paper-with-me

홈 › Papers

Enhancing Password Security Through a High-Accuracy Scoring Framework Using Random Forests

2025-11-12 · Muhammed El Mustaqeem Mazelan, Noor Hazlina Abdul, Nouar AlDahoul arxiv

Password security plays a crucial role in cybersecurity, yet traditional password strength meters, which rely on static rules like character-type requirements, often fail. Such methods are easily bypassed by common password patterns (e.g., 'P@ssw0rd1!'), giving users a false sense of security. To address this, we implement and evaluate a password strength scoring system by comparing four machine learning models: Random Forest (RF), Support Vector Machine (SVM), a Convolutional Neural Network (CNN), and Logistic Regression with a dataset of over 660,000 real-world passwords. Our primary contribution is a novel hybrid feature engineering approach that captures nuanced vulnerabilities missed by standard metrics. We introduce features like leetspeak-normalized Shannon entropy to assess true randomness, pattern detection for keyboard walks and sequences, and character-level TF-IDF n-grams to identify frequently reused substrings from breached password datasets. our RF model achieved superior performance, achieving 99.12% accuracy on a held-out test set. Crucially, the interpretability of the Random Forest model allows for feature importance analysis, providing a clear pathway to developing security tools that offer specific, actionable feedback to users. This study bridges the gap between predictive accuracy and practical usability, resulting in a high-performance scoring system that not only reduces password-based vulnerabilities but also empowers users to make more informed security decisions.

📄 PDF Abstract BibTeX arXiv:2511.09492

Code (0)

등록된 구현이 없습니다.

Tasks

Feature EngineeringFeature Importance

Similar Papers 제목 키워드 기반

AdaptAuth: Multi-Layered Behavioral and Credential Analysis for a Secure and Adaptive Authentication Framework for Password Security

2025-10-04 · Tonmoy Ghosh arxiv

Password security has been compelled to evolve in response to the growing computational capabilities of modern systems. However, this evolution has often resulted in increasingly complex security practices that alienate …

HoneyFaces: Increasing the Security and Privacy of Authentication Using Synthetic Facial Images

2016-11-11 · Mor Ohana, Orr Dunkelman, Stuart Gibson, Margarita Osadchy

One of the main challenges faced by Biometric-based authentication systems is the need to offer secure authentication while maintaining the privacy of the biometric data. Previous solutions, such as Secure Sketch and Fuz…

On Deep Learning in Password Guessing, a Survey

2022-08-22 · FangYi Yu

The security of passwords is dependent on a thorough understanding of the strategies used by attackers. Unfortunately, real-world adversaries use pragmatic guessing tactics like dictionary attacks, which are difficult to…

Deep LearningExperimental DesignSurvey

When Intelligence Fails: An Empirical Study on Why LLMs Struggle with Password Cracking

2025-10-18 · Mohammad Abdul Rehman, Syed Imad Ali Shah, Abbas Anwar, Noor Islam 외 arxiv

The remarkable capabilities of Large Language Models (LLMs) in natural language understanding and generation have sparked interest in their potential for cybersecurity applications, including password guessing. In this s…

Natural Language UnderstandingDomain Adaptation

GNPassGAN: Improved Generative Adversarial Networks For Trawling Offline Password Guessing

2022-08-14 · FangYi Yu, Miguel Vargas Martin

The security of passwords depends on a thorough understanding of the strategies used by attackers. Unfortunately, real-world adversaries use pragmatic guessing tactics like dictionary attacks, which are difficult to simu…