Go homepage(回首页)
Upload pictures (上传图片)
Write articles (发文字帖)

The author:(作者)归海一刀
published in(发表于) 2014/5/5 7:16:43
Insanity： password management using Pavlovian psychology，

Insanity: Password Manager-password using Pavlovian psychology in management, Pavlov, psychology-IT news Insanity: password management using Pavlovian psychology

Although security experts frequently warn users use strong passwords are still the minority.

Now, the Deloitte accounting firm network security expert Lance James proposed that Pavlovian Psychology applies to the password management system that rewarded or punished according to user-selected password.

For example, if a user chooses to test123@# as the password, the system will require the user to modify the password within 3 days; if you select t3st123@##$x with one user, the system will not ask him to change the password in three months.

Three-day limit is based on calculation of time required for offline password cracking techniques to crack. James noted that the human brain is programmed, the brain is like Bayesian Networks, need training to adapt to change.

丧心病狂：密码管理中用上巴甫洛夫心理学 - 密码管理,巴甫洛夫,心理学 - IT资讯
丧心病狂：密码管理中用上巴甫洛夫心理学

尽管安全专家频繁发出警告，使用强密码的用户仍然是少数派。

现在，德勤会计师事务所的网络安全专家Lance James提出将巴甫洛夫心理学应用于密码管理系统，根据用户选择的密码给予奖励或惩罚。

举例来说，如果一位用户选择将test123@#作为密码，系统将要求用户在3天内修改密码；如果同一位用户选择了t3st123@##$x，系统在三个月内不会要求他改密码。

三天的限制是根据线下破解技术破解密码所需时间计算出的。James指出，人类大脑是可编程的，大脑就像是贝叶斯网络，需要训练才能适应改变。

赞