Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Password guessing set generating method and password cracking method based on user name information

A user name and password technology, applied in the direction of instruments, digital data authentication, electronic digital data processing, etc., can solve the problems of low cracking efficiency, inability of the word segmentation system to effectively segment Chinese pinyin, poor cracking efficiency, etc.

Inactive Publication Date: 2017-06-06
INST OF INFORMATION ENG CAS
View PDF1 Cites 10 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, when the attacked website contains many weak passwords, this method proves to be less efficient
In addition, when it is used to crack Chinese website passwords, the cracking efficiency of this method is also poor, because its word segmentation system cannot effectively segment Chinese pinyin
[0004] The main problem with this approach is that it does not adequately analyze the semantic content of the cipher and the syntax between semantic categories, nor does it assign appropriate probabilities to the words in the dictionary used

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Password guessing set generating method and password cracking method based on user name information
  • Password guessing set generating method and password cracking method based on user name information
  • Password guessing set generating method and password cracking method based on user name information

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0060] Take the CSDN leaked password library as the training set, the 12306 leaked database as the target set, and the LDU4 method (the probability coefficient α value is 4) as an example:

[0061] 1) Extract the structure S of the password from the CSDN library 1 and fragment T 1 , extract the username structure S from the 12306 library 2 and fragment T 2 ;

[0062] 2) will S 2 add to S 1 Medium, S 1 Add S directly 2 The frequency of each structure in , and then globally count the probability of each structure;

[0063] 3) Put T 2add to T 1 middle, T 1 directly add T 2 The frequency of each terminal word in is multiplied by 4, and then the probability of each terminal word is counted globally;

[0064] 4) Add the Contemporary Corpus of American English corpus, Ziguang Pinyin Input Method Pinyin Dictionary, Webster's English Dictionary and other dictionaries to T 1 middle. At this point, the S and T of PCFGs are generated, and then sorted according to the probabi...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a password guessing set generating method and a password cracking method based on user name information. The password cracking method comprises the steps of: 1) labelling user names and passwords of a data training set leaked according to word segmentations and semantic structures, calculating the semantic similarity of the user names and passwords, wherein the semantic similarity comprises semantic structure similarity and semantic portion similarity; 2) applying the semantic similarity to PCFGs grammar, in another word, PCFGs grammar is built based on the semantic similarity; 3) building PCFGs grammar according to step 2), generating a password guessing set according to the probability of descending; 4) cracking the password according to the password guessing set. The password guessing set generating method and password cracking method have the advantages of utilizing the portion similarity and the structure similarity of the usernames and passwords, understanding the constitution semantic of the password, generating the password guessing set, and improving the password cracking efficiency.

Description

technical field [0001] The invention relates to a password guessing set generation method and a password cracking method based on user name information. Background technique [0002] For a long time, traditional brute force cracking methods have been used to crack passwords, but this method does not conduct in-depth analysis of passwords, so that the effect and efficiency are not satisfactory. [0003] In some new approaches, ideas and tools from natural language processing are applied to cryptanalysis and cracking. This method regards passwords as some form of natural sentences, which are composed of a series of fragments according to a certain hierarchical structure. Fragments that appear in passwords are usually words, dates, or other meaningful strings in the dictionary, and the combined structure of these fragments often reflects certain fixed patterns. You can use NLTK (Natural Language Toolkit) and WordNet tools to perform word segmentation, part-of-speech tagging, ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F21/45G06F21/46G06F21/31G06F21/60H04L29/06
CPCG06F21/45G06F21/31G06F21/46G06F21/602H04L63/083
Inventor 陈小军徐睿时金桥谭建龙文新胡兰兰王颖冰于晓杰
Owner INST OF INFORMATION ENG CAS
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products