From the course: Web Security: User Authentication and Access Control
Unlock the full course today
Join today to access over 25,000 courses taught by industry experts.
Speed and throttling
From the course: Web Security: User Authentication and Access Control
Speed and throttling
- [Instructor] Brute force attacks are affected by the size of the key space, but also by the speed that each attempt can be made. If I must try 1000 combinations to brute force a lock, then my success may very well depend in part on how fast I'm able to input each of those combinations. The formula to determine the total time required to try all of the combinations is to take the key space, the possibilities in each position, raised to the power of the key length, and multiply that by the time per attempt. If I must try 1000 combinations, and each input takes two seconds, then the total time is 2000 seconds, which is 33 minutes and 20 seconds. If each input takes three seconds, then the total time increases to 50 minutes. As computer speeds increase, their time per attempts decreases and cracking passwords through brute force attacks gets easier. Computers may be on a network or cooperating with botnets to work closely…