Password strength detection method based on high-frequency character string PCFG model

Abstract

The invention belongs to the technical field of system security, and particularly relates to a password strength detection method based on a high-frequency character string PCFG model. The method comprises the following steps of: dividing a password into smaller composition units by using a special word segmentation method for the password; constructing and training a PCFG model by using the password after word segmentation; detecting the password strength by using the model and feeding back the password strength to the user to obtain graded strength information; and compressing the model and deploying the model at a browser end and a server end. According to the method, the password is automatically decomposed into high-frequency character strings by using a word segmentation method, so that the mode that the same character type is generally used for grouping the character strings at present is changed; the overestimation of a strength detection tool on the password is reduced, and an accurate password strength evaluation result is obtained; according to the method, the password strength of the user is fed back, more information is fed back to explain the weak password generation reason, and the user is informed of which high-frequency character strings adopted in the password are important factors causing formation of the weak password, so that the user can conveniently and specifically improve the password safety of the user.

Description

technical field [0001] The invention belongs to the technical field of system security, in particular to a password strength detection method based on a high-frequency character string PCFG. Background technique [0002] The PasswordStrengthMeter is used to detect the strength of a single password, and is generally deployed on clients such as websites by password administrators. A good password strength measurer can not only let users know the security level of their own passwords, but also make suggestions for users' passwords and help users correct weak passwords. However, the password strength measurers currently used by most browsers can only return the strength results of the user's password, and cannot explain the reason why the user chooses a weak password. CKL_PSM [1] The innovation of CKL_PSM is that it adopts the most efficient guessing model so far, which can feedback the password strength more accurately; secondly, CKL_PSM can not only return the password stren...

AI Technical Summary

Problems solved by technology

The original string-based Markov model and the neural network-based FLA model basically use a character-level model, using a single character as the basic unit of a password. However, dividing passwords by characters may be too fine-grained.

Images