Article
Harder, Better, Faster, Stronger: Optimising the Performance of Context-Based Password Cracking Dictionaries
Contribution Summary
This paper introduces a novel methodology for composing and ranking contextual wordlists for password cracking, with the aim of supporting digital forensic investigators in their criminal investigations. The approach leverages the inherent weakness of user-generated passwords, which are often connected to their creators' personal information. By generating bespoke password candidate lists based on available contextual information, the methodology aims to maximise the chance of early success in password cracking. The proposed approach is evaluated using data leaks from compromised online communities, demonstrating its effectiveness in finding passwords not recovered by traditional methods. The results show that the optimised, ranked dictionary lists offer a significant increase in password recovery rates compared to previous models. The methodology is presented as a valuable tool for investigators, providing readily available, highly-customised contextual dictionaries on any topic, and highlighting the importance of context in password creation.
Keywords: password cracking; contextual information; wordlist; digital forensics; password selection; password strength; password cracking techniques; password recovery
Abstract
Passwords have been the prevailing method of authentication since their inception more than 50 years ago, a trend which has no signs of slowing down in the foreseeable future. They are an integral part of the security of digital persons, systems and critical data, and yet, they often remain the weakest entry point to a digital system. A password itself is indeed an extension of its creator and therefore can be exploited by malicious actors leveraging available contextual information about a target password creator. Recent research has shown that bespoke password candidate lists, generated based on available contextual information, can positively impact the password cracking processes. This paper introduces an innovative methodology for composing a contextual wordlist and ranking the password candidates in order to maximise the chance of early success. The aim of the proposed approach is to support digital forensic investigators in their criminal investigation - especially when time is of the essence. This paper describes the implementation of this methodology and provides an overview of several experimental results demonstrating the advantages of this approach. These results demonstrate that by going through a harder, more rigorous password candidate selection process, better dictionaries can be generated that, in a faster timeframe, can crack stronger passwords.
BibTeX
@article{kanta2023HarderBetter,
author={Kanta, Aikaterini and Coisel, Iwen and Scanlon, Mark},
title="{Harder, Better, Faster, Stronger: Optimising the Performance of Context-Based Password Cracking Dictionaries}",
journal="{Forensic Science International: Digital Investigation}",
year=2023,
month=03,
volume=44S,
publisher={Elsevier},
url={https://doi.org/10.1016/j.fsidi.2023.301507},
doi={https://doi.org/10.1016/j.fsidi.2023.301507},
pages={301507},
abstract={Passwords have been the prevailing method of authentication since their inception more than 50 years ago, a trend which has no signs of slowing down in the foreseeable future. They are an integral part of the security of digital persons, systems and critical data, and yet, they often remain the weakest entry point to a digital system. A password itself is indeed an extension of its creator and therefore can be exploited by malicious actors leveraging available contextual information about a target password creator. Recent research has shown that bespoke password candidate lists, generated based on available contextual information, can positively impact the password cracking processes. This paper introduces an innovative methodology for composing a contextual wordlist and ranking the password candidates in order to maximise the chance of early success. The aim of the proposed approach is to support digital forensic investigators in their criminal investigation -- especially when time is of the essence. This paper describes the implementation of this methodology and provides an overview of several experimental results demonstrating the advantages of this approach. These results demonstrate that by going through a harder, more rigorous password candidate selection process, better dictionaries can be generated that, in a faster timeframe, can crack stronger passwords.}
}