{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,19]],"date-time":"2026-09-19T11:38:53Z","timestamp":1789817933157,"version":"4.0.1"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,10,4]],"date-time":"2010-10-04T00:00:00Z","timestamp":1286150400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,10,4]]},"DOI":"10.1145\/1866307.1866328","type":"proceedings-article","created":{"date-parts":[[2010,10,5]],"date-time":"2010-10-05T14:38:23Z","timestamp":1286289503000},"page":"176-186","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":114,"title":["The security of modern password expiration"],"prefix":"10.1145","author":[{"given":"Yinqian","family":"Zhang","sequence":"first","affiliation":[{"name":"University of North Carolina at Chapel Hill, Chapel Hill, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fabian","family":"Monrose","sequence":"additional","affiliation":[{"name":"University of North Carolina at Chapel Hill, Chapel Hill, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michael K.","family":"Reiter","sequence":"additional","affiliation":[{"name":"University of North Carolina at Chapel Hill, Chapel Hill, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2010,10,4]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/322796.322806"},{"key":"e_1_3_2_1_2_1","volume-title":"April","author":"Alexander S.","year":"2006","unstructured":"}} S. Alexander , Jr . In defense of password expiration. Post to LOPSA blog , April 2006 . http:\/\/lopsa.org\/node\/295 as of March 28, 2010. }}S. Alexander, Jr. In defense of password expiration. Post to LOPSA blog, April 2006. http:\/\/lopsa.org\/node\/295 as of March 28, 2010."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2006.28"},{"key":"e_1_3_2_1_4_1","volume-title":"In Proc. 4th Workshop on Computer Security Incident Handling","author":"Bishop M.","year":"1992","unstructured":"}} M. Bishop . Proactive password checking . In In Proc. 4th Workshop on Computer Security Incident Handling , 1992 . }}M. Bishop. Proactive password checking. In In Proc. 4th Workshop on Computer Security Incident Handling, 1992."},{"key":"e_1_3_2_1_5_1","volume-title":"Department of Defense password management guideline. CSC-STD-002--85","author":"Brand S. L.","year":"1985","unstructured":"}} S. L. Brand and J. Makey . Department of Defense password management guideline. CSC-STD-002--85 , Department of Defense Computer Security Center , April 1985 . }}S. L. Brand and J. Makey. Department of Defense password management guideline. CSC-STD-002--85, Department of Defense Computer Security Center, April 1985."},{"key":"e_1_3_2_1_6_1","volume-title":"NIST special publication 800--63, version 1.0.1","author":"Burr W. E.","year":"2004","unstructured":"}} W. E. Burr , D. F. Dodson , W. T. Polk , P. J. Bond , and A. L. Bement . NIST special publication 800--63, version 1.0.1 , 2004 . }}W. E. Burr, D. F. Dodson, W. T. Polk, P. J. Bond, and A. L. Bement. NIST special publication 800--63, version 1.0.1, 2004."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653722"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1186810.1186812"},{"key":"e_1_3_2_1_9_1","first-page":"103","volume-title":"Second Security Workshop Program","author":"De Alvare A. M.","year":"1990","unstructured":"}} A. M. De Alvare . How crackers crack passwords or what passwords to avoid . In Second Security Workshop Program , pages 103 -- 112 . USENIX, August 1990 . }}A. M. De Alvare. How crackers crack passwords or what passwords to avoid. In Second Security Workshop Program, pages 103--112. USENIX, August 1990."},{"key":"e_1_3_2_1_10_1","first-page":"8","volume-title":"UNIX Security Workshop Proceedings","author":"A.","year":"1988","unstructured":"}} A. M. De Alvare and E. E. Schultz, Jr. A framework for password selection . In UNIX Security Workshop Proceedings , pages 8 -- 9 . USENIX, August 1988 . }}A. M. De Alvare and E. E. Schultz, Jr. A framework for password selection. In UNIX Security Workshop Proceedings, pages 8--9. USENIX, August 1988."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00453-004-1110-5"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242661"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1408664.1408666"},{"key":"e_1_3_2_1_14_1","first-page":"5","volume-title":"Second Security Workshop Program","author":"Klein D. V.","year":"1990","unstructured":"}} D. V. Klein . Foiling the cracker: A survey of, and improvements to, password security . In Second Security Workshop Program , pages 5 -- 14 . USENIX, August 1990 . }}D. V. Klein. Foiling the cracker: A survey of, and improvements to, password security. In Second Security Workshop Program, pages 5--14. USENIX, August 1990."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1143120.1143129"},{"key":"e_1_3_2_1_16_1","first-page":"821","volume-title":"IFIP INTERACT 2003 Conference","author":"Lu B.","year":"2003","unstructured":"}} B. Lu and M. B. Twidale . Managing multiple passwords and multiple logins: MiFA minimal-feedback hints for remote authentication . In IFIP INTERACT 2003 Conference , pages 821 -- 824 , 2003 . }}B. Lu and M. B. Twidale. Managing multiple passwords and multiple logins: MiFA minimal-feedback hints for remote authentication. In IFIP INTERACT 2003 Conference, pages 821--824, 2003."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2008.40"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/359168.359172"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102168"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45146-4_36"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/332051.332057"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1837110.1837113"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(92)90207-8"},{"key":"e_1_3_2_1_24_1","volume-title":"April","author":"Spafford G.","year":"2006","unstructured":"}} G. Spafford . Security myths and passwords. Post to CERIAS blog , April 2006 . http:\/\/www.cerias.purdue.edu\/site\/blog\/post\/password-change-myths\/ as of March 28, 2010. }}G. Spafford. Security myths and passwords. Post to CERIAS blog, April 2006. http:\/\/www.cerias.purdue.edu\/site\/blog\/post\/password-change-myths\/ as of March 28, 2010."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2004.07.001"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.8"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/508171.508194"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2009.9"}],"event":{"name":"CCS '10: 17th ACM Conference on Computer and Communications Security 2010","location":"Chicago Illinois USA","acronym":"CCS '10","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 17th ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866307.1866328","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1866307.1866328","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:09:06Z","timestamp":1750248546000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866307.1866328"}},"subtitle":["an algorithmic framework and empirical analysis"],"short-title":[],"issued":{"date-parts":[[2010,10,4]]},"references-count":28,"alternative-id":["10.1145\/1866307.1866328","10.1145\/1866307"],"URL":"https:\/\/doi.org\/10.1145\/1866307.1866328","relation":{},"subject":[],"published":{"date-parts":[[2010,10,4]]},"assertion":[{"value":"2010-10-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}