A study of personal information in human-chosen passwords and its security implications
Password Cracking Using Probabilistic Context-Free Grammars