A Survey Exploring Open Source Intelligence for Smarter Password Cracking

From the end of the last century to date, consumers are increasingly living their lives online. In today’s world, the average personspends a significant proportion of their time connecting with people online through multiple platforms. This online activity results inpeople freely sharing an increasing amount of personal information – as well as having to manage how they share that information.For law enforcement, this corresponds to a slew of new sources of digital evidence valuable for digital forensic investigation.A combination of consumer level encryption becoming default on personal computing and mobile devices and the need to accessinformation stored with third parties has resulted in a need for robust password cracking techniques to progress lawful investigation.However, current password cracking techniques are expensive, time-consuming processes that are not guaranteed to be successfulin the time-frames common for investigations. In this paper, the potential for Open Source Intelligence (OSINT) being leveraged for more efficient password cracking is explored. A comprehensive survey of the literature on password strength, password cracking,and OSINT is outlined, and the law enforcement challenges surrounding these topics are discussed. Additionally, an analysis on password structure as well as demographic factors influencing password selection is presented. Finally, the potential impact ofOSINT to password cracking by law enforcement is discussed.

KANTA Aikaterini;  COISEL Iwen;  SCANLON Mark; 

2021-06-14

ELSEVIER SCI LTD

JRC121979

2666-2817 (online),   

https://www.sciencedirect.com/science/article/pii/S2666281720303723?via%3Dihub,    https://publications.jrc.ec.europa.eu/repository/handle/JRC121979,   

10.1016/j.fsidi.2020.301075 (online),