Measuring real-world accuracies and biases in modeling password guessability
Password Cracking Using Probabilistic Context-Free Grammars