Markov Model

• “Is this a bad password?”…same as…

• “Was this password generated by this Markov model?”

• Passwords that are likely to be generated by the model are rejected

• Good results for a second-order model