Password Cracking Using Probabilistic Context-Free Grammars. - Matt Weir; Sudhir Aggarwal; Breno de Medeiros; Bill Glodek (SP, 2009)

Testing metrics for password creation policies by attacking large sets of revealed passwords. - Matt Weir; Sudhir Aggarwal; Michael P. Collins; Henry Stern (CCS, 2010)