Journal of Computer, Internet and Network Security ISSN: 2457-0176 (Online)

Authors: Vignesh Kannathason, Karan Shivarkar, Shantanu Pimpale, S Pawar

Abstract: Jules and Rivest proposed honey words (decoy passwords) to detect attacks against hashed password databases. As per the law, each password has several honey words in order to secure the account from the fraud users. If honey words are selected properly, a cyber-attacker who steals a file of hashed passwords cannot be sure if it is the real password or a honey word for any account. Entering with a honey word to login will trigger an alarm notifying the user about a password file breach. He will get the log list of all the honey word passwords entered by the attacker; he will be notified and will request him to change the current password. How can you come to know if your password is stolen or not? The answer is no u don’t. This is the reason why we will be providing a log file. Password cracking is getting faster day by day. Bots are well programmed that they can crack any passwords by using probability combination method. To avoid these combinational password cracking we are using honewort and when the attacker enters the honey word he will be redirected to honey pot where the fake data files are stored .honey pot will be managed by the administrator. This will reduce brute force attacks secure server called honey checker which can distinguish a user real password among honey words of each user.