IMPROVING SECURITY AND ACHIEVING FLATNESS TO THE USER-PASSWORD BY USING HONEYWORDS

Information Technology

Authentication and Authorization of user is important to get access into any secured system for which username and password is necessary. Disclosure of password files is a serious security Issue, for which Juels and Rivest proposed honeywords (decoy passwords) to detect attacks against Hash password databases. To protect hash password databases from third party, we implement Honeywords which converts a valid password into a new hash passwords. New passwords is the combination of existing password called honeywords, which are nothing but the Fake passwords. If proper honeywords are chosen, a cyber-attacker who steals a file of hashed passwords would be confused, whether it is a real password or honeyword for user Account. Login with honeywords will trigger an Alarm, which will notify the administrator about a password file Infraction. To identify or detect occurrence of password database infraction honeypot concept is used. So we implement an easy and efficient solution which will protect and detect exposure events of passwords file.

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.