ORCID Identifier(s)

0000-0003-0926-1373

Graduation Semester and Year

2016

Language

English

Document Type

Thesis

Degree Name

Master of Science in Computer Science

Department

Computer Science and Engineering

First Advisor

Matthew Wright

Abstract

Systems assigned password have guaranteed robustness against guessing attacks, but they are hard to memorize. To make system assigned passwords more usable, it is of prime importance that systems that assign random password also assist users with memorization and recall. In this work, we have designed a novel technique that employs rote memorization inform of an engaging game, which is played during the account registration process. Based on prior work on chunking, we break a password into three equal chunks, and then the game helps plant those chunks in memory. We present the findings of 17 participant user-study, where we explored the usability of nine-characters long pronounceable system-assigned passwords. Results of the study indicate that our system was effective in training users to memorize the random password at an average registration time of 6 minutes, but the long term recall rate of 71.4% did not match our expectation. On thorough evaluation of the system and the results, we identified potential areas of improvement and present a modified system design to improve the long term recall rate.

Keywords

Usable security, System-assigned passwords, Memorization

Disciplines

Computer Sciences | Physical Sciences and Mathematics

Comments

Degree granted by The University of Texas at Arlington

Download

Share

COinS