摘要
用户名—密码(口令)是目前最流行的用户身份认证方式,鉴于获取真实的大规模密码明文非常困难,利用密码猜测技术来生成大规模密码集,可以评估密码猜测算法效率、检测现有用户密码保护机制的缺陷等,是研究密码安全性的主要方法。本文提出了一种基于递归神经网络的密码猜测概率模型(password guessing RNN, PG-RNN),区别于传统的基于人为设计规则的密码生成方法,递归神经网络能够自动地学习到密码集本身的分布特征和字符规律。因此,在泄露的真实用户密码集上训练后的递归神经网络,能够生成非常接近训练集真实数据的密码,避免了人为设定规则来破译密码的局限性。实验结果表明,PG-RNN生成的密码在结构字符类型、密码长度分布上比Markov模型更好地接近原始训练数据的分布特征,同时在真实密码匹配度上,本文提出的PG-RNN模型比目前较好的基于生成对抗网络的PassGAN模型提高了1.2%。
Passwords are the most popular way of user ID authentication.However,it is rather difficult to obtain largescale real text passwords.Generating large-scale password sets based on password-guessing techniques is a principal method to research password security,which can be applied to evaluate the efficiency of password-guessing algorithm and detect the defects of existing user-password protective mechanisms.In this paper,we propose a password guessingbased recurrent neural network(PG-RNN)model.Our model can directly and automatically infer the distribution characteristics and character rules from the data of password sets,which is different from the traditional password generating method based on manual design rule.Therefore,an RNN model that has been trained on a disclosed real user password set can generate passwords very close to the real data of the training set,which avoids the limitations of manual setting for password guessing.The results of our experiments show that PG-RNN can generate passwords closer to primitive data distribution more than Markov in password length and character structure categories.When evaluating on large password dataset,the proposed PG-RNN model matching outperforms that of PassGAN,which is based on generative adversarial networks,by more than 1.2%.
作者
滕南君
鲁华祥
金敏
叶俊彬
李志远
TENG Nanjun;LU Huaxiang;JIN Min;YE Junbin;LI Zhiyuan(Institute of Semiconductors,Chinese Academy of Sciences,Beijing 100083,China;University of Chinese Academy of Sciences, Beijing 100089,China;Center for Excellence in Brain Science and Intelligence Technology,Chinese Academy of Sciences, Shanghai 200031,China;Semiconductor Neural Network Intelligent Perception and Computing Technology Beijing Key Lab, Beijing 100083,Chin)
出处
《智能系统学报》
CSCD
北大核心
2018年第6期889-896,共8页
CAAI Transactions on Intelligent Systems
基金
北京市科技计划课题(Z171100002217094)
中科院战略性先导科技专项(A类)(XDA18040400)
作者简介
滕南君,男,1992年生,硕士研究生,主要研究方向为数字信号处理、机器学习;鲁华祥,男,1965年生,研究员,博士生导师,主要研究方向为类神经计算芯片、类脑神经计算技术和应用系统、信息与信号处理;通信作者:金敏.E-mail:jinmin08@semi.ac.cn.金敏,女,1985年生,助理研究员,主要研究方向为智能计算、模式识别与高性能计算。
