MANAGING PASSWORDS
A method is used in managing passwords. A proposed new password is received. The proposed new password is associated with contextual information indicating a context in which the proposed password is to be used. A machine learning model is dynamically selected from a set of machine learning models based on the contextual information. A quality metric is derived from the proposed new password based on the selected machine learning model.
1 . A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device to perform steps of:
receiving a proposed new password, the proposed new password being associated with contextual information indicating a context in which the proposed password is to be used;
based on the contextual information, dynamically selecting a machine learning model from a set of machine learning models; and
based on the selected machine learning model, deriving a quality metric from the proposed new password.
2 . The computer product of claim 1 , further comprising:
based on the quality metric, determining whether to approve the proposed new password.
3 . The computer product of claim 1 , wherein the quality metric includes a password score.
4 . The computer product of claim 1 , further comprising:
establishing a set of contexts based on contextual information, each context of the set of contexts being associated with a set of passwords likely to be used by a user within the respective context, wherein the contextual information includes one or more of organizational information, user information, an application to which the user seeks access, or a service to which the user seeks access.
5 . The computer product of claim 4 , further comprising:
generating the set of machine learning models by associating each context of the set of contexts with a respective password training set for generating a respective machine learning model.
6 . The computer product of claim 5 , wherein a password training set further comprises a plurality of vulnerable passwords.
7 . The computer product of claim 6 , wherein generating a machine learning model further comprising:
associating each vulnerable password of a password training set used for generating the machine learning model with a weight.
8 . The computer product of claim 7 , wherein evaluating the quality metric of the proposed new password using the selected machine learning model includes computing a password score for the proposed new password.
9 . The computer product of claim 1 , further comprising:
providing the proposed new password and contextual metadata to a password scorer module for dynamically selecting the machine learning model and evaluating the quality metric of the proposed new password using the selected machine learning model, wherein a user authentication module is further configured to determine whether to allow the user to establish the proposed new password based on the quality metric of the proposed new password.
10 . The computer product of claim 9 , wherein the user authentication module gathers additional contextual metadata and provides the additional contextual metadata to the password scorer module for evaluating the quality metric of the proposed new password.
11 . A system for managing passwords comprising a memory and a processor configured to:
receive a proposed new password, the proposed new password being associated with contextual information indicating a context in which the proposed password is to be used;
based on the contextual information, dynamically select a machine learning model from a set of machine learning models; and
based on the selected machine learning model, derive a quality metric from the proposed new password.
12 . The system of claim 11 , further comprising:
based on the quality metric, determining whether to approve the proposed new password.
13 . The system of claim 11 , wherein the quality metric includes a password score.
14 . The system of claim of claim 11 , the processor is further configured to:
provide the proposed new password and contextual metadata to a password scorer module for dynamically selecting the machine learning model and evaluating the quality metric of the proposed new password using the selected machine learning model, wherein a user authentication module is further configured to determine whether to allow the user to establish the proposed new password based on the quality metric of the proposed new password.
15 . The system of claim 14 , wherein the user authentication module gathers additional contextual metadata and provides the additional contextual metadata to the password scorer module for evaluating the quality metric of the proposed new password.
16 . A method for use in managing passwords, the method comprising:
receiving a proposed new password, the proposed new password being associated with contextual information indicating a context in which the proposed password is to be used;
based on the contextual information, dynamically selecting a machine learning model from a set of machine learning models; and
based on the selected machine learning model, deriving a quality metric from the proposed new password.
17 . The method of claim 16 , further comprising:
based on the quality metric, determining whether to approve the proposed new password.
18 . The method of claim 16 , wherein the quality metric includes a password score.
19 . The method of claim 16 , wherein the new password and the proposed new password is received from a user authentication module, further comprising:
providing the new password and contextual metadata to a password scorer module for dynamically selecting the machine learning model and evaluating the quality metric of the new password using the selected machine learning model, wherein the user authentication module is further configured to determine whether to allow the user to establish the new password based on the quality metric of the new password.
20 . The method of claim 19 , wherein the user authentication module gathers additional contextual metadata and provides the additional contextual metadata to the password scorer module for evaluating the quality metric of the new password.