Understanding passwords – a taxonomy of password creation strategies

2019 ◽  
Vol 27 (3) ◽  
pp. 453-467 ◽  
Author(s):  
Joakim Kävrestad ◽  
Fredrik Eriksson ◽  
Marcus Nohlberg
Keyword(s):  
Design Methodology ◽  
Computer Users ◽  
Structured Interviews ◽  
Penetration Testing ◽  
Content Type ◽  
The Third ◽  
Abstract Level ◽  
Research And Education ◽  
Insight Into ◽  
Dictionary Attacks

PurposeUsing authentication to secure data and accounts has grown to be a natural part of computing. Even if several authentication methods are in existence, using passwords remains the most common type of authentication. As long and complex passwords are encouraged by research studies and practitioners alike, computer users design passwords using strategies that enable them to remember their passwords. This paper aims to present a taxonomy of those password creation strategies in the form of a model describing various strategies used to create passwords.Design/methodology/approachThe study was conducted in a three-step process beginning with a short survey among forensic experts within the Swedish police. The model was then developed by a series of iterative semi-structured interviews with forensic experts. In the third and final step, the model was validated on 5,000 passwords gathered from 50 different password databases that have leaked to the internet.FindingsThe result of this study is a taxonomy of password creation strategies presented as a model that describes the strategies as properties that a password can hold. Any given password can be classified as holding one or more of the properties outlined in the model.Originality/valueOn an abstract level, this study provides insight into password creation strategies. As such, the model can be used as a tool for research and education. It can also be used by practitioners in, for instance, penetration testing to map the most used password creation strategies in a domain or by forensic experts when designing dictionary attacks.

scholarly journals Student engagement with sustainability: understanding the value–action gap

2014 ◽  
Vol 15 (4) ◽  
pp. 404-417 ◽  
Author(s):  
Gareth Chaplin ◽  
Paul Wyton
Keyword(s):  
Design Methodology ◽  
Strong Association ◽  
Structured Interviews ◽  
Online Questionnaire ◽  
Sustainable Living ◽  
Content Type ◽  
Lack Of Information ◽  
Significant Barrier ◽  
The Uk ◽  
Insight Into

Purpose – The purpose of this paper is to present the findings of research that aimed to determine what university students living in Unite accommodation in the UK understand about the concept of sustainable living. It considers what barriers they perceive to be standing in the way of following sustainable living practices. In particular, the research aimed to explore any value–action gap for the student population with a view to informing future actions to help close any gap. Design/methodology/approach – The study was completed through an online questionnaire survey of students living in halls of residence operated by provider The Unite Group Plc. The survey informed semi-structured interviews and focus groups that explored the issues raised in greater detail. Findings – It was found that students living in Unite properties believed sustainable living to be important, yet levels of understanding were very low and there appeared to be a wide value–action gap. Reasons for this are varied; however, an unexpected theme emerged around the association of effort and importance. There was a very strong association between sustainable living and recycling, which, therefore, saw the lack of adequate recycling facilities as a significant barrier to sustainable living. There were also issues around a lack of information, cost and respondents’ flatmates as further barriers. However, the most significant barrier was the displacement of responsibility for sustainable living to other people or organisations. Originality/value – Gaining an insight into the complexity of attitude and behaviour of students with the sustainability agenda will enable understanding that can be applied to activities that promote sustainability.

Role reflections of police reservists: a study of volunteer reserve officers in Malaysia

2018 ◽  
Vol 41 (6) ◽  
pp. 813-827 ◽  
Author(s):  
Phaik Kin Cheah ◽  
N. Prabha Unnithan ◽  
Suresh Suppiah
Keyword(s):  
Police Officers ◽  
Design Methodology ◽  
Theory Approach ◽  
Structured Interviews ◽  
Content Type ◽  
The Public ◽  
Role Orientations ◽  
Grounded Theory Approach ◽  
Practical Implications ◽  
Insight Into

PurposeThe purpose of this paper is to investigate the work roles of the Royal Malaysia Police Volunteer Reserve officers.Design/methodology/approachA grounded theory approach was utilized for the generation and analysis of the data. Data were collected through interviews, observations and follow-ups. Semi-structured interviews were conducted with 20 male and female volunteer reserve officers and 5 regular police officers aged between 24 and 58 years of mixed socioeconomic backgrounds, ethnicities and ranking in the Royal Malaysia Police force. Two civilian respondents (spouses of the Police Volunteer Reserve officers) were also interviewed for this study for the purpose of theory sampling.FindingsThe data were analyzed qualitatively resulting in a model of Royal Malaysia Police Volunteer Reserve officer roles consisting of four orientations.Research limitations/implicationsStudy outcomes are discussed theoretically and administratively. The four role orientations identified will assist researchers studying police reserve volunteerism.Practical implicationsStudy outcomes allow administrators to utilize and deploy police reservists in consonance with the four role orientations identified.Social implicationsThis study provides insight into how police reservists conceive of and execute their roles as they negotiate them in relation to the regular police officers they work with and the public from which they are drawn.Originality/valueThis is the first study of police volunteerism in Malaysia.

Exploring perceptions of pracademics in an Arab context

2021 ◽  
Vol ahead-of-print (ahead-of-print) ◽  
Author(s):  
Youmen Chaaban ◽  
Abdellatif Sellami ◽  
Rania Sawalhi ◽  
Elkhouly Marwa
Keyword(s):  
Identity Construction ◽  
Narrative Analysis ◽  
Design Methodology ◽  
Social Activity ◽  
Ministry Of Education ◽  
Structured Interviews ◽  
University Supervisors ◽  
Content Type ◽  
Identity Renegotiation ◽  
Insight Into

PurposeThis study explored the perceptions of Arab professionals toward pracademia and the ways they position themselves as professionals in this field.Design/methodology/approachNarrative data were elicited through semi-structured interviews with a total of eighteen pracademics identified for their work in teacher education. Participants included ten professional development (PD) specialists, three university supervisors and five specialists working at the Ministry of Education in Qatar.FindingsNarrative analysis of the interviews revealed variations in their identity renegotiations, with one group experiencing an emerging pracademic identity and the other group “holding on” to their previous practitioner identities. The narratives further provided insight into Arab pracademics relating to three themes: (1) definitions and roles, (2) knowledge and skills and (3) relationships with others, all of which pertain to pracademic identity construction.Originality/valueThe study contributes to understanding the identity renegotiation of pracademics working in multiple contexts in an Arab setting. Several recommendations are offered to support pracademics' identity renegotiation as a social activity.

scholarly journals Practitioner perspectives of multi-agency safeguarding hubs (MASH)

2019 ◽  
Vol 22 (1) ◽  
pp. 9-20
Author(s):  
Sarah Shorrock ◽  
Michelle M. McManus ◽  
Stuart Kirby
Keyword(s):  
Design Methodology ◽  
Best Practice ◽  
Governance Structure ◽  
Structured Interviews ◽  
Content Type ◽  
The North ◽  
Everyday Practices ◽  
Agency Practices ◽  
Practical Implications ◽  
Insight Into

Purpose The challenges of transferring the theoretical requirements of an effective multi-agency partnership into everyday practices are often overlooked, particularly within safeguarding practices. Therefore, the purpose of this paper is to explore practitioner perspectives of working within a multi-agency safeguarding hub (MASH) and those factors that encourage or hinder a multi-agency approach to safeguarding vulnerable individuals. Design/methodology/approach Semi-structured interviews with 23 practitioners from one MASH location in the North of England were conducted, with a thematic analysis being used to analyse findings. Findings The interviews with practitioners illustrated the complexity of establishing a multi-agency approach to safeguarding. It was inferred that whilst information sharing and trust between agencies had improved, the absence of a common governance structure, unified management system, formalisation of practices and procedures and shared pool of resources limited the degree to which MASH could be considered a multi-agency approach to safeguarding. Practical implications Establishing a multi-agency approach to safeguarding is complex and does not occur automatically. Rather, the transition to collaborative practices needs to be planned, with agreed practices and processes implemented from the beginning and reviewed regularly. Originality/value Few studies have investigated the implementation of MASH into safeguarding practices, with this paper providing a unique insight into practitioner opinions regarding the transition to multi-agency practices. Whilst there is a focus on MASH, the challenges to arise from the research may be reflective of other multi-agency partnerships, providing a foundation for best practice to emerge.

French private sector shows huge divergence of attitudes to religious diversity

2019 ◽  
Vol 27 (2) ◽  
pp. 4-5
Keyword(s):  
Private Sector ◽  
Design Methodology ◽  
Common Ground ◽  
Religious Diversity ◽  
Structured Interviews ◽  
Content Type ◽  
Effective Strategies ◽  
The Third ◽  
Points Of Interest ◽  
Separation Strategy

Purpose The purpose of this study is to find out whether French companies in the private sector were willing to make allowances to help religious minorities to integrate and express themselves. They also wanted to analyze if the accommodations caused resentment among other staff. Design/methodology/approach The authors carried out 28 semi-structured interviews with individuals in positions of authority at private sector companies. Findings They found three common strategies. The first was “flexibility within the rules,” meaning managers made allowances for religious practices. The second was the “separation strategy,” insisting on the strong adherence to rules and refusing to make allowances. The third common approach was a “common ground strategy” that found common points of interest between all workers. Originality/value Clashes between managers and religious workers are becoming more common in Europe as religiosity is on the rise. The results help managers to formulate effective strategies to deal with the issues.

scholarly journals Tag analysis as a tool for investigating information behaviour: comparing fan-tagging on Tumblr, Archive of Our Own and Etsy

2021 ◽  
Vol ahead-of-print (ahead-of-print) ◽  
Author(s):  
Ludi Price ◽  
Lyn Robinson
Keyword(s):  
Design Methodology ◽  
Qualitative Data ◽  
Comparative Case Study ◽  
Future Research ◽  
Structured Interviews ◽  
Content Type ◽  
Information Behaviour ◽  
The Third ◽  
Fan Communities

PurposeThis article describes the third part of a three-stage study investigating the information behaviour of fans and fan communities, the first stage of which is described in the study by Price and Robinson (2017).Design/methodology/approachUsing tag analysis as a method, a comparative case study was undertaken to explore three aspects of fan information behaviour: information gatekeeping; classifying and tagging and entrepreneurship and economic activity. The case studies took place on three sites used by fans–Tumblr, Archive of Our Own (AO3) and Etsy. Supplementary semi-structured interviews with site users were used to augment the findings with qualitative data.FindingsThese showed that fans used tags in a variety of ways quite apart from classification purposes. These included tags being used on Tumblr as meta-commentary and a means of dialogue between users, as well as expressors of emotion and affect towards posts. On AO3 in particular, fans had developed a practice called “tag wrangling” to mitigate the inherent “messiness” of tagging. Evidence was also found of a “hybrid market economy” on Etsy fan stores. From the study findings, a taxonomy of fan-related tags was developed.Research limitations/implicationsFindings are limited to the tagging practices on only three sites used by fans during Spring 2016, and further research on other similar sites are recommended. Longitudinal studies of these sites would be beneficial in understanding how or whether tagging practices change over time. Testing of the fan-tag taxonomy developed in this paper is also recommended.Originality/valueThis research develops a method for using tag analysis to describe information behaviour. It also develops a fan-tag taxonomy, which may be used in future research on the tagging practices of fans, which heretofore have been a little-studied section of serious leisure information users.

Constructing secure and memorable passwords

2020 ◽  
Vol 28 (5) ◽  
pp. 701-717 ◽  
Author(s):  
Joakim Kävrestad ◽  
Markus Lennartsson ◽  
Marcus Birath ◽  
Marcus Nohlberg
Keyword(s):  
Literature Review ◽  
Design Methodology ◽  
Common Type ◽  
Computer Users ◽  
Technical Approach ◽  
Training Material ◽  
Content Type ◽  
And Training ◽  
Insight Into ◽  
Attack Models

Purpose Using authentication to secure data and accounts has grown to be a natural part of computing. Even if several authentication methods are in existence, using passwords remain the most common type of authentication. As long and complex passwords are encouraged by research studies and practitioners alike, computer users design passwords using strategies that enable them to remember their passwords. This paper aims to find strategies that allow for the generation of passwords that are both memorable and computationally secure. Design/methodology/approach The study began with a literature review that was used to identify cognitive password creation strategies that facilitate the creation of passwords that are easy to remember. Using an action-based approach, attack models were created for the resulting creation strategies. The attack models were then used to calculate the entropy for passwords created with different strategies and related to a theoretical cracking time. Findings The result of this study suggests that using phrases with four or more words as passwords will generate passwords that are easy to remember and hard to attack. Originality/value This paper considers passwords from a socio-technical approach and provides insight into how passwords that are easy to remember and hard to crack can be generated. The results can be directly used to create password guidelines and training material that enables users to create usable and secure passwords.

What can a municipality offer to its residents? Value propositions and interactions in a place context

2016 ◽  
Vol 10 (1) ◽  
pp. 24-37 ◽  
Author(s):  
Lisa Källström ◽  
Christer Ekelund
Keyword(s):  
Design Methodology ◽  
Geographical Location ◽  
Abductive Reasoning ◽  
Place Marketing ◽  
Structured Interviews ◽  
Content Type ◽  
Essential Services ◽  
Value Propositions ◽  
Insight Into

Purpose – The purpose of this paper is to explore the role of the municipality in the place marketing context and to describe how municipalities work on making their place good to live in. The study rests on abductive reasoning whereby service-based logic forms the study and offers a theoretical framework for how to approach the phenomena. Design/methodology/approach – A qualitative study in the form of 20 semi-structured interviews with leading elected officials and civil servants is used to let us understand how two typical municipalities in southern Sweden work on making their municipality a good place for their residents to live in. Content analysis is used to analyze the data. Findings – The study reveals how municipalities work on creating opportunities for interactions between themselves and their residents, as well as offers insight into what value propositions the municipalities believe they offer their residents. The current study shows that the geographical location and the natural environment, basic and essential services, accommodations, urban quality, recreation and leisure and ambience constitute important dimensions in the place offering. Originality/value – Service-based logic is used as a backdrop to facilitate the analysis in this study, which emphasizes value propositions offered by the municipality and interactions between the municipality and its residents, which increase our understanding of how municipalities work on making their place good to live in. The service-based logic help shed new light on the place marketing context and allows us to understand the context in a new way.

The evaluation of core competencies in networks: the network competence report

2017 ◽  
Vol 18 (1) ◽  
pp. 189-216 ◽  
Author(s):  
Francesca Francioli ◽  
Massimo Albanese
Keyword(s):  
Intellectual Capital ◽  
Design Methodology ◽  
Core Competencies ◽  
Theory And Practice ◽  
Structured Interviews ◽  
Content Type ◽  
Proposed Model ◽  
Network Competence ◽  
Practical Implications ◽  
Insight Into

Purpose The purpose of this paper is to propose a model to disclose, report, and manage intellectual capital (IC) in a network of companies. To this end, it provides a monetary evaluation of core competencies (CCs), which may be defined as a bundle of various types of intangibles, aggregating their value into a network statement, called a network competence report (NCR). Design/methodology/approach The paper utilises the interventionist approach. The intervention was conducted by the authors and studied through joint reflections on documentation from meetings and individual, semi-structured interviews. Findings The NCR makes IC more transparent, thereby allowing companies and network managers to assess the strengths and weaknesses of CCs with a consequent potential insight into their potential earnings. Research limitations/implications This method is labour-intensive, especially in its first application, and the data collection requires considerable company involvement. The interventionist approach may have influenced the empirical results, which may be affected by subjectivity. As the paper involves a single network, care should be taken in generalising its empirical evidence. Practical implications In making IC management more effective, the NCR is valuable for academics, management, political authorities and, more generally, for a network’s stakeholders. The NCR is a tool for internal and external communication purposes, creating the conditions to mobilise IC. The proposed model supports the diagnosis of networks by providing CC maps and assessments relevant to their governance and competitiveness. The NCR depicts company and network CCs, allowing intertemporal comparisons that facilitate understanding of the effectiveness of the network’s actions and the importance of belonging to it. Originality/value This paper represents a first attempt to evaluate, in monetary terms, CCs in a network. Its value lies in its practical implications. Moreover, the paper investigates IC in applied terms, contributing to reducing the gap between theory and practice.

scholarly journals An investigation into the different styles of the lawyer and construction specialist when mediating construction disputes

2016 ◽  
Vol 8 (2) ◽  
pp. 137-160 ◽  
Author(s):  
Ray Wall ◽  
Nii Ankrah ◽  
Jennifer Charlson
Keyword(s):  
Construction Industry ◽  
Design Methodology ◽  
Phenomenological Approach ◽  
Structured Interviews ◽  
Content Type ◽  
Construction Disputes ◽  
Level Of Satisfaction ◽  
Insight Into ◽  
Better Than

Purpose The purpose of this paper is to assess the views and experiences of mediators from different professional backgrounds practising in the construction industry. Previous research shows that the legal profession dominates construction mediation in both England and Wales. Design/methodology/approach The phenomenological approach was used to capture the lived experiences of the interviewees and gain insight into their views and practices. The data collection was by semi-structured interviews. The data was then analysed using software to establish themes. Findings The major difference in mediator practice discovered between the two groups is the use of the evaluative style by lawyer and facilitative style by non-lawyer mediators. Non-lawyer mediators strongly reported their criticisms of the evaluative style in mediation suggesting that it undermines the parties’ ability to self-determine their own dispute and reduces the level of satisfaction experienced by the parties in the process of mediation. Lawyer mediators supported the use of the evaluative style as an acceptable compromise on the parties’ self-determination and feelings of satisfaction in pursuit of achieving the goal of a settlement in mediation, which was significantly better than the escalation of stress and costs to the parties in the event that the dispute escalates to litigation. In addition, mandatory mediation, the role of advisors/advocates, governance and the future of mediation were explored. Originality/value The research is anticipated to be of particular benefit to parties considering referring a construction dispute to mediation.

Sign in / Sign up

Export Citation Format

Share Document