{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T03:19:18Z","timestamp":1778901558205,"version":"3.51.4"},"reference-count":67,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2022YFB3102902"],"award-info":[{"award-number":["2022YFB3102902"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,5]]},"DOI":"10.1109\/tdsc.2026.3658333","type":"journal-article","created":{"date-parts":[[2026,1,27]],"date-time":"2026-01-27T06:08:34Z","timestamp":1769494114000},"page":"5687-5704","source":"Crossref","is-referenced-by-count":0,"title":["Password Guessing Based on Hidden Weak Password Analysis"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-8762-8279","authenticated-orcid":false,"given":"Chenyang","family":"Wang","sequence":"first","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6654-7610","authenticated-orcid":false,"given":"Min","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0237-0702","authenticated-orcid":false,"given":"Zhijie","family":"Xie","sequence":"additional","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3308-9123","authenticated-orcid":false,"given":"Shasha","family":"Guo","sequence":"additional","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8502-9907","authenticated-orcid":false,"given":"Yuliang","family":"Lu","sequence":"additional","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4533-2706","authenticated-orcid":false,"given":"Fan","family":"Shi","sequence":"additional","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2923-7963","authenticated-orcid":false,"given":"Yi","family":"Shen","sequence":"additional","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-8102-5239","authenticated-orcid":false,"given":"Pengfei","family":"Xue","sequence":"additional","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2605087"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2020.102687"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2006.873653"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2021.103162"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2699390"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.44"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23240"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2011.150"},{"key":"ref9","first-page":"2165","article-title":"That was then, this is now: A security evaluation of password generation, storage, and autofill in browser-based password managers","volume-title":"Proc. 29th USENIX Conf. Secur. Symp.","author":"Oesch","year":"2020"},{"key":"ref10","article-title":"Hashcat","author":"Steube","year":"2018"},{"key":"ref11","article-title":"John the ripper password cracker","author":"Peslyak","year":"2021"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.8"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102168"},{"key":"ref14","first-page":"175","article-title":"Fast, lean, and accurate: Modeling password guessability using neural networks","volume-title":"Proc. 25th USENIX Secur. Symp.","author":"Melicher","year":"2016"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-21568-2_11"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23103"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3448608"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2428671"},{"key":"ref19","first-page":"157","article-title":"zxcvbn: $\\lbrace${Low-Budget$\\rbrace$} password strength estimation","volume-title":"Proc. 25th USENIX Secur. Symp.","author":"Wheeler","year":"2016"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-86890-1_9"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2016.7524583"},{"key":"ref22","first-page":"1537","article-title":"Birthday, name and bifacial-security: Understanding passwords of Chinese web users","volume-title":"Proc. 28th USENIX Secur. Symp.","author":"Wang","year":"2019"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/DSC.2018.00094"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3485832.3488025"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3050066"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CoDIT.2018.8394966"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-17146-8_16"},{"key":"ref28","first-page":"821","article-title":"Reducing bias in modeling real-world password strength via deep learning and dynamic dictionaries","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Pasquini","year":"2021"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP39728.2021.9414886"},{"issue":"2","key":"ref30","first-page":"821","article-title":"Password cracking based on learned patterns from disclosed passwords","volume":"9","author":"Chou","year":"2013","journal-title":"Int. J. Innov. Comput., Inf. Control"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-15618-7_10"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978339"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.3390\/app11104607"},{"key":"ref34","article-title":"A critical review of recurrent neural networks for sequence learning","volume":"4","author":"Lipton","year":"2015","journal-title":"Statistics"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3290480.3290501"},{"key":"ref36","first-page":"3104","article-title":"Sequence to sequence learning with neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"27","author":"Sutskever","year":"2014"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2019.2940877"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00056"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CSE-EUC.2017.155"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-13-5913-2_6"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/HPCC\/SmartCity\/DSS.2019.00377"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/s12083-020-00893-7"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN49398.2020.9209690"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00016"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.2765202"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/1856\/1\/012012"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-96791-8_12"},{"key":"ref48","first-page":"1001","article-title":"Improving real-world password guessing attacks via bi-directional transformers","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Xu","year":"2023"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1810.04805"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-51482-1_9"},{"key":"ref51","article-title":"Improving language understanding by generative pre-training","author":"Radford","year":"2018"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3174144"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-22137-8_3"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1057\/ivs.2010.12"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.3127\/ajis.v14i1.9"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32946-3_3"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/2379690.2379702"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-97532-6_7"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-68783-4_16"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.23919\/FRUCT61870.2024.10516360"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2007.1078"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2020.2996543"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2721359"},{"issue":"8","key":"ref64","article-title":"Language models are unsupervised multitask learners","volume":"1","author":"Radford","year":"2019","journal-title":"OpenAI blog"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-021-00560-9"},{"key":"ref66","first-page":"1519","article-title":"Password guessing based on recurrent neural networks and generative adversarial networks","volume":"44","author":"Wang","year":"2021","journal-title":"Chin. J. Comput"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484743"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11517592\/11364297.pdf?arnumber=11364297","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T03:06:00Z","timestamp":1778900760000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11364297\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5]]},"references-count":67,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2026.3658333","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,5]]}}}