安全新兵营第八天：密码强度

最新推荐文章于 2021-03-05 15:46:46 发布

jackiechen_vip

最新推荐文章于 2021-03-05 15:46:46 发布

阅读量472

点赞数

CC 4.0 BY-SA版权

分类专栏：安全文章标签： spreadsheet passwords character download security access

本文链接：https://blog.youkuaiyun.com/jackiechen_vip/article/details/4684997

26 篇文章

订阅专栏

随着网络安全威胁日益增加，复杂的六到八位密码已不再足够。本文介绍了一种评估密码策略强度的方法，通过使用密码猜测计算器来输入密码策略参数，如长度、字符集等，帮助组织评估其密码政策的有效性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

	InfoWorld Security Boot Camp: Day 8: Test the strength of your password policy
	September 30, 2009
	YOUR ASSIGNMENT TODAY: Test the strength of your password policy. WHY DO IT: A complex, six- to eight-character password may have been sufficient 10 years ago, but it's certainly not today. Moreover, most companies still lack a sufficiently adequate auditing system to alert admins of repeated failed logon attempts s. So a remote attacker can enumerate all of your external access and guess away against your administrator account until he or she breaks it. HOW TO DO IT: Download our password-guessing calculator spreadsheet, input your password policy (length, character set, maximum age, and whether complexity is enabled), selects a password entropy model, and enter the number of guesses per minute that an attacker can attempt. The spreadsheet will calculate how easily your passwords will give when under attack. RECOMMENDED READING: " Test the strength of your password policy," Infoworld.com