SECURITY Comparison on KOREAN Password / Authentication Policy and Other Countries
1
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
Password is needed to create an account in most of the websites. Each website has different password and authentication policy when making an account. In addition, each country has different trend of policy in making the passwords. There are many researches about strong password and usable password. However, when it comes to practical, real world cannot adapt strong and usable password policy. South Korea is known for IT(Information Technology) and assumed to be secured in cyber space as well. However, South Korea has many problems regarding the leakage of accounts due to the password hacking. Countries beside Korea also may have analogous situation, but they may have different policies compare to Korea. Therefore, this study generally compares Korean websites’ password and authentication policies and other 5 countries’ policies by gathering policies from Alexa website and suggests recommendations.
Abstract
Password is needed to create an account in most of the websites. Each website has different password and authentication policy when making an account. In addition, each country has different trend of policy in making the passwords. There are many researches about strong password and usable password. However, when it comes to practical, real world cannot adapt strong and usable password policy. South Korea is known for IT(Information Technology) and assumed to be secured in cyber space as well. However, South Korea has many problems regarding the leakage of accounts due to the password hacking. Countries beside Korea also may have analogous situation, but they may have different policies compare to Korea. Therefore, this study generally compares Korean websites’ password and authentication policies and other 5 countries’ policies by gathering policies from Alexa website and suggests recommendations.
참고문헌 (12)
- Password Creation in the Presence of Blacklists, "Habib H", Internet Society, ~ (2017)
- Egelman S, "Does My Pass-word Go Up to Eleven?: The Impact of Password Meters on Password Selection", Proceedings of the SIGCHI Conference on Hu-man Factors in Computing Systems (2013)
- Wheeler D, "Low-budget Password Strength Estimation", 25th USENIX Security Symposium (2016)
- Ji S, "A Uniform and Open-source Pass-word Analysis and Research System", 31st Annual Computer Security Applications Conference (2015)
- Survival of the Shortest: A Retrospective Analysis of In-fluencing Factors on Password Composition, "Von ZE", Human-Computer Interaction, ~ (2013)
- Inglesant PG, "The True Cost of Unus-able Password Policies: Password Use in the Wild", SIGCHI Conference on Human Factors in Computing Systems (2010)
- Komanduri S, "Of Passwords and People: Measuring the Effect of Password-composi-tion Policies", SIGCHI Conference on Human Factors in Computing Systems (2011)
- Blasé U., "I added ‘!’ at the End to Make It Secure: Observing Password Creation in the Lab", 11th Symposium on Usable Privacy and Security (2015)
- Network Working Group, "HTTP Over TLS", ~ (2010)
- Grassi PA, "NIST Special Publication 800 63b Digital Identity Guidelines", ~ (2017)
- Convergent Security R&D Team, "Password Guideline", ~ (2010)