Lightweight password guessing dictionary generation method and device based on variational auto-encoder

Abstract

The invention belongs to the technical field of network security, and particularly relates to a lightweight password guessing dictionary generation method and device based on a variational auto-encoder, and the method comprises the steps: carrying out the preprocessing of passwords in a training set according to a preset condition, and obtaining a password set in a unified format; dividing the password set according to the structure to obtain password fragments, and segmenting each password fragment into character combinations by using an n-gram method; screening out a common character combination according to preset parameters, and then coding the password in a vector form; initializing a variational auto-encoder model, and training the variational auto-encoder model by using the vector form password until a loss function value does not decrease any more; and generating guess passwords by using the trained variational auto-encoder model, and performing descending order arrangement according to the occurrence frequency of the generated passwords to obtain a password guess dictionary. According to the method, the model training time and the generation time of the password guessing dictionary are greatly shortened, the success rate of password guessing is improved, and the timeliness of dictionary guessing attacks is ensured.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a method and device for generating a lightweight password guessing dictionary based on a variational autoencoder. Background technique [0002] With the rapid development of computer network and communication technology, people's daily work and life are inseparable from the network. Network security has become an important issue in the current information age. Identity authentication is an important line of defense for network security, and passwords have long been the mainstream method of identity authentication because of their simplicity and ease of deployment. Password attack is an important means of password security research and one of the important directions of cryptography research. It can be used in password recovery and password strength evaluation and other research fields. [0003] Dictionary guessing attack technique is a common password attack method. Th...

AI Technical Summary

Problems solved by technology

[0004] In order to solve the problems of slow password guessing dictionary generation, low accuracy, and poor generalization ability in the prior art, the present invention provides a lightweight password guessing dictionary generation method and device based on a variational autoencoder

Images