Top Banner
Cued Mnemonics for Better Security and Memorability Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin Beznosov Laboratory for Education and Research in Secure Systems Engineering ( LERSSE) University of British Columbia
15

Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Aug 28, 2018

Download

Documents

lydien
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Cued Mnemonics for Better Security and Memorability

Primal Wijesekera, Ivan Cherapau, Ayumi Samarakoon, Konstantin Beznosov

Laboratory for Education and Research in Secure Systems Engineering ( LERSSE)University of British Columbia

Page 2: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Passwords … things we all know

Page 3: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Mnemonics

Chosen Phrase Password

● Generation Effect● Memorability● Security● Future Vulnerability

Page 4: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Question time

hhelibebocnofnenamgalsipsclarkca

Page 5: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Question time

hhelibebocnofnenamgalsipsclarkca

H He Li Be Bo C N O F Ne Na Mg Al Si P S Cl Ar K Ca

Page 6: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Question time

hhelibebocnofnenamgalsipsclarkca

H He Li Be Bo C N O F Ne Na Mg Al Si P S Cl Ar K Ca

Page 7: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Mnemonics in Chemistry

● Tens of Mnemonics are used in memorizing different aspects, rules, components in Chemistry.

● From RANDOM set of characters to a cued phrase.

Something to learn from Chemists ...

Page 8: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

We propose ...

● Reversing the Mnemonic process.

● Generate a random password.○ System generated complying to the policies.

● Generate a “Cued” phrase○ Self Reference effect○ Episodic Memory

Page 9: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Example

Password: pa-3mp1y(TNB)

Page 10: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Example

Password: pa-3mp1y(TNB)

User’s interest: Running

Page 11: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Example

Password: pa-3mp1y(TNB)

User’s interest: Running

Phrase: personal achievement - 3 marathons per 1 year (Tokyo, New York, Boston)

Page 12: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

The Reverse Process

● Phrase is more personally related …○ Self reference effect

○ Trigger for autobiographical episodes■ Episodic memory

● Can accommodate generation effect ...

Page 13: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Phrase Generation

● Information Gathering○ Questionnaire before password creation.○ Traverse public information - Social Networks, Blogs○ Eventual knowledge base

● Generation○ Semantics - to find words.○ NLP - to generate a meaningful sentence.

Page 14: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Questions

Page 15: Cued Mnemonics for Better Security and Memorabilitycups.cs.cmu.edu/soups/2014/workshops/slides/mnemonics_wijeseker… · Cued Mnemonics for Better Security and Memorability Primal

Fantastic Four

Primal Ivan Ayumi Kosta

http://lersse.ece.ubc.ca/

Laboratory for Education and Research in Secure Systems Engineering ( LERSSE)University of British Columbia