1. Gabatarwa & Bayyani
Wannan binciken ya bincika takardar bincike "Kalmomin Sirri Mai Tsayi: Yuwuwar da Iyakoki" na Bonk da sauransu, wadda ta binciki yuwuwar kalmomin sirri masu tsayi a matsayin madadin tsaro da amfani fiye da kalmomin sirri na gargajiya. Takardar ta magance matsalar asali a cikin tabbatar da ainihi: ciniki tsakanin ƙarfin tsaro da sauƙin tunawa da mai amfani. Yayin da kalmomin sirri a ka'ida ke ba da sararin bincike mafi girma ($\text{Sararin Bincike} = N^L$, inda $N$ shine saitin haruffa kuma $L$ shine tsayi), halayen mai amfani sau da yawa yana lalata wannan yuwuwar ta hanyar tsarukan da ake iya hasasawa.
Masu binciken sun ba da shawarar cewa manufofi da aka tsara da kyau, bisa ka'idodin ƙwaƙwalwar ɗan adam, na iya jagorantar masu amfani zuwa ƙirƙirar kalmomin sirri masu tsayi, mafi tsaro ba tare da lalata amfani ba. Binciken su na tsawon kwanaki 39 na masu amfani ya zama tushen gwaji don kimanta wannan hasashe.
2. Ayyukan Da Aka Yi & Bayanan Baya
Takardar ta sanya kanta a cikin fagen tsaro mai amfani da binciken tabbatar da ainihi. Babban aikin ginin gindin ya haɗa da binciken Komanduri da sauransu (2011) akan manufofin ƙirƙirar kalmomin sirri, wanda ya nuna cewa kalmomin sirri masu tsayi (misali, haruffa 16) na iya ba da tsaro mai ƙarfi ko da tare da saitin haruffa mafi sauƙi. Wannan ya ƙalubalanci fifikon gargajiya akan sarkakiya (alamomi, lambobi) akan tsayi.
Bugu da ƙari, binciken ya ginu bisa lura cewa masu amfani suna karkata zuwa ga kalmomin sirri gajere masu kama da yaren halitta, wanda ke rage ƙarfin shiga (entropy) kuma ya sa su zama masu rauni ga harin ƙamus da tsarin harshe. Takardar tana da nufin cike gibi tsakanin tsaron ka'ida na kalmomin sirri masu tsayi da amfani na ainihi na mai amfani.
3. Hanyar Bincike
Hanyar bincike ta asali ita ce binciken mai amfani na kwanaki 39 da aka tsara don gwada sauƙin tunawa na dogon lokaci da amfani na kalmomin sirri da aka ƙirƙira ƙarƙashin manufofin da aka gabatar. Wannan tsarin bincike na dogon lokaci yana da mahimmanci, saboda tunawa na ɗan gajeren lokaci ba shi da tabbacin nasarar tabbatar da ainihi a duniyar gaske. Binciken mai yiwuwa ya yi amfani da hanyar haɗaɗɗun hanyoyi, tare da haɗa ma'auni na ƙididdiga (adadin nasarar shiga, lokacin tunawa) tare da ra'ayi mai inganci don fahimtar dabarun masu amfani da wahalhalu.
4. Tsarin Manufofin Kalmomin Sirri
Babban gudummawar takardar shine saitin manufofi da jagororin da aka ƙera don tura halayen mai amfani.
4.1 Abubuwan Tsarin Manufofi na Asali
Manufofin mai yiwuwa sun tilasta mafi ƙarancin tsayi da yawa fiye da kalmomin sirri na yau da kullun (misali, haruffa 20+), suna matsar da mayar da hankali daga sarkakiyar haruffa zuwa tsayin jimla. Suna iya hana amfani da kalmomin gama gari ko jerin abubuwan da ake iya hasasawa (misali, "the quick brown fox").
4.2 Jagororin Mai Da Hankali Kan Ƙwaƙwalwa
Bisa ilimin halayyar ɗan adam, jagororin mai yiwuwa sun ƙarfafa ƙirƙirar hotunan tunani masu ban mamaki, na musamman, ko ma'ana ta sirri. Misali, ba da shawarar masu amfani su gina wani yanayi mai ban mamaki ko mai cike da motsin rai da kalmar sirri ta kwatanta, ta yin amfani da tasirin fifikon hoto da dorewar ƙwaƙwalwar ajiya na abubuwan da suka faru.
5. Binciken Masu Amfani & Tsarin Gwaji
5.1 Ma'auni na Bincike
Tsawon kwanaki 39 ya ba masu bincike damar kimanta ba kawai ƙirƙira ta farko ba har ma da riƙewa da tunawa bayan lokutan rashin amfani, suna kwaikwayon yawan shiga na ainihi don asusun na biyu.
5.2 Hanyoyin Tattara Bayanai
Tattara bayanai zai haɗa da yunƙurin shiga na lokaci-lokaci, binciken kan wahalar da ake ganin akwai, da yuwuwar tsarin faɗin tunani yayin ƙirƙirar kalmar sirri don gano hanyoyin fahimta.
6. Sakamako & Bincike
Ma'auni Mafi Muhimmanci na Bincike
Tsawon Lokaci: Kwanaki 39
Babban Binciken: Manufofin sun haifar da "amfani mai ma'ana da tsaro mai ban sha'awa" ga wasu amfani na musamman.
Babban Kuskure: Masu amfani sun faɗi cikin tsarin ƙirƙira "kyauta" da ake iya hasasawa ba tare da jagora ba.
6.1 Ma'auni na Amfani
Takardar ta ƙare da cewa manufofin da aka tsara sun haifar da "amfani mai ma'ana." Wannan yana nuna cewa yawancin mahalarta sun sami damar tunawa da kalmomin sirri masu tsayi a cikin lokacin binciken, ko da yake mai yiwuwa tare da ƙoƙari ko gazawa na lokaci-lokaci idan aka kwatanta da kalmomin sirri masu sauƙi. Adadin nasara da yawan kura-kurai sune ma'auni mahimmanci a nan.
6.2 Binciken Tsaro
An yi la'akari da tsaro "mai ban sha'awa ga wasu amfani na musamman." Wannan yana nuna cewa kalmomin sirri da aka samar ƙarƙashin manufofin suna da ƙarfin shiga (entropy) mafi girma sosai fiye da kalmomin sirri da masu amfani suka zaɓa na yau da kullun, amma har yanzu suna iya zama ƙasa da matsakaicin ka'ida saboda ragowar tsaruka. Binciken mai yiwuwa ya haɗa da kimanta ƙarfin shiga (entropy) da juriya ga nau'ikan harin daban-daban (ƙarfin hali, ƙamus, bisa tsarin Markov).
6.3 Kura-kuran Gama Gari da aka Gano
Wani bincike mai mahimmanci shine gano "kura-kuran gama gari a cikin ƙirƙirar kalmar sirri ta kyauta." Ko da tare da tilastawa tsayi, masu amfani suna son zaɓar kalmomin gama gari, amfani da jimlolin nahawu, ko zana daga al'adun gargajiya, suna ƙirƙirar wurare masu zafi ga masu kai hari. Wannan yana jaddada wajabcin jagororin da aka bayar don rushe waɗannan dabi'un halitta.
7. Tsarin Fasaha & Ƙirar Lissafi
Ana iya ƙirƙira tsaron kalmar sirri ta hanyar ƙarfin shigarta (entropy), wanda aka auna a cikin ragi (bits). Don kalmar da aka zaɓa ba da gangan ba daga jerin kalmomi $W$, ƙarfin shiga (entropy) a kowace kalma shine $\log_2(W)$. Don kalmar sirri na kalmomi $k$, jimlar ƙarfin shiga (entropy) shine $k \cdot \log_2(W)$. Duk da haka, zaɓin mai amfani ba bazuwar bane. Ƙirar mafi dacewa ta yi la'akari da yawan amfani da kalma, yana rage ƙarfin shiga mai tasiri. Manufofin takardar suna da nufin haɓaka samfurin $k \cdot \log_2(W_{eff})$, inda $W_{eff}$ shine girman tasiri na jerin kalmomi bayan hana zaɓuɓɓukan gama gari.
Misalin Lissafi: Idan manufa ta yi amfani da jerin kalmomi 10,000 da aka amince ($\log_2(10000) \approx 13.3$ ragi/kalma) kuma ta tilasta kalmomi 4, ƙarfin shiga na ka'ida (theoretical entropy) shine ~53 ragi. Idan masu amfani suka zaɓi da yawa daga cikin kalmomi 100 da suka fi gama gari, ƙarfin shiga mai tasiri (effective entropy) ya ragu zuwa $4 \cdot \log_2(100) \approx 26.6$ ragi. Jagororin suna nufin tura $W_{eff}$ kusa da girman cikakken jerin.
8. Fahimta ta Asali & Ra'ayi na Manazarta
Fahimta ta Asali
Takardar ta kawo gaskiya mai mahimmanci, amma sau da yawa ana watsi da ita: mahaɗin mafi rauni a cikin tsaron kalmar sirri ba ƙarfin algorithm bane, amma fahimtar ɗan adam da ake iya hasasawa. Bonk da sauransu sun gano daidai cewa kawai tilasta tsayi shine mafita marar hankali; kamar ba mutane babban zane ne amma har yanzu suna zana faɗuwar rana iri ɗaya. Ainihin ƙirƙira shine tsarin ƙoƙarinsu na shiga cikin ƙwaƙwalwar ɗan adam da kanta—ta yin amfani da ka'idodin fahimta a matsayin kayan aikin ƙira don jagorantar masu amfani zuwa ga gine-gine masu tsaro amma masu sauƙin tunawa. Wannan ya wuce manufa a matsayin ƙuntatawa zuwa manufa a matsayin taimakon fahimta.
Tsarin Ma'ana
Hujja tana gudana bisa ma'ana daga matsala (kalmomin sirri sun lalace, ana amfani da kalmomin sirri ba daidai ba) zuwa hasashe (manufofin jagora na iya taimakawa) zuwa tabbatarwa (binciken kwanaki 39). Duk da haka, gudun ya yi ɗan tuntuɓe ta hanyar kasancewa mai yawan bege. Da'awar "amfani mai ma'ana" yana buƙatar bincike—mai ma'ana don maɓallin maɓalli na manajan kalmar sirri? Ko don shiga cikin sadarwar jama'a na yau da kullun? Haɗuwar "amfani na musamman" yana ɓata amfani. Aikin USENIX SOUPS akai-akai yana nuna cewa mahallin yana canza sakamakon amfani sosai.
Ƙarfi & Aibobi
Ƙarfi: Tsarin binciken dogon lokaci babban ƙarfi ne, yana magance aibi na yau da kullun a cikin binciken kalmar sirri na ɗan gajeren lokaci. Haɗa ilimin ƙwaƙwalwa yana da yabo kuma yana nuna fagen zuwa ƙarin ƙwaƙƙwaran ilimin tsaka-tsaki. Gano takamaiman "kura-kurai" yana ba da bayanan aiki ga masu ƙira da masu kai hari.
Aibi Mai Muhimmanci: Ingancin binciken na waje shine ƙafar Achilles. Binciken kwanaki 39 da aka sarrafa ba zai iya kwatanta gajiyar sarrafa takaddun shaida 50+, damuwa na shiga cikin gaggawa, ko ƙalubalen shigar da na'urori daban-daban akan allon taɓa wayar hannu. Bugu da ƙari, kamar yadda aka lura a cikin Jagororin Asalin Dijital na NIST, tsarin barazanar ya mai da hankali ne kawai akan fashewar layi. Ba ya magance phishing, leƙen kafada, ko malware—barazana inda tsayi ba ya ba da fa'ida.
Fahimta Mai Aiki
Ga Masu Gina Tsaro: Aiwatar da waɗannan manufofin ba su kaɗai ba, amma a matsayin wani ɓangare na dabarar sassa-sassa. Yi amfani da su don asusun masu daraja, waɗanda ba a cika samun damar su ba (misali, maɓallan maɓalli na rumbun kalmomin sirri, asusun gudanarwa na ababen more rayuwa) inda nauyin tunawa ya dace. Haɗa su da tsarin iyakance yawan amfani da tsarin faɗakarwa na karyewa.
Ga Manajoji na Samfura: Kar ku aiwatar da manufar kawai—aiwatar da jagora. Gina mayakan ƙirƙira masu mu'amala waɗanda ke ƙarfafa haɗuwar kalmomi na musamman da gani kuma suna ba da ra'ayin ƙarfin shiga (entropy) na ainihin lokaci. Sanya wasa a cikin tsarin gina "hoton tunani mai ƙarfi."
Ga Masu Bincike: Mataki na gaba shine gwada waɗannan manufofin akan ƙirar AI na harshe na ci gaba (kamar masu hasashe na tushen GPT). Dole ne a ƙididdige "tsaro mai ban sha'awa" akan harin zamani, ba kawai tsarin Markov na gargajiya ba. Yi haɗin gwiwa tare da masana kimiyyar kwakwalwa don inganta jagororin ƙwaƙwalwa.
A taƙaice, wannan takarda babban ci gaba ne, amma mataki ne a cikin tafiya mai tsawo. Ta tabbatar da cewa za mu iya horar da masu amfani don gina maɓallan rubutu mafi kyau, amma kuma ba da gangan ba ta nuna dalilin da yasa mafita ta ƙarshe ita ce matsar da bayan tsarin maɓalli-a-cikin-ka gaba ɗaya, zuwa ka'idodin WebAuthn masu jure wa phishing ko ƙirar gauraye. Kalmar sirri, ko da mai tsayi, ta kasance fasahar gadon da ake gyara da ƙwazo don yanayin barazana na zamani.
9. Aikace-aikace na Gaba & Alkiblar Bincike
Manufofin Daidaitawa & Masu Sanin Mahalli: Tsarin nan gaba zai iya daidaita buƙatun kalmar sirri bisa mahalli—mafi tsauri don banki, mafi sassauci don shafin labarai. Injin koyo zai iya nazarin tsarin ƙirƙirar mai amfani kuma ya ba da ra'ayi na sirri, na ainihin lokaci.
Haɗawa tare da Manajoji na Kalmomin Sirri: Kalmomin sirri masu tsayi sune maɓalli na asali na manajan kalmomin sirri. Bincike zai iya mai da hankali kan haɗin kai maras kyau, inda manajan ya taimaka samarwa da ƙarfafa sauƙin tunawa da kalmar sirri ɗaya, mai ƙarfi.
Tsare-tsaren Tabbatar da Ainihi na Gauraye: Haɗa kalmar sirri mai tsayi tare da na biyu, mai saurin ƙarewa (kamar taɓa wayar hannu) zai iya daidaita tsaro da dacewa. Kalmar sirri ta zama sirrin mai ƙarfin shiga (high-entropy) da ba a cika amfani da shi ba, yana rage nauyin tunawa.
Ƙirar Tsaro ta Neuromorphic: Yin amfani da zurfin fahimta daga ilimin kimiyyar kwakwalwa don ƙirar ayyukan tabbatar da ainihi waɗanda suka dace da ƙarfin ƙwaƙwalwar ɗan adam na asali (misali, ƙwaƙwalwar sarari, gane tsari) maimakon yaƙi da su.
10. Nassoshi
- Bonk, C., Parish, Z., Thorpe, J., & Salehi-Abari, A. (Shekara). Kalmomin Sirri Mai Tsayi: Yuwuwar da Iyakoki. [Sunan Taro ko Jarida].
- Komanduri, S., et al. (2011). Na Kalmomin Sirri da Mutane: Auna Tasirin Manufofin Ƙirƙirar Kalmar Sirri. Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (CHI '11).
- Cibiyar Ƙididdiga da Fasaha ta Ƙasa (NIST). (2017). Jagororin Asalin Dijital. NIST Special Publication 800-63B.
- USENIX Symposium on Usable Privacy and Security (SOUPS). (Shekaru Daban-daban). Proceedings. https://www.usenix.org/conference/soups
- Florêncio, D., & Herley, C. (2007). Babban Binciken Kan Halaye na Kalmar Sirri na Yanar Gizo. Proceedings of the 16th International Conference on World Wide Web.
- Bonneau, J., et al. (2012). Neman Maye Gurbin Kalmomin Sirri: Tsari don Kimantawa Kwatankwacin Tsarin Tabbatar da Yanar Gizo. IEEE Symposium on Security and Privacy.