Security Enhancement by Achieving Flatness in Honeywords from existing user passwords

Computer Engineering

Every year new approach against cyber security threat are introduced. But simultaneously the adversary also create new techniques those overcome these efforts. So considering for security and data protection as a priority new technique are needed. So, there is one of the important security issues is with disclosure of password file. To overcome this issue we introduce honeywords (fake passwords) to detect attacks against hashed password databases. For each user account actual password is stored with honeywords. Adversary who steals a file of hashed passwords cannot be sure if it is the actual password or a honeyword for any account. If adversary enters the honeyword for login then it will trigger an alarm notifying the administrator that password file breach. In our system, if the number of attempts exceeds the count of three or entered password other than honeywords then the access will be issued but the files available will be decoy files. Also we suggest an alternative approach to provide realistic honeywords a perfectly flat honeywords generation approach and also to reduce storage cost of the honeywords scheme.

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.