Publications  •  Project Statistics

Glossary  •  Schools  •  Disciplines
People Search: 
Title/Abstract Search: 

Dissertation Information for Peter Thomas Henry

- Peter Thomas Henry

- Ph.D.

- Library and Information Science

- Florida State University (USA) (2007)

- Charles R. McClure

- Gary Burnett
- John Bertot
- Michael Burmester

MPACT Status: Fully Complete

Title: Toward usable, robust memometric authentication: An evaluation of selected password generation assistance

Abstract: This dissertation explored the effects of various types of assistance on the generation, recall, and input of robust passwords containing at least twenty characters. Passwords are desirable memometric authentication secrets for many reasons, but their continued effectiveness depends on increasing their resistance to emerging attacks. Resistance to attacks is increasingly a function of length. Although previous password research revealed widespread use of short, weak passwords and conventional wisdom considers users incapable of reliably generating, recalling, and accurately inputting strong passwords, this study investigated ways to assist users in meeting the specific challenges of robust password management.

Interventions in the password-generation stage of this study introduced participants to five password generation schemes, supplied various numbers of example passwords, and required reentry of passwords immediately after generation to explore possible benefits on subsequent authentication performance. Key findings of this research were that: (1) Twenty-character passwords can be as strong as their corresponding 128-bit hashes; (2) Acrostic password-generation schemes produced strong passwords; (3) Confessional and Unexpected Nonsense schemes produced memorable passwords; (4) Supplying example passwords led to stronger passwords; (5) All participants easily generated 20-character passwords and most experienced few problems in the vague recall of them; (6) 30% of participants generated and used very strong passwords without failure for seven weeks; (7) The input of the precise formulation of robust passwords was the greatest single cause of authentication failure; (8) Exposure to 5 or 10 additional password examples during the generation stage did not improve subsequent password performance; (9) Reentry of passwords four times during the generation stage did not improve subsequent password performance; (10) Although education and training are beneficial, the actual study treatments were not universally effective; and (11) The population of password users and the reasons for password failure are complex, and users who experience difficulties require additional attention and resources on a contingency basis.

MPACT Scores for Peter Thomas Henry

A = 0
C = 0
A+C = 0
T = 0
G = 0
W = 0
TD = 0
TA = 0
calculated 2008-07-06 23:07:52

Advisors and Advisees Graph

Directed Graph

Students under Peter Thomas Henry

- None

- None