Assessing the memorability of familiar vocabulary for system assigned passphrases

Text-based secrets are still the most commonly used authentication mechanism in information systems. Initially introduced as more secure authentication keys that people could recall, passphrases are tokens consisting of multiple words. However, when left to the choice of users, they tend to choose predictable natural language patterns in passphrases, resulting in vulnerability to guessing attacks. System-assigned authentication keys can be guaranteed to be secure, but this comes at a cost to memorability. In this study we investigate the memorability of system-assigned passphrases from a familiar vocabulary to the user. The passphrases are generated with the Generative Pre-trained Transformer 2 (GPT-2) model trained on the familiar vocabulary and are readable, pronounceable, sentence like passphrases resembling natural English sentences. Contrary to expectations, following a spaced repetition schedule, passphrases as natural English sentences, based on familiar vocabulary performed similarly to system-assigned passphrases based on random common words.

Name thesis:degree_name

Master of Science (MSc)

Discipline thesis:degree_discipline

Computer Science

Grantor

University of Ontario Institute of Technology

Year dc:date.issued

2021

Author dc:creator

• Jagadeesh, Noopa

Advisor dc:contributor.advisor

• Vargas Martin, Miguel

• Authentication
• System-assigned passphrase
• Memorability
• GPT-2

Language dc:language.iso

en

Handle dc:identifier.uri

https://hdl.handle.net/10155/1348

OAI identifier oai:identifier

oai:ontariotechu.scholaris.ca:10155/1348