101],"The":[102],"approach":[103],"raises":[104],"rates":[107],"from":[108],"2.02\\%":[109],"8.48\\%.":[111],"Character":[112],"distribution":[113],"analysis":[114],"further":[115],"confirms":[116],"how":[117,141],"evolved":[118],"produce":[120],"statistically":[121],"more":[122],"realistic":[123],"passwords.":[124],"prompt":[126],"evolution":[127],"low-barrier":[130],"effective":[132],"way":[133],"strengthen":[135],"LLM-based":[136],"auditing":[138],"underlining":[140],"attack":[142],"pipelines":[143],"show":[144],"tendency":[145],"via":[146],"automated":[147],"improvements.":[148]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-16T00:00:00"}