Tech

Stringent password can prevent fraud: Study

Tech News, Latest Technology News, New Best Tech Gadgets Reviews, Mobile, Tablet, Laptop, Gaming

Washington D.C [U.S.A], Oct 15 : Is it exhausting for you to come up with a new password every time you make a new account somewhere? Well, it turns out that the all-too-common practice of using the same email address/password combination to log into multiple websites can be damaging.

According to a recent study, the practice can cause more harm to the employers with many users and valuable assets protected by passwords, like in universities. “If someone uses their university email address and passphrase to sign up for, say, LinkedIn, and LinkedIn is breached by cybercriminals, that would mean their university password is sitting on the web for everyone to see,” said Indiana University’s Dan Calarco, co-author of the study. “We found that requiring longer and more complicated passwords resulted in a lower likelihood of password reuse,” the authors write in the paper, Factors Influencing Password Reuse: A Case Study.

The authors are Jacob Abbott, an IU Bloomington Ph.D. student; Daniel Calarco, chief of staff for the IU Office of the Vice President for IT and CIO; and L. Jean Camp, a professor in the IU Bloomington School of Informatics, Computing and Engineering.

The group presented their findings at the TPRC46: Research Conference on Communications, Information and Internet Policy in Washington, D.C. To investigate the impact of policy on password reuse, the study analyzed password policies from 22 different U.S. universities, including their home institution, IU. Next, they extracted sets of emails and passwords from two large data sets that were published online and contained over 1.3 billion email addresses and password combinations. Based on email addresses belonging to a university’s domain, passwords were compiled and compared against a university’s official password policy. The study found that stringent password rules significantly lower a university’s risk of personal data breaches.

“Our paper shows that passphrase requirements such as a 15-character minimum length deter the vast majority of IU users (99.98 percent) from reusing passwords or passphrases on other sites,” they write. “Other universities with fewer password requirements had reuse rates potentially as high as 40 percent.

” Their analysis found that IU performed the best of all 22 universities — and had the most extensive requirements.The authors could not legally test whether credentials were actually valid; instead, they examined whether passwords could potentially be valid given public password requirements such as password length, complexity and other requirements. “IU has worked with security and usability faculty to design our password policies, with the result being policies that value people’s time while mitigating risk,” Camp said.

“The length and complexity are balanced by the extended period before new passwords must be generated and the use of a longer authentication time window for applications. Indiana University’s rollout of two-factor authentication is similarly a model.” The authors offer the following recommendations to safeguard passwords: Increase the minimum password length beyond 8 characters. Increase the maximum password length.

Disallow the user’s name or username inside passwords. Contemplate multi-factor authentication. Multi-factor authentication is becoming more common and usable. IU, for example, employs Two-Step Login. With the potential benefits of reducing the risk of password reuse, multi-factor authentication may be a viable alternative to changing the length and/or complexity of password policies. “Our recommendations are not only applicable for universities but also can be used by other organizations, services or applications,” they write.

28 Comments

28 Comments

  1. Pingback: loansinteractive.com

  2. Pingback: buy oxycodone 30mg for sale cheap overnight delivery

  3. Pingback: high quality rolex replicas

  4. Pingback: Regression testing

  5. Pingback: AWS DevOps

  6. Pingback: replicas swiss copies iwc

  7. Pingback: buy dumps cc pin

  8. Pingback: psychedelic online store

  9. Pingback: good cvv online 2021

  10. Pingback: เว็บสล็อตใหม่ล่าสุด

  11. Pingback: digital transformation with cloud

  12. Pingback: store dumps cc

  13. Pingback: 강남셔츠룸

  14. Pingback: สล็อต

  15. Pingback: สล็อต pg เว็บตรง

  16. Pingback: tile installer

  17. Pingback: แอพเงินด่วน

  18. Pingback: Charter Spectrum was found to commit a felony -- shouldn‘t CEO be fired?

  19. Pingback: Dark Net

  20. Pingback: cheap mushrooms online albion

  21. Pingback: All Natural CBD

  22. Pingback: sbobet

  23. Pingback: Plus d'informations

  24. Pingback: tu peux vérifier

  25. Pingback: mushroom chocolate bars for sale

  26. Pingback: this hyperlink

  27. Pingback: Investment opportunities

  28. Pingback: http://heligods.com/proxy.php?link=https://gas-dank.com/

Leave a Reply

Your email address will not be published.

11 − eight =

News is information about current events. News is provided through many different media: word of mouth, printing, postal systems, broadcasting, electronic communication, and also on the testimony of observers and witnesses to events. It is also used as a platform to manufacture opinion for the population.

Contact Info

Address:
D 601  Riddhi Sidhi CHSL
Unnant Nagar Road 2
Kamaraj Nagar, Goreagaon West
Mumbai 400062 .

Email Id: [email protected]

West Bengal

Eastern Regional Office
Indsamachar Digital Media
Siddha Gibson 1,
Gibson Lane, 1st floor, R. No. 114,
Kolkata – 700069.
West Bengal.

Office Address

251 B-Wing,First Floor,
Orchard Corporate Park, Royal Palms,
Arey Road, Goreagon East,
Mumbai – 400065.

Download Our Mobile App

IndSamachar Android App IndSamachar IOS App
To Top
WhatsApp WhatsApp us