Password Strength The average number of guesses the attacker must make to find the correct password Determined by how unpredictable the password iS, including how long the password is, what set of symbols it is drawn from, and how it is created The ease with which an attacker can check the validity of a guessed password Determined by how the password is stored, how the checking is done, and any limitation on trying passwords 36Password Strength • The average number of guesses the attacker must make to find the correct password • Determined by how unpredictable the password is, including how long the password is, what set of symbols it is drawn from, and how it is created. • The ease with which an attacker can check the validity of a guessed password • Determined by how the password is stored, how the checking is done, and any limitation on trying passwords Topic 3: User Authentication 362/3/2021