{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,28]],"date-time":"2026-08-28T17:09:10Z","timestamp":1787936950209,"version":"build-2784847793"},"reference-count":59,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,5]]},"DOI":"10.1109\/sp46214.2022.9833598","type":"proceedings-article","created":{"date-parts":[[2022,7,27]],"date-time":"2022-07-27T19:28:05Z","timestamp":1658950085000},"page":"966-983","source":"Crossref","is-referenced-by-count":39,"title":["How to Attack and Generate Honeywords"],"prefix":"10.1109","author":[{"given":"Ding","family":"Wang","sequence":"first","affiliation":[{"name":"Nankai University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yunkai","family":"Zou","sequence":"additional","affiliation":[{"name":"Nankai University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qiying","family":"Dong","sequence":"additional","affiliation":[{"name":"Nankai University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuanming","family":"Song","sequence":"additional","affiliation":[{"name":"Peking University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xinyi","family":"Huang","sequence":"additional","affiliation":[{"name":"Fujian Normal University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","author":"bloomberg","year":"2018","journal-title":"50 Million MyFitnessPal Accounts Have Been Hacked Under Armour Says"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23360"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00009"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978339"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.44"},{"key":"ref59","first-page":"157","article-title":"Zxcvbn: Low-budget password strength estimation","author":"wheeler","year":"0","journal-title":"Proc USENIX SEC 2016"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.49"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.8"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23142"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2721359"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-26951-7_20"},{"key":"ref55","first-page":"1537","article-title":"Birthday, name and bifacialsecurity: Understanding passwords of Chinese web users","author":"wang","year":"0","journal-title":"Proc USENIX SEC 2019"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.31"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2016.60"},{"key":"ref17","author":"burnett","year":"2016","journal-title":"Is there life after passwords?"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2699390"},{"key":"ref19","year":"2019","journal-title":"How password deny lists can help your users to make sensible password choices"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813722"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00003"},{"key":"ref50","author":"varun","year":"2016","journal-title":"Qatar National Bank Suffers Massive Breach - BankInfoSecurity"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23303"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134082"},{"key":"ref48","article-title":"Supporting password-security decisions with data","author":"ur","year":"2016"},{"key":"ref47","author":"pham","year":"2015","journal-title":"Four Years Later Anthem Breached Again Hackers Stole Credentials"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516726"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2018.01.028"},{"key":"ref44","author":"morris","year":"2021","journal-title":"Massive data leak exposes 700 million LinkedIn users information"},{"key":"ref43","article-title":"Fast, lean, and accurate: Modeling password guessability using neural networks","author":"melicher","year":"0","journal-title":"Proc USENIX SEC 2016"},{"key":"ref49","year":"2017","journal-title":"Passwords are not lame and they’re not dead"},{"key":"ref8","author":"andrey","year":"2017","journal-title":"Building a Distributed Network in the Cloud Using Amazon EC2 to Break Passwords"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818015"},{"key":"ref9","first-page":"301","article-title":"Is bigger better? comparing user-generated passwords on 3x3 vs. 4x4 grid sizes for android’s pattern unlock","author":"aviv","year":"0","journal-title":"Proc ACSAC 2015"},{"key":"ref4","author":"adowsett","year":"2016","journal-title":"What has been leaked impacts of the big data breaches"},{"key":"ref3","year":"2016","journal-title":"The Password is Dead Long Live the Password!"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2018.2824323"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243839"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.50"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516671"},{"key":"ref34","author":"holmes","year":"2021","journal-title":"533 million Facebook users’ phone numbers and personal data have been leaked online"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3178876.3186101"},{"key":"ref36","first-page":"483","article-title":"Sound-proof: usable two-factor authentication based on ambient sound","author":"karapanos","year":"0","journal-title":"Proc USENIX SEC 2015"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.14722\/usec.2017.23043"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.101689"},{"key":"ref33","year":"2016","journal-title":"Resetting passwords to keep your files safe"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3174144"},{"key":"ref2","year":"2017","journal-title":"Yahoo raises breach estimate to full 3 billion accounts by far biggest known"},{"key":"ref1","year":"2018","journal-title":"All Data Breach Sources"},{"key":"ref39","first-page":"1405","article-title":"Simple password-hardened encryption services","author":"lai","year":"0","journal-title":"Proc USENIX SEC 2018"},{"key":"ref38","year":"2018","journal-title":"Researcher Finds Credentials for 92 Million Users of DNA Testing Firm MyHeritage"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2015.2406707"},{"key":"ref23","author":"cimpanu","year":"2020","journal-title":"26 million LiveJournal credentials leaked online sold on the dark web"},{"key":"ref26","first-page":"221","article-title":"Forgetting of passwords: Ecological theory and data","author":"gao","year":"0","journal-title":"Proc USENIX SEC 2018"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(17)30005-2"},{"key":"ref20","article-title":"You are what you like! information leakage through users’ interests","author":"chaabane","year":"0","journal-title":"Proc NDSS 2012"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.53"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2799979.2799992"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243769"},{"key":"ref27","author":"goldman","year":"2013","journal-title":"Chinese Hackers Publish 20 Million Hotel Reservations"},{"key":"ref29","author":"goodin","year":"2013","journal-title":"Anatomy of a hack How crackers ransack passwords like “qeadzcwrsfxv1331”"}],"event":{"name":"2022 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2022,5,22]]},"end":{"date-parts":[[2022,5,26]]}},"container-title":["2022 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9833550\/9833558\/09833598.pdf?arnumber=9833598","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,8]],"date-time":"2023-11-08T23:29:56Z","timestamp":1699486196000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9833598\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5]]},"references-count":59,"URL":"https:\/\/doi.org\/10.1109\/sp46214.2022.9833598","relation":{},"subject":[],"published":{"date-parts":[[2022,5]]}}}