Information
An online security firm has surveyed customers from a large bank to investigate the quality of their passwords. The survey classifies passwords into three categories.
Bad: 20% use this category password
Okay: 35% use this category password
Good: 45% use this category password
The security firm has enlisted the help of white hat hackers to crack a sample of passwords, from all categories. The white hat hackers have reported that within a week of automated hacking, bad passwords have a 99.5% chance of being cracked, okay passwords have an 8% chance of being cracked, and good passwords have a 0.15% chance of being cracked.
The Questions
(a) What proportion of the bank’s customers are at risk of having their password cracked within a week of automated hacking?
(b) If a customer’s account has been hacked, what is the probability they didn’t choose a bad password?
(c) One of the security firm’s recommendations is for the bank to install a widget on their website to try and prevent some bad passwords from being accepted. How successful will this widget need to be in order to reduce the overall risk of a customer’s password being cracked to 10%? You may assume that the widget is equally likely to detect any bad password, and if successful the customer will always choose either an okay or good password, but with the same relative likelihood as before.
What have I done?
How have I defined the events?
Let $B$ be the event "a customer has used a bad password"
Let $O$ be the event "a customer has used an okay password"
Let $G$ be the event "a customer has used a good password"
Let $H$ be the event "the customer's password has been hacked"
Stating the known probabilities:
Pr$(B) = 0.20$ $\space$ Pr$(H | B) = 0.995$
Pr$(O) = 0.35$ $\space$ Pr$(H | O) = 0.08$
Pr$(G) = 0.45$ $\space$ Pr$(H | G) = 0.0015$
For (a) I used law of total probability to obtain Pr(H) = 22.77% I am confident in this result.
For (b) I used complement rule of conditional probability and Baye's theorem to get Pr$(\overline{B} | H) = $ 12.6% I am also confident in this result.
For (c) this is where I need help guys I don't even know where to start.
$$\text{Thank you in advance!}$$