Abstract
Amidst the surge in deep learning-based password guessing models, challenges of generating high-quality passwords and reducing duplicate passwords persist. To address these challenges, we present PagPassGPT, a password guessing model constructed on a Generative Pretrained Transformer (GPT). It can perform pattern guided guessing by incorporating pattern structure information as background knowledge, resulting in a significant increase in the hit rate. Furthermore, we propose D&C-GEN to reduce the repeat rate of generated passwords, which adopts the concept of a divide-and-conquer approach. The primary task of guessing passwords is recursively divided into non-overlapping subtasks. Each subtask inherits the knowledge from the parent task and predicts succeeding tokens. In comparison to the state-of-the-art model, our proposed scheme exhibits the capability to correctly guess 12% more passwords while producing 25% fewer duplicates.
Original language | English (US) |
---|---|
Title of host publication | Proceedings - 2024 54th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2024 |
Publisher | Institute of Electrical and Electronics Engineers Inc. |
Pages | 429-442 |
Number of pages | 14 |
ISBN (Electronic) | 9798350341058 |
DOIs | |
State | Published - 2024 |
Event | 54th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2024 - Brisbane, Australia Duration: Jun 24 2024 → Jun 27 2024 |
Publication series
Name | Proceedings - 2024 54th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2024 |
---|
Conference
Conference | 54th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2024 |
---|---|
Country/Territory | Australia |
City | Brisbane |
Period | 06/24/24 → 06/27/24 |
Bibliographical note
Publisher Copyright:© 2024 IEEE.
Keywords
- generative pretrained transformer
- password guessing
- trawling attack
ASJC Scopus subject areas
- Computer Networks and Communications
- Hardware and Architecture
- Information Systems
- Safety, Risk, Reliability and Quality