{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T06:59:29Z","timestamp":1782975569741,"version":"3.54.5"},"reference-count":73,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00081","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"2957-2976","source":"Crossref","is-referenced-by-count":0,"title":["MAYA: Addressing Inconsistencies in Generative Password Guessing Through a Unified Benchmark"],"prefix":"10.1109","author":[{"given":"William","family":"Corrias","sequence":"first","affiliation":[{"name":"Sapienza University of Rome,Rome,Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fabio","family":"De Gaspari","sequence":"additional","affiliation":[{"name":"Sapienza University of Rome,Rome,Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dorjan","family":"Hitaj","sequence":"additional","affiliation":[{"name":"Sapienza University of Rome,Rome,Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Luigi V.","family":"Mancini","sequence":"additional","affiliation":[{"name":"Sapienza University of Rome,Rome,Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Mail.ru","year":"2014","journal-title":"CyberInsurance"},{"key":"ref2","article-title":"2012 linkedin breach had 117 million emails and passwords stolen, not 6.5 m","year":"2016","journal-title":"Trend Micro"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3491102.3517531"},{"key":"ref4","first-page":"290","article-title":"How faithful is your synthetic data? sample-level metrics for evaluating and auditing generative models","volume-title":"International Conference on Machine Learning. PMLR","author":"Alaa","year":"2022"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.03.014"},{"key":"ref6","first-page":"7294","article-title":"Manifold topology divergence: a framework for comparing data manifolds.","volume":"34","author":"Barannikov","year":"2021","journal-title":"Advances in neural information processing systems"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/290163.290164"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3538969.3539000"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(95)00003-Q"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.49"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.44"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.cviu.2021.103329"},{"key":"ref13","article-title":"13 million passwords appear to have leaked from this free web host - updated","author":"Brewster","year":"2015","journal-title":"Forbes"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP39728.2021.9414886"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23357"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2010.5461951"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453092"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-15618-7_10"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(11)70123-3"},{"key":"ref20","article-title":"Libero.it password leak - an analysis in-depth","author":"Gagliardi","year":"2016","journal-title":"Scip AG"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ITAIC54216.2022.9836812"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243767"},{"key":"ref23","article-title":"Improved training of wasserstein gans","volume":"30","author":"Gulrajani","year":"2017","journal-title":"Advances in neural information processing systems"},{"key":"ref24","author":"Gulrajani","year":"2020","journal-title":"Towards gan benchmarks which require generalization"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.3390\/app11104607"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2490620"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3003696"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9746731"},{"key":"ref31","author":"Henighan","year":"2020","journal-title":"Scaling laws for autoregressive generative modeling"},{"key":"ref32","article-title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium","volume":"30","author":"Heusel","year":"2017","journal-title":"Advances in neural information processing systems"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-21568-2_11"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.52202\/075280-1285"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CARS61786.2024.10778857"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516671"},{"key":"ref37","author":"Kaplan","year":"2020","journal-title":"Scaling laws for neural language models"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.38"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/1978942.1979321"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/1940976.1940994"},{"key":"ref41","year":"2025","journal-title":"pcfg-cracker"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2016.7524583"},{"key":"ref43","first-page":"559","article-title":"A \\{Large-Scale\\} empirical analysis of chinese web passwords","volume-title":"23rd USENIX Security Symposium (USENIX Security 14)","author":"Li","year":"2014"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179365"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00047"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.50"},{"key":"ref47","first-page":"13","article-title":"A second look at password composition policies in the wild: Comparing samples from 2010 and 2016","volume-title":"Thirteenth Symposium on Usable Privacy and Security (SOUPS 2017)","author":"Mayer","year":"2017"},{"key":"ref48","first-page":"175","article-title":"Fast, lean, and accurate: Modeling password guessability using neural networks","volume-title":"25th USENIX Security Symposium (USENIX Security 16)","author":"Melicher","year":"2016"},{"key":"ref49","article-title":"5 million gmail passwords leaked","author":"Pagliery","year":"2014","journal-title":"CNN"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/DSN53405.2022.00035"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00056"},{"issue":"57","key":"ref52","first-page":"1","article-title":"Normalizing flows for probabilistic modeling and inference","volume":"22","author":"Papamakarios","year":"2021","journal-title":"Journal of Machine Learning Research"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00016"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133973"},{"key":"ref55","author":"Radford","year":"2015","journal-title":"Unsupervised representation learning with deep convolutional generative adversarial networks"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-51482-1_9"},{"key":"ref58","article-title":"Improved techniques for training gans","volume":"29","author":"Salimans","year":"2016","journal-title":"Advances in neural information processing systems"},{"key":"ref59","article-title":"32.6 m passwords may have been compromised in rockyou hack","author":"Schofield","year":"2009","journal-title":"The Guardian"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/2891411"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/1837110.1837113"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3183341"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/DSN58291.2024.00049"},{"key":"ref64","article-title":"What happened in the taobao data breach?","author":"Team","year":"2024","journal-title":"Twingate"},{"key":"ref65","author":"Tsitsulin","year":"2020","journal-title":"The shape of data: Intrinsic distance for data distributions"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2721359"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45744-4_6"},{"key":"ref68","first-page":"983","article-title":"\\{Pass2Edit\\}: A \\{Multi-Step\\} generative model for guessing edited passwords","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Wang","year":"2023"},{"key":"ref69","first-page":"965","article-title":"Password guessing using random forest","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Wang","year":"2023"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.8"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9746203"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484743"},{"key":"ref73","first-page":"1001","article-title":"Improving real-world password guessing attacks via bi-directional transformers","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Xu","year":"2023"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102587"},{"key":"ref75","article-title":"Hackers finally post stolen ashley madison data","author":"Zetter","year":"2015","journal-title":"Wired"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573436.pdf?arnumber=11573436","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:27:13Z","timestamp":1782970033000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573436\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":73,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00081","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}