Password Policy Languages: Usable Translation from the Informal to the Formal

摘要: Password policies --- documents which regulate how users must create, manage, and change their passwords can have complex unforeseen consequences on organizational security. Since these user behavior, be clear as to what is expected of them. Unfortunately, current are written in language that often ambiguous. To tackle ambiguity, we previously developed a formal for stating behavior not allowed regarding password management. manual translation the policy this time consuming error prone. This work focuses providing an interface generate accurate models interpretations policy. will aid research, formalization, ultimately more usable policies. paper describes requirements, design, high-level application features, validation, testing, includes discussion progress.