User authentication password security evaluation method and device based on random forest model

Abstract

The invention discloses a user authentication password security evaluation method and device based on a random forest model. The user authentication password security evaluation device comprises a prefix feature extraction module, a training set reading and processing module, a model training module and a password generation module. The user authentication password security evaluation method includes the steps: improving the Markov model, taking each character of the password in the password training set as a category, extracting a prefix feature of the character as a feature vector, and training by adopting a random forest to obtain a probability model of a multi-classification problem; and for any character string, obtaining probability distribution of suffix characters of the prefix through the probability model, and generating a candidate password, thereby realizing security evaluation on the user password. According to the user authentication password security evaluation method and device, the problem that an original Markov model is prone to over-fitting due to the model fitting principle can be solved, and the attack effect is better, and the algorithm effect is more stable,and the password security can be evaluated more accurately.

Description

technical field [0001] The invention belongs to the technical field of information security, and relates to user password security authentication technology, in particular to a random forest model-based user authentication password security evaluation method and device that does not use user personal information, and evaluates the security of user identity by obtaining user authentication passwords sex. Background technique [0002] Password has been one of the most important identity authentication methods in the past few decades. Due to its low cost, ease of use, etc., it will remain an irreplaceable identity authentication method in the foreseeable future. When users set passwords, they often ignore the security of passwords for the convenience of remembering. Therefore, in order to prevent users from setting passwords that are easy to be attacked by attackers, most websites use password strength evaluators to evaluate the strength of user passwords. At present, it is be...

AI Technical Summary

Problems solved by technology

However, the effect of the algorithm depends on the setting of hyperparameters, and the stability of evaluating password strength is low

Images