Strong passwords have been preached since decades. However, lot of the regular users of IT systems resort to simple and repetitive passwords, especially nowadays in the “service era”. To help alleviate this problem, a new class of software grew popular: password managers. Since their introduction, password managers have slowly been migrating into the cloud. In this paper we review and analyze current professional password managers in the cloud. We discuss several functional and non-functional requirements to evaluate existing solutions and we sum up their strengths and weaknesses. The main conclusion is that a silver bullet solution is not available yet and that this type of tools still deserve a significant research effort from the privacy and security community.
Evaluation of professional cloud password management tools / Schougaard, Daniel; Dragoni, Nicola; SPOGNARDI, Angelo. - 9881:(2016), pp. 16-28. (Intervento presentato al convegno International Conference on Web Engineering, ICWE 2016 and 2nd International Workshop on TEchnical and LEgal aspects of data pRIvacy and SEcurity, TELERISE 2016, 2nd International Workshop on Mining the Social Web, SoWeMine 2016, 1st International Workshop on Liquid Multi-Device Software for the Web, LiquidWS 2016, 5th Workshop on Distributed User Interfaces: Distributing Interactions, DUI 2016 tenutosi a Lugano; Switzerland nel 2016) [10.1007/978-3-319-46963-8_2].
Evaluation of professional cloud password management tools
SPOGNARDI, Angelo
2016
Abstract
Strong passwords have been preached since decades. However, lot of the regular users of IT systems resort to simple and repetitive passwords, especially nowadays in the “service era”. To help alleviate this problem, a new class of software grew popular: password managers. Since their introduction, password managers have slowly been migrating into the cloud. In this paper we review and analyze current professional password managers in the cloud. We discuss several functional and non-functional requirements to evaluate existing solutions and we sum up their strengths and weaknesses. The main conclusion is that a silver bullet solution is not available yet and that this type of tools still deserve a significant research effort from the privacy and security community.| File | Dimensione | Formato | |
|---|---|---|---|
|
Schougaard_Evaluation_2016.pdf
solo gestori archivio
Tipologia:
Versione editoriale (versione pubblicata con il layout dell'editore)
Licenza:
Tutti i diritti riservati (All rights reserved)
Dimensione
1.69 MB
Formato
Adobe PDF
|
1.69 MB | Adobe PDF | Contatta l'autore |
I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.
