Pushing on string: The 'Don't care' region of password strength
Communications of the ACM , Volume 59 - Issue 11 p. 66- 74
Enterprises that impose stringent password-composition policies appear to suffer the same fate as those that do not.
|Journal||Communications of the ACM|
Florêncio, D. (Dinei), Herley, C. (Cormac), & Van Oorschot, P. (2016). Pushing on string: The 'Don't care' region of password strength. Communications of the ACM, 59(11), 66–74. doi:10.1145/2934663