Advanced methods of password analysis and the analysis of Slovenian users\u27 passwords characteristics

V diplomski nalogi opišemo tipe gesel, njihov pomen in namene uporabe. Predstavimo načine shranjevanja gesel ter najpogostejše metode napadov na gesla. V nadaljevanju obravnavamo tehnike razbijanja gesel in za to potrebna orodja ter principe. Z izvedbo praktičnega razbijanja gesel s pomočjo mavričnih tabel predstavimo prednosti razbijanja gesel z grafično procesno enoto v primerjavi z osrednjo procesno enoto. S pomočjo vzorcev gesel slovenskih uporabnikov, zbranih v anketi, analiziramo navade določanja gesel slovenskih uporabnikov ter jih primerjamo s svetovnim povprečjem.In this thesis we describe types of passwords and their applications. We present types of password storage and the most common methods of password attacks. Then we describe password cracking techniques, principles and tools required. With a practical demonstration of password cracking using rainbow tables, we demonstrate the benefits of a graphic processing unit based password cracking compared to a central processing unit. Using a survey data of Slovenian users’ passwords, we analyze the properties of their passwords and compare them with the worldwide average properties of passwords