Update README.md
Browse files
README.md
CHANGED
|
@@ -15,7 +15,7 @@ library_name: sklearn
|
|
| 15 |
| Use Case | Description |
|
| 16 |
|----------------------------------|-------------|
|
| 17 |
| π Password strength scoring | Quantitative scoring (0β10) for any given password |
|
| 18 |
-
| π§ Risk classification | Categorizes passwords as `
|
| 19 |
| π΅οΈ Threat emulation | Emulates password cracking heuristics to spot vulnerable patterns |
|
| 20 |
| π§° DevSecOps integration | Plug into CI/CD pipelines for password policy enforcement |
|
| 21 |
| π¨βπ» User awareness tools | Build frontend UX tools to give users feedback on password creation |
|
|
@@ -33,7 +33,7 @@ based on real-world patterns and security datasets.
|
|
| 33 |
## π Core Capabilities
|
| 34 |
|
| 35 |
### β
Password Strength Classification
|
| 36 |
-
Trace.AI scores passwords as **Weak**, **
|
| 37 |
|
| 38 |
### π― Pattern Recognition
|
| 39 |
Detects predictable and insecure patterns such as:
|
|
@@ -54,11 +54,9 @@ Checks if passwords meet enterprise-grade security policies, including:
|
|
| 54 |
|
| 55 |
Trace.AI was trained using curated, high-quality password datasets:
|
| 56 |
|
| 57 |
-
| Dataset | Description |
|
| 58 |
-
|
| 59 |
-
| **
|
| 60 |
-
| **Have I Been Pwned (HIBP)** | 613M+ SHA-1 leaked passwords | Breach detection, negative samples |
|
| 61 |
-
| **zxcvbn Dataset** | Rule-based scoring framework by Dropbox | Strength benchmarking and feature design |
|
| 62 |
---
|
| 63 |
|
| 64 |
---
|
|
@@ -70,7 +68,7 @@ Trace.AI supports and evaluates multiple ML models for robustness:
|
|
| 70 |
|-------|-----------|-----|
|
| 71 |
| **RandomForest** | Non-linear classification, interpretable, fast | Production baseline |
|
| 72 |
| **XGBoost** | Handles imbalance, high accuracy, fast inference | Advanced detection |
|
| 73 |
-
| **
|
| 74 |
|
| 75 |
All models are trained using engineered features like:
|
| 76 |
- Length, character diversity
|
|
@@ -89,7 +87,6 @@ Trace.AI is engineered to support the following goals:
|
|
| 89 |
| π Password Strength Estimator | Predict if password is Weak, Moderate, or Strong |
|
| 90 |
| π§ Pattern Analyzer | Identify insecure sequences, leetspeak, keyboard walks |
|
| 91 |
| π Policy Validator | Check adherence to defined password policies |
|
| 92 |
-
| π§Ύ Breach Cross-check | Compare against breached datasets (HIBP) |
|
| 93 |
| π€ Exportable Reports | Download prediction logs for security audits |
|
| 94 |
| π Visual Dashboard | UI-based analysis of strength and structure (via Gradio) |
|
| 95 |
---
|
|
|
|
| 15 |
| Use Case | Description |
|
| 16 |
|----------------------------------|-------------|
|
| 17 |
| π Password strength scoring | Quantitative scoring (0β10) for any given password |
|
| 18 |
+
| π§ Risk classification | Categorizes passwords as `Weak`, `Fairly Strong`, `Strong` |
|
| 19 |
| π΅οΈ Threat emulation | Emulates password cracking heuristics to spot vulnerable patterns |
|
| 20 |
| π§° DevSecOps integration | Plug into CI/CD pipelines for password policy enforcement |
|
| 21 |
| π¨βπ» User awareness tools | Build frontend UX tools to give users feedback on password creation |
|
|
|
|
| 33 |
## π Core Capabilities
|
| 34 |
|
| 35 |
### β
Password Strength Classification
|
| 36 |
+
Trace.AI scores passwords as **Weak**, **Fairly Strong**, or **Strong** using a combination of rule-based feature extraction and machine learning.
|
| 37 |
|
| 38 |
### π― Pattern Recognition
|
| 39 |
Detects predictable and insecure patterns such as:
|
|
|
|
| 54 |
|
| 55 |
Trace.AI was trained using curated, high-quality password datasets:
|
| 56 |
|
| 57 |
+
| Dataset | Description |
|
| 58 |
+
|--------|-------------|
|
| 59 |
+
| **cleanpasswordlist(modified)** | Real-world passwords list, modified and feature engineered for better prediction and scoring |
|
|
|
|
|
|
|
| 60 |
---
|
| 61 |
|
| 62 |
---
|
|
|
|
| 68 |
|-------|-----------|-----|
|
| 69 |
| **RandomForest** | Non-linear classification, interpretable, fast | Production baseline |
|
| 70 |
| **XGBoost** | Handles imbalance, high accuracy, fast inference | Advanced detection |
|
| 71 |
+
| **Decision Trees** | Lightweight, interpretable | Edge device / fallback model |
|
| 72 |
|
| 73 |
All models are trained using engineered features like:
|
| 74 |
- Length, character diversity
|
|
|
|
| 87 |
| π Password Strength Estimator | Predict if password is Weak, Moderate, or Strong |
|
| 88 |
| π§ Pattern Analyzer | Identify insecure sequences, leetspeak, keyboard walks |
|
| 89 |
| π Policy Validator | Check adherence to defined password policies |
|
|
|
|
| 90 |
| π€ Exportable Reports | Download prediction logs for security audits |
|
| 91 |
| π Visual Dashboard | UI-based analysis of strength and structure (via Gradio) |
|
| 92 |
---
|