Performance evaluation of Cuckoo filters as an enhancement tool for password cracking

Cyberthreats continue their expansion, becoming more and more complex and varied. However, credentials and passwords are still a critical point in security. Password cracking can be a powerful tool to fght against cyber criminals if used by cybersecurity professionals and red teams, for instance, to...

Descripción completa

Detalles Bibliográficos
Autores: Cano Baños, María Dolores, Villafranca Albaladejo, Antonio, Tasic, Igor
Tipo de recurso: artículo
Estado:Versión publicada
Fecha de publicación:2023
País:España
Institución:Universidad Politécnica de Cartagena(UPCT)
Repositorio:Repositorio Digital UPCT
OAI Identifier:oai:repositorio.upct.es:10317/13769
Acceso en línea:http://hdl.handle.net/10317/13769
https://link.springer.com/article/10.1186/s42400-023-00193-6
Access Level:acceso abierto
Palabra clave:Authentication
Passwords
Password cracking
Cybersecurity
Cuckoo flters
Ingeniería Telemática
3325 Tecnología de las Telecomunicaciones
Descripción
Sumario:Cyberthreats continue their expansion, becoming more and more complex and varied. However, credentials and passwords are still a critical point in security. Password cracking can be a powerful tool to fght against cyber criminals if used by cybersecurity professionals and red teams, for instance, to evaluate compliance with security policies or in forensic investigations. For particular systems, one crucial step in the password-cracking process is comparison or matchmaking between password-guess hashes and real hashes. We hypothesize that using newer data structures such as Cuckoo flters could optimize this process. Experimental results show that, with a proper confguration, this data structure is two orders of magnitude more efcient in terms of size/usage compared to other data structures while keeping a comparable performance in terms of time.