Search for: All records

Remote password guessing attacks remain one of the largest sources of account compromise. Understanding and characterizing attacker strategies is critical to improving security but doing so has been challenging thus far due to the sensitivity of login services and the lack of ground truth labels for benign and malicious login requests. We perform an in-depth measurement study of guessing attacks targeting two large universities. Using a rich dataset of more than 34 million login requests to the two universities as well as thousands of compromise reports, we were able to develop a new analysis pipeline to identify 29 attack clusters—many of which involved compromises not previously known to security engineers. Our analysis provides the richest investigation to date of password guessing attacks as seen from login services. We believe our tooling will be useful in future efforts to develop real-time detection of attack campaigns, and our characterization of attack campaigns can help more broadly guide mitigation design. 

Background: Adverse childhood experiences (ACEs) are stressful childhood events associated with behavioral, mental, and physical illness. Parent experiences of adversity may indicate a child’s adversity risk, but little evidence exists on intergenerational links between parents’ and children’s ACEs. This study examines these intergenerational ACE associations, as well as parent factors that mediate them. Methods: The Panel Study of Income Dynamics (PSID) 2013 Main Interview and the linked PSID Childhood Retrospective Circumstances Study collected parent and child ACE information. Parent scores on the Aggravation in Parenting Scale, Parent Disagreement Scale, and the Kessler-6 Scale of Emotional Distress were linked through the PSID 1997, 2002, and 2014 PSID Childhood Development Supplements. Multivariate linear and multinomial logistic regression models estimated adjusted associations between parent and child ACE scores. Results: Among 2205 parent-child dyads, children of parents with four or more ACEs had 3.25-fold (23.1% [95% CI 15.9–30.4] versus 7.1% [4.4–9.8], p-value 0.001) higher risk of experiencing four or more ACEs themselves, compared to children of parents without ACEs. Parent aggravation, disagreement, and emotional distress were partial mediators. Conclusions: Parents with higher ACE scores are far more likely to have children with higher ACEs. Addressing parenting stress, aggravation, and discord may interrupt intergenerational adversity cycles.