or
Sign in to turn on 1-Click ordering
Kindle Edition
Read instantly on your iPad, PC, Mac, Android tablet or Kindle Fire
Buy Price: $14.97
Rent From: $8.45
 
 
 
More Buying Choices
Have one to sell? Sell yours here
Sorry, this item is not available in
Image not available for
Color:
Image not available

To view this video download Flash Player

 

Perfect Password: Selection, Protection, Authentication [Illustrated] [Paperback]

Mark Burnett , Dave Kleiman
4.3 out of 5 stars  See all reviews (7 customer reviews)

List Price: $25.95
Price: $24.65 & FREE Shipping on orders over $25. Details
You Save: $1.30 (5%)
o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o
In Stock.
Ships from and sold by Amazon.com. Gift-wrap available.
Want it Tuesday, May 28? Choose One-Day Shipping at checkout. Details
Free Two-Day Shipping for College Students with Amazon Student

Formats

Amazon Price New from Used from
Kindle Edition
Rent from
$14.97
$8.45
 
Paperback, Illustrated $24.65  
Shop the new tech.book(store)
New! Introducing the tech.book(store), a hub for Software Developers and Architects, Networking Administrators, TPMs, and other technology professionals to find highly-rated and highly-relevant career resources. Shop books on programming and big data, or read this week's blog posts by authors and thought-leaders in the tech industry. > Shop now

Book Description

December 25, 2005 1597490415 978-1597490412 1
User passwords are the keys to the network kingdom, yet most users choose overly simplistic passwords (like password) that anyone could guess, while system administrators demand impossible to remember passwords littered with obscure characters and random numerals.

Every computer user must face the problems of password security. According to a recent British study, passwords are usually obvious: around 50 percent of computer users select passwords based on names of a family member, spouse, partner, or a pet. Many users face the problem of selecting strong passwords that meet corporate security requirements. Too often, systems reject user-selected passwords because they are not long enough or otherwise do not meet complexity requirements. This book teaches users how to select passwords that always meet complexity requirements.

A typical computer user must remember dozens of passwords and they are told to make them all unique and never write them down. For most users, the solution is easy passwords that follow simple patterns. This book teaches users how to select strong passwords they can easily remember.

* Examines the password problem from the perspective of the administrator trying to secure their network
* Author Mark Burnett has accumulated and analyzed over 1,000,000 user passwords and through his research has discovered what works, what doesn't work, and how many people probably have dogs named Spot
* Throughout the book, Burnett sprinkles interesting and humorous password ranging from the Top 20 dog names to the number of references to the King James Bible in passwords

Frequently Bought Together

Perfect Password: Selection, Protection, Authentication + The Personal Internet Address & Password Log Book
Price for both: $31.81

Buy the selected items together


Editorial Reviews

Review

"What is the key to coming up with a secure password? Length. Use 10 characters or more, says Mark Burnett, author of Perfect Passwords (Syngress, $26, amazon.com). "Best are passwords that consist of a few parts"-words, prefixes, spelled-out numbers. Good examples: bluebananas and skyisfalling. "They're easy to remember, and when you're prompted to switch your password, you can just swap out one chunk," he says. With this method, foursaltypeanuts becomes foursaltycashews."--Real Simple Magazine


Product Details

  • Paperback: 182 pages
  • Publisher: Syngress; 1 edition (December 25, 2005)
  • Language: English
  • ISBN-10: 1597490415
  • ISBN-13: 978-1597490412
  • Product Dimensions: 6 x 0.4 x 9 inches
  • Shipping Weight: 9.6 ounces (View shipping rates and policies)
  • Average Customer Review: 4.3 out of 5 stars  See all reviews (7 customer reviews)
  • Amazon Best Sellers Rank: #1,321,065 in Books (See Top 100 in Books)

Customer Reviews

4.3 out of 5 stars
(7)
4.3 out of 5 stars
Share your thoughts with other customers
Most Helpful Customer Reviews
16 of 16 people found the following review helpful
4.0 out of 5 stars Passwords are surprisingly interesting March 17, 2006
Format:Paperback
I never thought I would find a whole book about passwords to be interesting, but I really like Mark Burnett's Perfect Passwords. This short book (134 pages without the appendices, which can be ignored) is remarkably informative. I recommend anyone developing password policies or security awareness training reading Perfect Passwords.

The book is unique because the author bases many of his recommendations on research, not theory. He says that over the course of his consulting career he has collected somewhere between 3 and 4 million passwords. (This seems somewhat suspicious, but I suppose dropping the usernames would make that practice acceptable.) By performing statistical analysis on those millions of real passwords, the author knows exactly what makes a bad password.

Perfect Passwords does a good job dispelling common password policy myths. I was glad to hear him report that changing passwords once a month is a stupid idea. A weak password is not "protected" by a monthly change, since it can be broken in a matter of hours. Instead, use 15 or more characters in passwords, and change them less frequently (perhaps every 6 or 12 months, depending on sensitivity).

The author also rightfully criticizes "secret questions" and stand-alone biometrics. Both systems suffer an important flaw: "the answer to the question is usually a fact that will never change," like the make of your first car or your fingerprint. If secret questions must be used, add a three-digit code to the answer. With biometrics, always accompany them with a password.

I had no major problems with Perfect Passwords. I did think that 21 pages of words in Appendix B and 16 pages of numbers in Appendix C didn't serve any real purpose. I thought the hand-drawn figures seemed really weak in places (Figure 3.1 is a lawn sprinkler?). One mathematical note -- pp 43-44 discuss combinations vs permutations. With permutations, it's important to note whether a number can be selected repeatedly, or only once. With a lottery (the book's example), numbers are usually selected once. So, the permutations for a three digit lottery yield 10 * 9 * 8 = 720 possibilities, not 1000.

Overall I liked Perfect Passwords. This is a great addition to any security professional's library, and it contains many sound suggestions.
Comment | 
Was this review helpful to you?
12 of 12 people found the following review helpful
4.0 out of 5 stars Quirky, but very useful... February 9, 2006
Format:Paperback
Mark Burnett has probably spent more time thinking and investigating passwords that either you or I. He takes all his accumulated experience and wisdom and offers it up in the book Perfect Passwords - Selection, Protection, Authentication.

Contents: Passwords - The Basics and Beyond; Meet Your Opponent; Is Random Really Random?; Character Diversity - Beyond the Alphabet; Password Length - Making It Count; Time - The Enemy of All Secrets; Living with Passwords; Ten Password Pointers - Building Strong Passwords; The 500 Worst Passwords of All Time; Another Ten Password Pointers Plus a Bonus Pointer; The Three Rules for Strong Passwords; Celebrate Password Day; The Three Elements of Authentication; Test Your Password; Random Seed Words; Complete Randomness; Index

If you've been around computer systems for any time, you've heard the conventional wisdom on creating secure passwords. And regardless of how many times it's said, you still get users picking the word "password" for access to the payroll system. Burnett has created an easy-to-read, easily-understood guide on how passwords work, how passwords are usually chosen, and why most of those methods are really bad. But rather than just be gloom and doom, he also presents a number of techniques for generating long passwords that are easy to remember but that will resist virtually all efforts at password cracking. For instance, passwords of 15 to 20 characters with a mix of upper case, lower case, numbers, and special characters are resistant to every known form of cracking attempt (even rainbow lists). But how do you pick a word or words that meet that criteria? Maybe you use rhyming (poor-white-dog-bite) or repetition (2bitter@2bitter.com). Visualization is pretty good, too (Frozen banana in my shoe.) The phrases are nonsensical, but that's why they are not "guessable". And the diversity of the character set coupled with the length of the phrase means that the permutation possibilities are astronomical and can't even begin to be brute-forced with today's technology.

I'm not sure you could get every user in your company to read the book, but it'd be worth trying. It's a fast read at only 180 pages, and they could even benefit just by making sure their password isn't in the top 500 list. :)
Comment | 
Was this review helpful to you?
10 of 12 people found the following review helpful
5.0 out of 5 stars Great, quick read April 12, 2006
Format:Paperback
Mark has made a great, quick, must-read book on passwords. I had read a few chapters of it before it was published (my quote is on the back cover), and liked it, but the overall book should be read by all system administrators. It contains commonsense, practical advice, just more of it than most of us have thought about alone-all in one place.

I think every system administrator will see one or two of their own personal passwords in the book...which is a wake-up call.

I was able to quickly read/skim the entire book, pull out all the useful tips in under an hour while my daughter was getting her braces tightened. A complete slow read would probably take a day. I think all system administrators should buy and understand this book.

Roger A. Grimes
Comment | 
Was this review helpful to you?



What Other Items Do Customers Buy After Viewing This Item?


Forums

There are no discussions about this product yet.
Be the first to discuss this product with the community.
Start a new discussion
Topic:
First post:
Prompts for sign-in
 





Look for Similar Items by Category