John Campbell Dale Kleeman Wanli Ma The Good and Not So Good of Enforcing Password Composition Rules. 2-8 2007 16 Information Systems Security 1 http://dx.doi.org/10.1080/10658980601051375 db/journals/isjgp/isjgp16.html#CampbellKM07