Umut Topkara

CERIAS TR 2007-39

phdthesis

In this thesis we investigate applications of natural language processing (NLP) techniques to information security problems. We present our results in this direction for two important areas: password authentication, and information hiding in natural language text. We have limited this thesis to the realm of language engineering, i.e., our emphasis is on adapting the existing NLP techniques for our purposes, rather than in developing new NLP techniques. Our password mnemonics system helps users to remember random passwords, hence making it possible to implement organizational policies that mandate strong password choices by users. Moreover, in our system password changes do not necessitate a new mnemonic, thereby further easing the users' task of memorizing their respective mnemonics. Our robust natural language text watermarking system can avoid the removal of the watermark text by an automated adversary, in the same way used by authentication systems to avoid an automated adversary's compromise of the password string hidden within the password mnemonic. We have also laid the groundwork for followup research in this area.

2007 – 08

Information Security Applications, Natural Language, Processing Techniques

Purdue University

2007

2007-08-01

1. Introduction 2. Template-based Mnemonic Generation 3. Secure and Re-usable Multiple Password Mnemonics 4. Accesible Authentication Through Secure Mnemonic-based Passwords 5. Another Application: NL Watermarking 6. Summary and Conclusions

Information Security Applications of Natural Language Processing Techniques

English