{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,19]],"date-time":"2026-09-19T11:38:16Z","timestamp":1789817896268,"version":"4.0.1"},"publisher-location":"New York, NY, USA","reference-count":61,"publisher":"ACM","license":[{"start":{"date-parts":[[2012,7,11]],"date-time":"2012-07-11T00:00:00Z","timestamp":1341964800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000082","name":"Division of Graduate Education","doi-asserted-by":"publisher","award":["DGE-0903659CNS-1116776CCF-0424422"],"award-info":[{"award-number":["DGE-0903659CNS-1116776CCF-0424422"]}],"id":[{"id":"10.13039\/100000082","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000144","name":"Division of Computer and Network Systems","doi-asserted-by":"publisher","award":["DGE-0903659CNS-1116776CCF-0424422"],"award-info":[{"award-number":["DGE-0903659CNS-1116776CCF-0424422"]}],"id":[{"id":"10.13039\/100000144","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000183","name":"Army Research Office","doi-asserted-by":"publisher","award":["DAAD19-02-1-0389W911NF-09-1-0273"],"award-info":[{"award-number":["DAAD19-02-1-0389W911NF-09-1-0273"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000143","name":"Division of Computing and Communication Foundations","doi-asserted-by":"publisher","award":["DGE-0903659CNS-1116776CCF-0424422"],"award-info":[{"award-number":["DGE-0903659CNS-1116776CCF-0424422"]}],"id":[{"id":"10.13039\/100000143","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2012,7,11]]},"DOI":"10.1145\/2335356.2335366","type":"proceedings-article","created":{"date-parts":[[2012,7,19]],"date-time":"2012-07-19T14:38:27Z","timestamp":1342708707000},"page":"1-20","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":69,"title":["Correct horse battery staple"],"prefix":"10.1145","author":[{"given":"Richard","family":"Shay","sequence":"first","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick Gage","family":"Kelley","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Saranga","family":"Komanduri","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michelle L.","family":"Mazurek","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Blase","family":"Ur","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Timothy","family":"Vidas","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lujo","family":"Bauer","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nicolas","family":"Christin","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lorrie Faith","family":"Cranor","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2012,7,11]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.5555\/646684.702633"},{"key":"e_1_3_2_1_2_1","volume-title":"workshops). In Proc. CHI Workshop on Crowdsourcing and Human Computation","author":"Adar E.","year":"2011","unstructured":"E. Adar . Why I hate Mechanical Turk research (and workshops). In Proc. CHI Workshop on Crowdsourcing and Human Computation , 2011 . E. Adar. Why I hate Mechanical Turk research (and workshops). In Proc. CHI Workshop on Crowdsourcing and Human Computation, 2011."},{"key":"e_1_3_2_1_3_1","first-page":"117","volume-title":"Proc. ACSW","author":"Bard G. V.","year":"2007","unstructured":"G. V. Bard . Spelling-error tolerant, order-independent pass-phrases via the Damerau-Levenshtein string-edit distance metric . In Proc. ACSW , pages 117 -- 124 , 2007 . G. V. Bard. Spelling-error tolerant, order-independent pass-phrases via the Damerau-Levenshtein string-edit distance metric. In Proc. ACSW, pages 117--124, 2007."},{"key":"e_1_3_2_1_4_1","volume-title":"Political Analysis","author":"Berinsky A. J.","year":"2011","unstructured":"A. J. Berinsky , G. A. Huber , and G. S. Len . Using Mechanical Turk as a subject recruitment tool for experimental research . Political Analysis , 2011 . A. J. Berinsky, G. A. Huber, and G. S. Len. Using Mechanical Turk as a subject recruitment tool for experimental research. Political Analysis, 2011."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(95)00003-Q"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.49"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.44"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-34638-5_1"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1177\/1745691610393980"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.5555\/2206278"},{"key":"e_1_3_2_1_11_1","volume-title":"Proc. NDSS","author":"Castelluccia C.","year":"2012","unstructured":"C. Castelluccia , M. Durmuth , and D. Perito . Adaptive password-strength meters from Markov models . In Proc. NDSS , 2012 . C. Castelluccia, M. Durmuth, and D. Perito. Adaptive password-strength meters from Markov models. In Proc. NDSS, 2012."},{"key":"e_1_3_2_1_12_1","unstructured":"D. Craddock. Hey! My friend's account was hacked! http:\/\/windowsteamblog.com\/windows_live\/b\/windowslive\/archive\/2011\/07\/14\/hey-my-friend-s-account-was-hacked.aspx 2011.  D. Craddock. Hey! My friend's account was hacked! http:\/\/windowsteamblog.com\/windows_live\/b\/windowslive\/archive\/2011\/07\/14\/hey-my-friend-s-account-was-hacked.aspx 2011."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.v38:14"},{"key":"e_1_3_2_1_14_1","volume-title":"The corpus of contemporary American English: 425 million words","author":"Davies M.","year":"1990","unstructured":"M. Davies . The corpus of contemporary American English: 425 million words , 1990 --present. Available online at http:\/\/corpus.byu.edu\/coca\/, 2008. M. Davies. The corpus of contemporary American English: 425 million words, 1990--present. Available online at http:\/\/corpus.byu.edu\/coca\/, 2008."},{"key":"e_1_3_2_1_15_1","volume-title":"Proc. INFOCOM","author":"Dell'Amico M.","year":"2010","unstructured":"M. Dell'Amico , P. Michiardi , and Y. Roudier . Password strength: An empirical analysis . In Proc. INFOCOM , 2010 . M. Dell'Amico, P. Michiardi, and Y. Roudier. Password strength: An empirical analysis. In Proc. INFOCOM, 2010."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1753326.1753688"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242661"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1408664.1408666"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.5555\/2360743.2360824"},{"key":"e_1_3_2_1_21_1","volume-title":"Experimental Economics","author":"Horton J. J.","year":"2010","unstructured":"J. J. Horton , D. G. Rand , and R. J. Zeckhauser . The online laboratory: Conducting experiments in a real labor market . Experimental Economics , 2010 . J. J. Horton, D. G. Rand, and R. J. Zeckhauser. The online laboratory: Conducting experiments in a real labor market. Experimental Economics, 2010."},{"key":"e_1_3_2_1_22_1","volume-title":"Identity assurance profiles bronze and silver v1.1","author":"InCommon Federation","year":"2011","unstructured":"InCommon Federation . Identity assurance profiles bronze and silver v1.1 , 2011 . InCommon Federation. Identity assurance profiles bronze and silver v1.1, 2011."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1753326.1753384"},{"key":"e_1_3_2_1_24_1","volume-title":"Technical Report CeDER-10-01","author":"Ipeirotis P. G.","year":"2010","unstructured":"P. G. Ipeirotis . Demographics of Mechanical Turk . Technical Report CeDER-10-01 , New York University , 2010 . P. G. Ipeirotis. Demographics of Mechanical Turk. Technical Report CeDER-10-01, New York University, 2010."},{"key":"e_1_3_2_1_25_1","volume-title":"Proc. IEEE MoST","author":"Jakobsson M.","year":"2012","unstructured":"M. Jakobsson and R. Akavipat . Rethinking passwords to adapt to constrained keyboards . Proc. IEEE MoST , 2012 . M. Jakobsson and R. Akavipat. Rethinking passwords to adapt to constrained keyboards. Proc. IEEE MoST, 2012."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2005.28"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00184"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijhcs.2006.08.005"},{"key":"e_1_3_2_1_29_1","volume-title":"The impact of length and mathematical operators on the usability and security of system-assigned one-time PINs","author":"Kelley P. G.","year":"2012","unstructured":"P. G. Kelley , S. Komanduri , M. L. Mazurek , R. Shay , T. Vidas , L. Bauer , N. Christin , and L. F. Cranor . The impact of length and mathematical operators on the usability and security of system-assigned one-time PINs , 2012 . Under review. P. G. Kelley, S. Komanduri, M. L. Mazurek, R. Shay, T. Vidas, L. Bauer, N. Christin, and L. F. Cranor. The impact of length and mathematical operators on the usability and security of system-assigned one-time PINs, 2012. Under review."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.38"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1357054.1357127"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1978942.1979321"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1143120.1143129"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1058406.1058408"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.5555\/1332474.1333167"},{"key":"e_1_3_2_1_36_1","volume-title":"Proc. IEEE EIT","author":"Leonhard M.","year":"2007","unstructured":"M. Leonhard and V. Venkatakrishnan . A new attack on random pronounceable password generators . In Proc. IEEE EIT , 2007 . M. Leonhard and V. Venkatakrishnan. A new attack on random pronounceable password generators. In Proc. IEEE EIT, 2007."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/EIT.2007.4374533"},{"key":"e_1_3_2_1_38_1","volume-title":"Echo back in implementation of passphrase authentication","author":"Matsuura K.","year":"2001","unstructured":"K. Matsuura . Echo back in implementation of passphrase authentication . 2001 . K. Matsuura. Echo back in implementation of passphrase authentication. 2001."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1007\/11880561_16"},{"key":"e_1_3_2_1_40_1","volume-title":"Password strength. https:\/\/www.xkcd.com\/936\/","author":"Munroe R.","year":"2012","unstructured":"R. Munroe . xkcd : Password strength. https:\/\/www.xkcd.com\/936\/ , 2012 . R. Munroe. xkcd: Password strength. https:\/\/www.xkcd.com\/936\/, 2012."},{"key":"e_1_3_2_1_41_1","volume-title":"Automated password generator (APG). Technical report","author":"NIST.","year":"1993","unstructured":"NIST. Federal information processing standards publication 181 : Automated password generator (APG). Technical report , 1993 . NIST. Federal information processing standards publication 181: Automated password generator (APG). Technical report, 1993."},{"key":"e_1_3_2_1_42_1","volume-title":"A password extension for improved human factors. Computers and Security, 1(1)","author":"Porter S. N.","year":"1982","unstructured":"S. N. Porter . A password extension for improved human factors. Computers and Security, 1(1) , 1982 . S. N. Porter. A password extension for improved human factors. Computers and Security, 1(1), 1982."},{"issue":"2","key":"e_1_3_2_1_43_1","first-page":"163","article-title":"Improving computer security for authentication of users: Influence of proactive password restrictions. Behavior Res. Methods, Instruments, &","volume":"34","author":"Proctor R. W.","year":"2002","unstructured":"R. W. Proctor , M.-C. Lien , K.-P. L. Vu , E. E. Schultz , and G. Salvendy . Improving computer security for authentication of users: Influence of proactive password restrictions. Behavior Res. Methods, Instruments, & Computers , 34 ( 2 ): 163 -- 169 , 2002 . R. W. Proctor, M.-C. Lien, K.-P. L. Vu, E. E. Schultz, and G. Salvendy. Improving computer security for authentication of users: Influence of proactive password restrictions. Behavior Res. Methods, Instruments, & Computers, 34(2):163--169, 2002.","journal-title":"Computers"},{"key":"e_1_3_2_1_44_1","volume-title":"http:\/\/world.std.com\/~reinhold\/diceware.html","author":"Reinhold A. G.","year":"1995","unstructured":"A. G. Reinhold . Diceware. http:\/\/world.std.com\/~reinhold\/diceware.html , 1995 --2011. A. G. Reinhold. Diceware. http:\/\/world.std.com\/~reinhold\/diceware.html, 1995--2011."},{"issue":"1","key":"e_1_3_2_1_45_1","article-title":"What users know and what they actually do","volume":"8","author":"Riley S.","year":"2006","unstructured":"S. Riley . Password security : What users know and what they actually do . Usability News , 8 ( 1 ), Feb. 2006 . S. Riley. Password security: What users know and what they actually do. Usability News, 8(1), Feb. 2006.","journal-title":"Usability News"},{"key":"e_1_3_2_1_46_1","volume-title":"Proc. HotSec","author":"Schechter S.","year":"2010","unstructured":"S. Schechter , C. Herley , and M. Mitzenmacher . Popularity is everything: a new approach to protecting passwords from statistical-guessing attacks . In Proc. HotSec , 2010 . S. Schechter, C. Herley, and M. Mitzenmacher. Popularity is everything: a new approach to protecting passwords from statistical-guessing attacks. In Proc. HotSec, 2010."},{"key":"e_1_3_2_1_47_1","unstructured":"B. Schneier. Schneier on security blog. http:\/\/www.schneier.com\/blog\/archives\/2005\/06\/write_down_your.html 2005.  B. Schneier. Schneier on security blog. http:\/\/www.schneier.com\/blog\/archives\/2005\/06\/write_down_your.html 2005."},{"key":"e_1_3_2_1_48_1","volume-title":"Defending privacy at the U. S. border: A guide for travelers carrying digital devices","author":"Schoen S.","year":"2011","unstructured":"S. Schoen , M. Hofmann , and R. Reynolds . Defending privacy at the U. S. border: A guide for travelers carrying digital devices . Electronic Frontier Foundation , 2011 . S. Schoen, M. Hofmann, and R. Reynolds. Defending privacy at the U. S. border: A guide for travelers carrying digital devices. Electronic Frontier Foundation, 2011."},{"key":"e_1_3_2_1_49_1","unstructured":"A. Schumacher. Security @ CU---Making secure passwords 2011.  A. Schumacher. Security @ CU---Making secure passwords 2011."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1948.tb01338.x"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/1837110.1837113"},{"key":"e_1_3_2_1_52_1","volume-title":"SOUPS Poster","author":"Sotirakopoulos A.","year":"2011","unstructured":"A. Sotirakopoulos , I. Muslukov , K. Beznosov , C. Herley , and S. Egelman . Motivating users to choose better passwords through peer pressure . SOUPS Poster , 2011 . A. Sotirakopoulos, I. Muslukov, K. Beznosov, C. Herley, and S. Egelman. Motivating users to choose better passwords through peer pressure. SOUPS Poster, 2011."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(94)90064-7"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2004.07.001"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/1978942.1979277"},{"key":"e_1_3_2_1_56_1","volume-title":"Proc. USENIX Security","author":"Ur B.","year":"2012","unstructured":"B. Ur , P. G. Kelley , S. Komanduri , J. Lee , M. Maass , M. Mazurek , T. Passaro , R. Shay , T. Vidas , L. Bauer , N. Christin , and L. F. Cranor . How does your password measure up? The effect of strength meters on password creation . In Proc. USENIX Security , 2012 . To appear. B. Ur, P. G. Kelley, S. Komanduri, J. Lee, M. Maass, M. Mazurek, T. Passaro, R. Shay, T. Vidas, L. Bauer, N. Christin, and L. F. Cranor. How does your password measure up? The effect of strength meters on password creation. In Proc. USENIX Security, 2012. To appear."},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866327"},{"key":"e_1_3_2_1_58_1","volume-title":"The protect IU blog---xkcd agrees: Use a passphrase","author":"Wilson S. Z.","year":"2011","unstructured":"S. Z. Wilson . The protect IU blog---xkcd agrees: Use a passphrase , 2011 . S. Z. Wilson. The protect IU blog---xkcd agrees: Use a passphrase, 2011."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.81"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866328"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1093\/comjnl\/36.3.227"},{"issue":"4","key":"e_1_3_2_1_62_1","article-title":"Password security: an empirical study","volume":"15","author":"Zviran M.","year":"1999","unstructured":"M. Zviran and W. J. Haga . Password security: an empirical study . J. Mgt. Info. Sys. , 15 ( 4 ), 1999 . M. Zviran and W. J. Haga. Password security: an empirical study. J. Mgt. Info. Sys., 15(4), 1999.","journal-title":"J. Mgt. Info. Sys."}],"event":{"name":"SOUPS '12: Symposium On Usable Privacy and Security","location":"Washington, D.C.","acronym":"SOUPS '12","sponsor":["Carnegie Mellon University Carnegie Mellon University","SIGCHI ACM Special Interest Group on Computer-Human Interaction"]},"container-title":["Proceedings of the Eighth Symposium on Usable Privacy and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2335356.2335366","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2335356.2335366","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T09:48:10Z","timestamp":1750240090000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2335356.2335366"}},"subtitle":["exploring the usability of system-assigned passphrases"],"short-title":[],"issued":{"date-parts":[[2012,7,11]]},"references-count":61,"alternative-id":["10.1145\/2335356.2335366","10.1145\/2335356"],"URL":"https:\/\/doi.org\/10.1145\/2335356.2335366","relation":{},"subject":[],"published":{"date-parts":[[2012,7,11]]},"assertion":[{"value":"2012-07-11","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}