UNIVERSITI MALAYSIA SABAH

SCHOOL OF ENGINEERING AND INFORMATION TECHNOLOGY KS 40402 COMPUTER SECURITY SYSTEM

PROJECT TITLE : ACCESS CONTROL LECTURER: MR. LEAU YU BENG PROGRAM: COMPUTER ENGINEERING (HK20)

No 1. 2.

Name GOH QUANG YONG THAM WAI YIP

Matric No BK 08110289 BK 08110357

Course HK 20 HK 20

Signature

Hand On Project 5 Project 1 Probability Of password Cracked In 2 Minute

Project 2 Password With Minor Change

Strong Password Usually Used

Example Of Good Password

Project Through Question 1) How does the cracking program actually crack the password? John cracking password by using 3 different ways: Wordlist: John will simply use a file with a list of words that will be checked against the passwords. See RULES for the format of wordlist files. Single crack: In this mode, john will try to crack the password using the login/GECOS information as passwords. Incremental: This is the most powerful mode. John will try any character combination to resolve the password. Details about these modes can be found in the MODES file in johns documentation, including how to define your own cracking methods. 2) If you used a larger wordlist, would it crack the passwords faster?

3) Can you use foreign language wordlists?

4) Do you think one of the passwords in the example would be easy for you to remember? No. Because those example password didnt bring nay meaning for me. Thus, it was hard to remember by me. 5) Why are these good passwords? Those passwords consist of symbol, alphabets and integer which make it very hard to be cracked. 6) Why do special characters (e.g., @#$%^&*) make passwords difficult to crack? By using the special character, it will increase the possibility of password combination. Hence, it make the password hard to crack. 7) Why does a change of case help make a stronger password? Because using different case will increase the possibility of password combination and it make the password hard to guess. 8) Why did you choose the password you currently have? Because it is easy to remember and very meaningful to me. 9) Could others follow the same logic and choose a similar password?

10) Do you use the same password for multiple accounts? Why would this be a security risk? No. The reason for choosing different password was when one of my password has been knew by the attackers I still able to protect other confidential data. But, if using only the same password for all the account the attackers manage to do something bad on all of it.