Improving Organizational Password Policy Compliance via Open Source Tools

Abstract

This study demonstrated two open source applications that can readily be customized and used by organizations to improve compliance with password policies and to ensure the quality of passwords within organizations. The tools address both ends of the password spectrum, in that one tool consists of CGI server code used to generate secure random passwords, while the other tool exemplifies techniques that can be used within a password complexity filter to ensure password quality and compliance with organizational policies.