Unleashing Password Potential: VAEs vs GANs in a Password Guessing Duel
Insecure passwords remain a persistent vulnerability in cybersecurity. This study investigates the potential of employing Variational Autoencoders (VAEs) and Generative Adversarial Networks (GANs) as tools for generating synthetic passwords, with the aim of enhancing existing password cracking methodologies. These models, trained on a dataset of leaked RockYou passwords, are evaluated based on their capacity to produce passwords that replicate the complexity and diversity observed in real-world passwords. Through a thorough assessment of the quality and characteristics of these synthetic passwords, this research reveals the strengths and weaknesses of each model. Additionally, the study examines the effectiveness of utilizing synthetic passwords in password cracking endeavors, comparing their performance to established methods and actual breached passwords. In conclusion, this research seeks to deepen our comprehension of password creation patterns and fortify our ability to counter the risks associated with weak passwords. By delving into the potential of VAEs and GANs, we contribute to the ongoing pursuit of robust cybersecurity measures and the safeguarding of sensitive information.
Authors
- Narinder Singh Punn (ORCID: https://orcid.org/0000-0003-1175-1865)
- Deepak Kumar Dewangan (ORCID: https://orcid.org/0000-0002-0160-4215)
- Sonali Agarwal (ORCID: https://orcid.org/0000-0002-3753-428X)
- Siddhant Salve
Institutions
- Indian Institute of Information Technology Allahabad (IN)
- Atal Bihari Vajpayee Indian Institute of Information Technology and Management (IN)
Publication Details
- Published
- 2024-10-19
- DOI
- https://doi.org/10.1109/cvmi61877.2024.10782603
- Primary Topic
- User Authentication and Security Systems
- Type
- article
- Field-Weighted Citation Impact
- 0.00