A postgraduate student of Novosibirsk State Technical University has created a unique application for managing passwords in large companies. This was reported by the press service of the university.
The university emphasized that one of the reasons for information leaks in the modern world is the use of simple passwords in various programs and services. Attackers have learned to crack passwords using dictionaries of popular combinations or through databases with logins and passwords. The Password Solutions software package developed at NSTU includes several modules, each of which performs its function.
The PS-Check password strength assessment module takes into account not only the length and presence of various characters, but also the presence of repetitions and alternations of characters, as well as the password content in the database of leaked passwords. The PS-Scan password scanner scans the organization to identify weak passwords, and the PS-Help user assistance module helps to come up with a strong and at the same time memorable password.
The developer also added a password manager (PS-Manager), a password generator for creating reliable and memorable combinations (PS-Gen), a database with frequently used and compromised passwords (PS-Cloud), and an educational module (PS-Educate) to the application - an interactive course aimed at improving the password culture of users.
There are currently no such analogues in Russia; there used to be a foreign product, but it has now left the market. As for the modules, only PS-Check is similar to the foreign solution - it is being developed based on the topic of my dissertation. The remaining modules are unique.
The educational institution reported that the application was created primarily for large organizations where information security processes have already been established and additional password control is required. At the moment, the development is focused on Windows users, but in the future, support for Linux is also planned.
Read more on the topic:
Russians were told which password fraudsters will not be able to pick up
Attackers began to use a new method of stealing one-time passwords from Russians
How to come up with and not forget passwords: Kaspersky Lab shared an interesting method