This document provides a summary of a dissertation study conducted by an alumnus of UoF. Review the summary of the research and the adaptation of the survey instrument that was developed for the study.

Research Topic: Password Complexity Choices

Abstract

Password Choice Complexity Issues in Selected Middle Schools

by

Joseph Walter Popinski, III

2007

Much of the access to today’s computer systems is controlled by a user authentication mechanism commonly called a password. Computer users typically generate and type in individual secret passwords to gain access to computer systems, applications, and networks. For each subsequent access, they must remember their password and type it into the computer/network system. This research study investigated the existence of relationships among several variables and computer password complexity. The literature suggested five variables as having influence on these choices: Quantity of Passwords, Amount of Guidance, Existence of Policy, Job Roles, and Workplace Environment. Teachers and administrators from selected public middle schools in a School District were the subjects of this study. Data from these specific users were gathered and analyzed to determine whether a relationship existed between the variables and password complexity. Password complexity scores were used as a relative measure for the relationship between the variables and password complexity. A password complexity scoring schema was developed and used to calculate password complexity scores. Data about these variables and user password characteristics were gathered via a survey instrument. Results of this research show that a relationship between one of the variables is statistically supported by the data. However, relationships for the remaining variables could not be statistically supported. This research can be used as a basis for future work, such as expanding the target population to elementary, secondary, and post-secondary educators; widening the password complexity scoring criteria; including other computer user groups – consultants, legal and accounting professionals and others; and focusing research on much broader geographic areas.

Research Questions:

1. Is there a relationship between the number of passwords a user has and password complexity?

2. Is there a relationship between the availability of password guidance a user has and password complexity?

3. Is there a relationship between the existence of password policy rules and password complexity?

Null Hypotheses: (Note: these hypotheses were not stated in the dissertation)

1. There is no relationship between the number of passwords a user has and password complexity.

2. There is no relationship between the availability of password guidance a user has and password complexity.

3. There is no relationship between the existence of password policy rules and password complexity

Survey Question Map (Variables/Questions)

Variable	Variable Type	Research Question	Survey Question
Number of Passwords	Independent	RQ 1	15
Amount of Guidance	Independent	RQ 2	16, 17, 18
Password Policy	Independent	RQ 3	1, 2, 5, 9, 10, 12, 13, 14
Password Complexity	Dependent	RQ 1 – 3	19
Demographics	Independent	RQ 1 – 3	7, 8, 21, 22

Survey Instrument

Please note the survey instrument provided to you for this course has been slightly modified from the instrument used in conducting Dr Popinski’s dissertation research.