Difference between revisions of "Passwords - Can Users be Trained"

From
Jump to navigation Jump to search
Line 20: Line 20:
 
- Letters (small and big) + numbers + special signs<br>
 
- Letters (small and big) + numbers + special signs<br>
 
- A password which seems to be a random combination<br>
 
- A password which seems to be a random combination<br>
  +
  +
''Mentioning a good way to create passwords:''
  +
  +
Using mnemonic phrases such as I’s12n&Iah retrieved from the sentence: '''“It’s 12 noon and I am hungry”'''
  +
  +
+ : easy to remember as naively selected passwords and as hard to guess as random passwords
  +
  +
- : problem of user compliance
  +
   
 
----
 
----

Revision as of 22:47, 8 November 2004

Finally the teaching of users to choose good passwords and giving negative feedback if not is essentially on that topic.

Conditions for creating good passwords:

Never use:
- Computer name, account name, hostnames
- Any names.
- The license number of your car
- Telefon numbers
- Birthdays
- Words, which are in any dictionaries
- Simple charakter combination ... abcd, 1234
- Keyboard patterns ... qwertz
- All of the variations above reversly
- NCC-1701D is not a good choice


Use instead:
- At least 8 signs
- Letters (small and big) + numbers + special signs
- A password which seems to be a random combination

Mentioning a good way to create passwords:

Using mnemonic phrases such as I’s12n&Iah retrieved from the sentence: “It’s 12 noon and I am hungry”

+ : easy to remember as naively selected passwords and as hard to guess as random passwords

- : problem of user compliance



Back (Intrusion Detection Issues) | Table of Contents | Next (Growing Need For Security Data)