title: The Forgotten Password: A Solution to Selecting, Securing and Remembering Passwords

authors: Filmer-Clark, Tracy Jane

subjects: Password

abstract: Internet passwords are required of us more and more. Personal experience
and research shows us that it is difficult to create and remember unique passwords
that meet security requirements. This study tested a unique method of password
generation based on a selection of mnemonic aids aimed at increasing the
usability, security and memorability of passwords. Fifty-one engineers,
accountants and university students aged between 17 - 61 years participated in the
study. They were randomly assigned to one of three groups: mnemonic, self-selection
and random. All passwords in the study had to meet the following
criteria: they had to be unique, at least eight characters long with a mixture of
letters and numbers, and not include complete words or personal identifiers,
sequential or repetitive numbers, and the passwords could not be written down or
recorded anywhere. The mnemonic group created passwords based on a variety of mnemonic processes, the self-selection group generated passwords that complied with the 
above criteria, and the random group were assigned random
passwords generated by the experimenter. Password recall was tested online once
a week for three weeks, and then the passwords were renewed, with participants
staying within the same groups for the length of the study. The second password
was tested weekly for three weeks, then the passwords were renewed for the third
and final time and tested for a further three weeks. The expectation was that the
use of mnemonics in password creation would improve accurate recall of
passwords, more so than if the password was 'self-selected' or a random password
was assigned. The results showed that participants in the mnemonic group were
able to accurately recall all three passwords significantly more often than
participants in the self-selection and random groups. Furthermore, passwords
created by the mnemonic group were more secure than passwords created by the
self-selection group, as their passwords generated had a greater number of
characters in them, slightly larger alphabet size, and a higher degree of entropy.
The results are discussed in terms of the practical relevance of the findings.

text: The Forgotten Password: A Solution to Selecting, Securing and Remembering Passwords Internet passwords are required of us more and more. Personal experience
and research shows us that it is difficult to create and remember unique passwords
that meet security requirements. This study tested a unique method of password
generation based on a selection of mnemonic aids aimed at increasing the
usability, security and memorability of passwords. Fifty-one engineers,
accountants and university students aged between 17 - 61 years participated in the
study. They were randomly assigned to one of three groups: mnemonic, self-selection
and random. All passwords in the study had to meet the following
criteria: they had to be unique, at least eight characters long with a mixture of
letters and numbers, and not include complete words or personal identifiers,
sequential or repetitive numbers, and the passwords could not be written down or
recorded anywhere. The mnemonic group created passwords based on a variety of mnemonic processes, the self-selection group generated passwords that complied with the 
above criteria, and the random group were assigned random
passwords generated by the experimenter. Password recall was tested online once
a week for three weeks, and then the passwords were renewed, with participants
staying within the same groups for the length of the study. The second password
was tested weekly for three weeks, then the passwords were renewed for the third
and final time and tested for a further three weeks. The expectation was that the
use of mnemonics in password creation would improve accurate recall of
passwords, more so than if the password was 'self-selected' or a random password
was assigned. The results showed that participants in the mnemonic group were
able to accurately recall all three passwords significantly more often than
participants in the self-selection and random groups. Furthermore, passwords
created by the mnemonic group were more secure than passwords created by the
self-selection group, as their passwords generated had a greater number of
characters in them, slightly larger alphabet size, and a higher degree of entropy.
The results are discussed in terms of the practical relevance of the findings.

year: 2008

title: User-guided Disambiguation for Semantic-enriched Search

authors: Ren, Xinning

abstract: In this thesis, we develop, implement and evaluate a strategy for user-guided disambiguation for semantic-enriched search. We use the prototype system Capisco that combines some features of traditional text-based search engines and semantic search engines. Unlike many semantic search approaches that require formulating queries in quite complex semantic languages, the Capisco system is a keyword-based search engine. 

In this work, we focus on the user-guided disambiguation which helps to capture the users’ information needs. The user-guided disambiguation developed in this thesis explores the semantic meanings for a user-provided keyword and displays these to the users for selection. We explored three different orderings in which the possible keyword meanings may be shown. Using our newly-developed disambiguation interface, the user selects one or several of these meanings from the list offered. The selected semantic meanings are then transferred to the search engine to identify matching documents. 

This thesis provides an analysis of related work on search interfaces in semantic search, and in methods for semantic disambiguation. We developed the concept of user-guided disambiguation and implemented this concept in a prototype that explored three interface variations. We executed a user study on the three interface alternatives. Finally, we discuss the insights gained during this project, compare our approach to existing literature, and explore possible future work.

text: User-guided Disambiguation for Semantic-enriched Search In this thesis, we develop, implement and evaluate a strategy for user-guided disambiguation for semantic-enriched search. We use the prototype system Capisco that combines some features of traditional text-based search engines and semantic search engines. Unlike many semantic search approaches that require formulating queries in quite complex semantic languages, the Capisco system is a keyword-based search engine. 

In this work, we focus on the user-guided disambiguation which helps to capture the users’ information needs. The user-guided disambiguation developed in this thesis explores the semantic meanings for a user-provided keyword and displays these to the users for selection. We explored three different orderings in which the possible keyword meanings may be shown. Using our newly-developed disambiguation interface, the user selects one or several of these meanings from the list offered. The selected semantic meanings are then transferred to the search engine to identify matching documents. 

This thesis provides an analysis of related work on search interfaces in semantic search, and in methods for semantic disambiguation. We developed the concept of user-guided disambiguation and implemented this concept in a prototype that explored three interface variations. We executed a user study on the three interface alternatives. Finally, we discuss the insights gained during this project, compare our approach to existing literature, and explore possible future work.

year: 2015

title: The Māori Data Privacy Framework: How useful is it for hapū?

authors: Clark, Vanessa

abstract: This brief is a part of a series, produced for the Tikanga in Technology (TiNT) research programme, that provides a hapū perspective on data sovereignty, data governance, and data privacy. In this brief we focus on the Māori Data Privacy Framework developed by the TiNT team and assess how useful it is for hapū. To do so, we draw on a case study with Ngāti Tiipa, one of the 33 iwi and hapū of the Waikato confederation (Kukutai, Whitehead & Kani, 2022). This brief should be read in conjunction with TiNT Brief #2 Protecting hapū data privacy: A Ngāti Tiipa case study of technology considerations.

text: The Māori Data Privacy Framework: How useful is it for hapū? This brief is a part of a series, produced for the Tikanga in Technology (TiNT) research programme, that provides a hapū perspective on data sovereignty, data governance, and data privacy. In this brief we focus on the Māori Data Privacy Framework developed by the TiNT team and assess how useful it is for hapū. To do so, we draw on a case study with Ngāti Tiipa, one of the 33 iwi and hapū of the Waikato confederation (Kukutai, Whitehead & Kani, 2022). This brief should be read in conjunction with TiNT Brief #2 Protecting hapū data privacy: A Ngāti Tiipa case study of technology considerations.

year: 2025-02-11