PagPassGPT: Pattern Guided Password Guessing via Generative Pretrained Transformer

Xingyu Su, Xiaojie Zhu*, Yang Li, Yong Li, Chi Chen, Paulo Esteves-Verissimo

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

2 Scopus citations

Abstract

Amidst the surge in deep learning-based password guessing models, challenges of generating high-quality passwords and reducing duplicate passwords persist. To address these challenges, we present PagPassGPT, a password guessing model constructed on a Generative Pretrained Transformer (GPT). It can perform pattern guided guessing by incorporating pattern structure information as background knowledge, resulting in a significant increase in the hit rate. Furthermore, we propose D&C-GEN to reduce the repeat rate of generated passwords, which adopts the concept of a divide-and-conquer approach. The primary task of guessing passwords is recursively divided into non-overlapping subtasks. Each subtask inherits the knowledge from the parent task and predicts succeeding tokens. In comparison to the state-of-the-art model, our proposed scheme exhibits the capability to correctly guess 12% more passwords while producing 25% fewer duplicates.

Original languageEnglish (US)
Title of host publicationProceedings - 2024 54th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2024
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages429-442
Number of pages14
ISBN (Electronic)9798350341058
DOIs
StatePublished - 2024
Event54th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2024 - Brisbane, Australia
Duration: Jun 24 2024Jun 27 2024

Publication series

NameProceedings - 2024 54th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2024

Conference

Conference54th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2024
Country/TerritoryAustralia
CityBrisbane
Period06/24/2406/27/24

Keywords

  • generative pretrained transformer
  • password guessing
  • trawling attack

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Hardware and Architecture
  • Information Systems
  • Safety, Risk, Reliability and Quality

Fingerprint

Dive into the research topics of 'PagPassGPT: Pattern Guided Password Guessing via Generative Pretrained Transformer'. Together they form a unique fingerprint.

Cite this