Enhanced Evaluation Model of Security Strength for Passwords Using Integrated Korean and English Password Dictionaries
Table 4
Password security evaluation index.
Security evaluation score (2p + t)
zxcvbn evaluation score (p)
Matching score (t)
Password security evaluation criteria
0
0
True (0)
(i) Evaluate consistency with a password that was chosen by combining a word from the merged dictionary with numbers and special symbols (attempted less than 103 times) (ii) Matches the password dictionary
1
False (1)
(i) Evaluate consistency with a password that was chosen by combining a word from the merged dictionary with numbers and special symbols (attempted less than 103 times) (ii) Does not match the password dictionary
2
1
True (0)
(i) Evaluate consistency with a password that was chosen by combining a word from the merged dictionary with numbers and special symbols (attempted less than 106 times) (ii) Matches the password dictionary
3
False (1)
(i) Evaluate consistency with a password that was chosen by combining a word from the merged dictionary with numbers and special symbols (attempted less than 106 times) (ii) Does not match the password dictionary
4
2
True (0)
(i) Evaluate consistency with a password that was chosen by combining a word from the merged dictionary with numbers and special symbols (attempted less than 108 times) (ii) Matches the password dictionary
5
False (1)
(i) Evaluate consistency with a password that was chosen by combining a word from the merged dictionary with numbers and special symbols (attempted less than 108 times) (ii) Does not match the password dictionary
6
3
True (0)
(i) Evaluate consistency with a password that was chosen by combining a word from the merged dictionary with numbers and special symbols (attempted less than 1010 times) (ii) Matches the password dictionary
7
False (1)
(i) Evaluate consistency with a password that was chosen by combining a word from the merged dictionary with numbers and special symbols (attempted less than 1010 times) (ii) Does not match the password dictionary
8
4
True (0)
(i) Evaluate consistency with a password that was chosen by combining a word from the merged dictionary with numbers and special symbols (attempted 1010 times or more) (ii) Matches the password dictionary
9
False (1)
(i) Evaluate consistency with a password that was chosen by combining a word from the merged dictionary with numbers and special symbols (attempted 1010 times or more) (ii) Does not match the password dictionary
