Performance evaluation of Cuckoo filters as an enhancement tool for password cracking  

作　　者：Maria-Dolores Cano Antonio Vilfranca Igor Tasic 

机构地区：[1]Department of Information and Communication Technologies,Universidad Politecnica de Cartagena,30202 Cartagena,Spain

出　　处：《Cybersecurity》2024年第4期62-72,共11页网络空间安全科学与技术（英文）

基　　金：supported by the research Grant PID2020-116329 GB-C22 funded by MCIN/AEI/10.13039/501100011033.

摘　　要：Cyberthreats continue their expansion,becoming more and more complex and varied.However,credentials and passwords are still a critical point in security.Password cracking can be a powerful tool to fight against cyber criminals if used by cybersecurity professionals and red teams,for instance,to evaluate compliance with security policies or in forensic investigations.For particular systems,one crucial step in the password-cracking process is comparison or matchmaking between password-guess hashes and real hashes.We hypothesize that using newer data structures such as Cuckoo filters could optimize this process.Experimental results show that,with a proper configuration,this data structure is two orders of magnitude more efficient in terms of size/usage compared to other data structures while keeping a comparable performance in terms of time.

关 键 词：Authentication PASSWORDS Password cracking CYBERSECURITY Cuckoo filters 

分 类 号：TN713[电子电信—电路与系统]