http://scholar.vt.edu See "Reset non-VT Password"
SYS-16400-20071114-15_04_16.pdf
http://www.goodsecurityquestions.com/designing.htm
http://www.itworld.com/tech-society/54193/beware-meta-password-reuse
http://it.slashdot.org/it/08/08/13/2241242.shtml
http://uit.tufts.edu/downloads/PassResetTips.pdf
https://banweb.uncg.edu/prod/hwzksspr.P_UncgSSPR
http://vuauth.villanova.edu/vusecurity/passwordSelfReset
http://sunset.usc.edu/csse/research/COCOMOII/cocomo_main.html
http://hornbeam.cs.ucl.ac.uk/hcs/teaching/GA10/lec5extra/ch08just.pdf
http://securityps.infosecmedia.com/whitepapers/TipsforAvoidingBadQuestions.pdf