PROJECT TITLE :

Achieving Flatness: Selecting the Honeywords from Existing User Passwords

ABSTRACT:

Recently, Juels and Rivest proposed honeywords (decoy passwords) to detect attacks against hashed password databases. For each user account, the legitimate password is stored with many honeywords in order to sense impersonation. If honeywords are selected properly, a cyber-attacker who steals a file of hashed passwords cannot be certain if it is the $64000 password or a honeyword for any account. Moreover, getting into with a honeyword to login can trigger an alarm notifying the administrator regarding a password file breach. At the expense of accelerating the storage requirement by twenty times, the authors introduce a simple and effective resolution to the detection of password file disclosure events. In this study, we tend to scrutinize the honeyword system and gift some remarks to focus on potential weak points. Conjointly, we have a tendency to suggest an alternative approach that selects the honeywords from existing user passwords within the system so as to provide realistic honeywords-a perfectly flat honeyword generation technique-and additionally to reduce storage cost of the honeyword scheme.