“Password Cracking Using Probabilistic Context-Free Grammars,” by Matt Weir, Sudhir Aggarwal, Breno de Medeiros, and Bill Glodek, published in the 2009 IEEE Symposium on Security and Privacy, was awarded a Test-of-Time Award at the 42nd S&P symposium in May 2021. For those interested, the 4-minute acceptance video portion can be found here.

From the email received by the authors from the Award Committee: “This award was initiated in 2019 year’s 40th anniversary symposium to recognize papers published at the “Oakland” Conference that have made a lasting impact on the field. Our committee was charged with identifying award-worthy papers that were published in the IEEE Security and Privacy Symposia from 2009 through 2011. The committee selected three papers published from those 3 symposia to recognize for their broad and lasting impact on both research and practice in computer security and privacy for awards, including your paper.”