Performance evaluation of Cuckoo filters as an enhancement tool for password cracking

Cyberthreats continue their expansion, becoming more and more complex and varied. However, credentials and passwords are still a critical point in security. Password cracking can be a powerful tool to fight against cyber criminals if used by cybersecurity professionals and red teams, for instance, t...

Full description

Saved in:
Bibliographic Details
Published inCybersecurity (Singapore) Vol. 6; no. 1; pp. 57 - 11
Main Authors Cano, Maria-Dolores, Villafranca, Antonio, Tasic, Igor
Format Journal Article
LanguageEnglish
Published Singapore Springer Nature Singapore 01.12.2023
Springer Nature B.V
SpringerOpen
Subjects
Algorithms
Authentication
Computer Applications
Computer Science
Cracking (chemical engineering)
Critical point
Cuckoo filters
Cybercrime
Cybersecurity
Data structures
Password cracking
Passwords
Performance evaluation
Password cracking
Cybersecurity
Cuckoo filters
Authentication
Passwords
Online AccessGet full text

Cover

More Information
Summary:Cyberthreats continue their expansion, becoming more and more complex and varied. However, credentials and passwords are still a critical point in security. Password cracking can be a powerful tool to fight against cyber criminals if used by cybersecurity professionals and red teams, for instance, to evaluate compliance with security policies or in forensic investigations. For particular systems, one crucial step in the password-cracking process is comparison or matchmaking between password-guess hashes and real hashes. We hypothesize that using newer data structures such as Cuckoo filters could optimize this process. Experimental results show that, with a proper configuration, this data structure is two orders of magnitude more efficient in terms of size/usage compared to other data structures while keeping a comparable performance in terms of time.
ISSN:2523-3246
2523-3246
DOI:10.1186/s42400-023-00193-6