Passwords - Can Users be Trained: Difference between revisions
No edit summary |
No edit summary |
||
Line 14: | Line 14: | ||
- All of the variations above reversly<br> |
- All of the variations above reversly<br> |
||
- NCC-1701D is not a good choice<br> |
- NCC-1701D is not a good choice<br> |
||
<br> |
|||
'''Use instead:'''<br> |
'''Use instead:'''<br> |
Revision as of 21:49, 8 November 2004
Finally the teaching of users to choose good passwords and giving negative feedback if not is essentially on that topic.
Conditions for creating good passwords:
Never use:
- Computer name, account name, hostnames
- Any names.
- The license number of your car
- Telefon numbers
- Birthdays
- Words, which are in any dictionaries
- Simple charakter combination ... abcd, 1234
- Keyboard patterns ... qwertz
- All of the variations above reversly
- NCC-1701D is not a good choice
Use instead:
- At least 8 signs
- Letters (small and big) + numbers + special signs
- A password which seems to be a random combination
Mentioning a good way to create passwords:
Using mnemonic phrases such as I’s12n&Iah retrieved from the sentence: “It’s 12 noon and I am hungry”
+ : easy to remember as naively selected passwords and as hard to guess as random passwords
- : problem of user compliance
Back (Intrusion Detection Issues) | Table of Contents | Next (Growing Need For Security Data)