dictionary attack


Also found in: Dictionary, Thesaurus, Medical, Legal, Wikipedia.
Related to dictionary attack: Brute force attack

dictionary attack

A type of brute force method for uncovering passwords and decryption keys. It sorts common words by frequency of use and starts with the most likely possibilities; for example, names of people, sports teams, pets and cars. For greater security, users should not use passwords that could be found in an ordinary dictionary. While a dictionary attack can be done manually by an individual, it is easily done via software and a database with millions of words. See brute force attack and Captcha.
References in periodicals archive ?
Attackers are aware of these practices; hence a long and complicated word like 'Absquatulate' as your password is vulnerable to a dictionary attack.
These programs unleash the combined power of classic brute force attack, dictionary attack and precomputed hashes attack using rainbow tables to recover a user password for the corresponding databases.
It is not easy to protect the password information against dictionary attacks whereby an adversary ends up with the correct password after exhaustively testing all possible passwords against known password verifiers.
A dictionary attack tries a range of words included in a previously compiled list, and tries it against the captured file till there is a match.
Therefore passwords are subject to dictionary attacks or even to a simple exhaustive search.
Indeed, we found that S-3PAKE is not secure against an offline dictionary attack in the presence of a malicious client.
The newly added dictionary attack allows unlocking information protected with strong passwords faster.
Secondly, once you're satisfied that nothing will break if you change those strings, select something complex that will resist a dictionary attack.
In April the British ISP Blueyonder, which supplies broadband cable access to tens of thousands of subscribers, suffered a dictionary attack of such ferocity that it was unable to deliver e-mail to its paying customers for two days.
com), for example, allow you to detect the technology in images and launch a dictionary attack, respectively.
The two major concerns that are addressed when standardizing the triple-DES modes are matching ciphertext attack and dictionary attack.
Dictionary Attack Protection denies access to IP addresses that make frequent repeated invalid login attempts.