论文标题
调查恐惧和压力对密码选择的影响（扩展版）
Investigation of the Effect of Fear and Stress on Password Choice (Extended Version)
论文作者
论文摘要
背景。当前的认知状态，例如认知工作和耗尽，偶然的影响或压力可能会不自觉地影响所选密码的强度。目的。我们研究了偶然的恐惧和压力对所选密码的测量强度的影响。方法。我们通过测量ZXCVBN \ textsf {log10}猜测数量作为所选密码的强度作为因变量的强度进行了两次实验。在这两个实验中，参与者都被签约到一个持有其个人数据的站点，并且一天后的第二次运行中，参与者以安全事件的借口要求更改密码。 （a）恐惧。 $ n_ \ mathsf {f} = 34 $参与者以随机顺序暴露于标准化的恐惧和幸福刺激视频中。 （b）\ textbf {stress。} $ n_ \ mathsf {s} = 50 $参与者要么暴露于一系列标准压力任务，要么以随机顺序保留在控制条件下。在条件下比较了ZXCVBN密码强度。结果。我们没有观察到恐惧的平均ZXCVBN密码强度在统计上显着差异（Hedges'$ g _ {\ Mathsf {av}} = -0.11 $，95 \％CI $ [-0.45，0.23] $ $ [-0.31，0.33] $）。但是，我们发现压力和TLX心理需求的统计学上显着的交叉相互作用。结论。在观察到偶然恐惧和压力的主要效果估计值估计值估计的同时，我们为压力和认知努力之间的相互作用提供了证据，以保证进一步研究。
Background. The current cognitive state, such as cognitive effort and depletion, incidental affect or stress may impact the strength of a chosen password unconsciously. Aim. We investigate the effect of incidental fear and stress on the measured strength of a chosen password. Method. We conducted two experiments with within-subject designs measuring the Zxcvbn \textsf{log10} number of guesses as strength of chosen passwords as dependent variable. In both experiments, participants were signed up to a site holding their personal data and, for the second run a day later, asked under a security incident pretext to change their password. (a) Fear. $N_\mathsf{F} = 34$ participants were exposed to standardized fear and happiness stimulus videos in random order. (b) \textbf{Stress.} $N_\mathsf{S} = 50$ participants were either exposed to a battery of standard stress tasks or left in a control condition in random order. The Zxcvbn password strength was compared across conditions. Results. We did not observe a statistically significant difference in mean Zxcvbn password strengths on fear (Hedges' $g_{\mathsf{av}} = -0.11$, 95\% CI $[-0.45, 0.23]$) or stress (and control group, Hedges' $g_{\mathsf{av}} = 0.01$, 95\% CI $[-0.31, 0.33]$). However, we found a statistically significant cross-over interaction of stress and TLX mental demand. Conclusions. While having observed negligible main effect size estimates for incidental fear and stress, we offer evidence towards the interaction between stress and cognitive effort that vouches for further investigation.
