检索结果-内蒙古大学图书馆

10th International Conference on Cyber Warfare and Security (ICCWS)

作者： Vorster, Jo van Heerden, Renier Univ Liverpool Liverpool L69 3BX Merseyside England CSIR Informat Warfare ZA-0001 Pretoria South Africa Rhodes Univ Grahamstown South Africa

ISBN: (纸本)9781910309971

graphical passwords schemas are becoming more main-stream. There are many different approaches to graphical passwords, each with its own drawbacks and advantages. There has been many studies to suggest that graphical passwords should be stronger in terms of security because people are better at remembering them. It is well known that the key-space for graphical passwords are at least equivalent to alpha-numeric passwords and can even be much stronger, depending on the schema. Similar to conventional passwords, graphical passwords may have patterns. A pattern that has been widely reported in the literature and studied in some detail are that of hotspots. That is, a high percentage of people will select the same spots on an image. This paper focus on a quantitative analysis of graphical passwords. During this study users from commercial companies were asked to enter graphical passwords. These passwords were then analysed and patterns identified. Users were also asked what there password selection strategies are. The combination of this information enable a qualitative analysis of graphical passwords. The results show that graphical passwords are less secure than expected, that there are a number of patterns that limit the key-space significantly and thus reduce the strength of such password schemas. Users were also asked about their perception of the security of graphical passwords. The survey suggest that users are divided in their opinion on how secure such technologies are. Lastly we also report on reasons that users gave for why they think such technology are not yet ready for use as a security mechanism in an organizational context.

关键词： graphical passwords access management

来源：评论

学校读者我要写书评

暂无评论

graphical passwords - A Discussion 30

Graphical Passwords - A Discussion

引用

30th IEEE International Conference on Advanced Information Networking and Applications (IEEE AINA)

作者： Kayem, Anne V. D. M. Univ Cape Town Dept Comp Sci ZA-7701 Cape Town South Africa

ISBN: (纸本)9781509024612

Authentications, on web applications and service platforms such as the ones that enable collaborative information sharing and resource management, are typically handled via text-based passwords. From a security usability perspective, text-based passwords are easy to use and familiar to users. Text-based passwords however, are prone to attacks that stem from challenges that users' face with memorability. Text-based password memorability issues pose problems for service providers on platforms where identity management is a key concern. Application examples emerge in social media, online commerce, and also in the management of critical infrastructure such as smart micro-grids. A further concern is that, large volumes of sensitive information are made available and shared on these applications and so constitute an attractive target for obtaining data in adversarial ways in order to provoke impersonation and inferential attacks, for instance. In this paper, we discuss the pros and cons of using graphical passwords instead of text-based passwords on information sharing platforms. We support our discussion by considering two graphical password schemes based on the principles of recall and cued-recall respectively which are philosophically similar to text-based passwords. Results from our proof-of-concept implementation indicate that, in comparison to text-based and recall graphical passwords, cued-recall graphical passwords are a better authentication mechanism in terms of memorability and password security.

关键词： Access Control Authentication Data Sharing graphical passwords Text based passwords

来源：评论

学校读者我要写书评

暂无评论

graphical passwords IMPLIES ON TOLERANCE PASSWORD, IMAGE CHOICE, AND PUZZLE LOGIN SECURITY

GRAPHICAL PASSWORDS IMPLIES ON TOLERANCE PASSWORD, IMAGE CHO...

引用

International Conference on Information Communication and Embedded Systems (ICICES)

作者： Gunaseeli, L. Canessane, R. Aroul Sathyabama Univ Sch Comp Madras Tamil Nadu India

ISBN: (纸本)9781509061358

In this proposed scheme, we presenting a new-fangled security primordial using on firm AI harms click spell, It may nothing only tries equal to progress together and make it to defence as well as using of puzzle. The aims it may to develop the security of puzzle IMAGE. Click spell, Stab to do these different goals like security-Puzzle Login using bubble sort;This may use-to develops the login of passing the test values;to afford a dictionary function for abusers to learn with reference to the importance and the spelling of alphabet words. In the addition, the user & password can be placed on the top of Image Selection. Security-Image puzzles solving using AES algorithm and OTP Generation. Security primordial is based on firm AI harms. A fundamental user & password security is to create Image Selection. Using Image Captcha and verification using Bitmap pattern, verification using images as convert into Binary.

关键词： graphical passwords Image Selection password entropy user behavior image puzzle

来源：评论

学校读者我要写书评

暂无评论

User interface design affects security: patterns in click-based graphical passwords

引用

INTERNATIONAL JOURNAL OF INFORMATION SECURITY 2009年第6期8卷 387-398页

作者： Chiasson, Sonia Forget, Alain Biddle, Robert van Oorschot, P. C. Carleton Univ Sch Comp Sci Ottawa ON K1S 5B6 Canada Carleton Univ Human Oriented Technol Lab Ottawa ON K1S 5B6 Canada

Design of the user interface for authentication systems influences users and may encourage either secure or insecure behaviour. Using data from four different but closely related click-based graphical password studies, we show that user-selected passwords vary considerably in their predictability. Our post-hoc analysis looks at click-point patterns within passwords and shows that PassPoints passwords follow distinct patterns. Our analysis shows that many patterns appear across a range of images, thus motivating attacks which are independent of specific background images. Conversely, Cued Click-Points (CCP) and PersuasiveCued Click-Points (PCCP) passwords are nearly indistinguishable from those of a randomly generated simulated dataset. These results provide insight on modeling effective password spaces and on how user interface characteristics lead to more (or less) security resulting from user behaviour.

关键词： Usable security graphical passwords Authentication

来源：评论

学校读者我要写书评

暂无评论

Towards enhancing click-draw based graphical passwords using multi-touch behaviours on smartphones

引用

COMPUTERS & SECURITY 2017年 65卷 213-229页

作者： Meng, Weizhi Li, Wenjuan Kwok, Lam-For Choo, Kim-Kwang Raymond Tech Univ Denmark Dept Appl Math & Comp Sci Lyngby Denmark City Univ Hong Kong Dept Comp Sci Hong Kong Hong Kong Peoples R China Univ Texas San Antonio Dept Informat Syst & Cyber Secur San Antonio TX USA

graphical passwords (GPs) are recognised as one of the potential alternatives in addressing the limitations in conventional text-based password authentication. With the rapid development of mobile devices (i.e., the increase of computing power), GP-based systems have already been implemented not only on PCs, but also on smartphones to authenticate legitimate users and detect impostors. However, as compared to common computers, we identify that users are able to perform some distinct actions like,multi-touch on smartphones. The multi-touch is a distinguished feature on current smartphones and its impact on graphical password creation is an important topic in the literature. In this paper, our interest is to investigate the influence of multi-touch behaviours on users' habit in creating graphical passwords, especially on click-draw based GPs (shortly CD-GPS) on mobile devices. In the evaluation, we develop a multi-touch enabled CD-GPS on smartphones and conduct two major experiments with a total of 90 participants. The study results indicate that participants are more likely to use multi-touch features to create their secrets, and multi-touch can make a positive impact on creating graphical passwords (i.e., offering higher success rates and less time consumption). 2016 Elsevier Ltd. All rights reserved.

关键词： graphical passwords User authentication on smartphones Multi-touch Human factors Mobile security

来源：评论

学校读者我要写书评

暂无评论

Investigating the Viability of Multifactor graphical passwords for User Authentication

引用

INFORMATION SECURITY JOURNAL 2014年第1-2期23卷 10-21页

作者： Jali, Mohd Zalisham Furnell, Steven M. Dowland, Paul S. USIM Fac Sci Technol Bandar Baru Nilai 71800 Negeri Sembilan Malaysia Univ Plymouth Ctr Secur Commun & Network Res CSCAN Plymouth Devon England Edith Cowan Univ Sch Comp & Secur Sci Perth WA Australia

Authentication using images (i.e., graphical passwords) is claimed to be one of the alternatives for overcoming weaknesses in the traditional username and password authentication. This paper reports on the study to explore the feasibility of combining two graphical password methods for better security. A graphical password prototype scheme, the Enhanced graphical Authentication System (EGAS), was developed (which combines the methods of clicking on the image (i.e., click-based) and selecting a series of images (i.e., choice-based). The EGAS was tested by 30 participants randomly chosen from the authors' university and two evaluations were made;namely user performance of the combined method and the feasibility of authentication strategies toward the introduced method itself. From both evaluations, it is found that positive results have been obtained, which suggest that these methods could be combined together effectively without giving impediment to users.

关键词： authentication graphical passwords knowledge-based authentication security usability

来源：评论

学校读者我要写书评

暂无评论

Exploiting predictability in click-based graphical passwords

引用

JOURNAL OF COMPUTER SECURITY 2011年第4期19卷 669-702页

作者： van Oorschot, P. Thorpe, Julie Carleton Univ Sch Comp Sci Ottawa ON Canada Univ Ontario Inst Technol Fac Business & Informat Technol Oshawa ON Canada

We provide an in-depth study of the security of click-based graphical password schemes like PassPoints (Weidenbeck et al., 2005), by exploring popular points (hot-spots), and examining strategies to predict and exploit them in guessing attacks. We report on both short-and long-term user studies: one lab-controlled, involving 43 users and 17 diverse images, the other a field test of 223 user accounts. We provide empirical evidence that hot-spots do exist for many images, some more so than others. We explore the use of "human-computation" (in this context, harvesting click-points from a small set of users) to predict these hot-spots. We generate two "human-seeded" attacks based on this method: one based on a first-order Markov model, another based on an independent probability model. Within 100 guesses, our first-order Markov model-based attack finds 4% of passwords in one image's data set, and 10% of passwords in a second image's data set. Our independent model-based attack finds 20% within 2(33) guesses in one image's data set and 36% within 2(31) guesses in a second image's data set. These are all for a system whose full password space has cardinality 2(43). We evaluate our first-order Markov model-based attack with cross-validation of the field study data, which finds an average of 7-10% of user passwords within 3 guesses. We also begin to explore some click-order pattern attacks, which we found improve on our independent model-based attacks. Our results suggest that these graphical password schemes (with parameters as originally proposed) are vulnerable to offline and online attacks, even on systems that implement conservative lock-out policies.

关键词： graphical passwords PassPoints passwords hot spots human-seeded attacks human computation click-order patterns password guessing dictionary attack empirical studies user choice

来源：评论

学校读者我要写书评

暂无评论

The Presentation Effect on graphical passwords 14

The Presentation Effect on Graphical Passwords

引用

32nd Annual ACM Conference on Human Factors in Computing Systems (CHI)

作者： Thorpe, Julie Al-Badawi, Muath MacRae, Brent Salehi-Abari, Amirali Univ Ontario Inst Technol Oshawa ON Canada Univ Toronto Dept Comp Sci Toronto ON Canada

ISBN: (纸本)9781450324731

We provide a simple yet powerful demonstration of how an unobtrusive change to a graphical password interface can modify the distribution of user chosen passwords, and thus possibly the security it provides. The only change to the interface is how the background image is presented to the user in the password creation phase-we call the effect of this change the "presentation effect". We demonstrate the presentation effect by performing a comparative user study of two groups using the same background image, where the image is presented in two different ways prior to password creation. Our results show a statistically different distribution of user's graphical passwords, with no observed usability consequences.

关键词： user authentication passwords graphical passwords

来源：评论

学校读者我要写书评

暂无评论

TwoStep: An Authentication Method Combining Text and graphical passwords

TwoStep: An Authentication Method Combining Text and Graphic...

引用

4th International MCETECH Conference on e-Technologies

作者： van Oorschot, P. C. Wan, Tao Carleton Univ Sch Comp Sci Ottawa ON K1S 5B6 Canada

ISBN: (纸本)9783642011863

Text-based passwords alone are subject to dictionary attacks as users tend to choose weak passwords ill favor of memorability, as well as phishing attacks. Many recognition-based graphical password schemes alone, in order to offer sufficient security, require a number of rounds of verification, introducing usability issues. We suggest a hybrid user authentication approach combining text passwords, recognition-based graphical passwords, and a two-step process, to provide increased security with fewer rounds than Such graphical passwords alone. A variation of this two-step authentication method, which we have implemented and deployed, is in use ill the real world.

关键词： graphical passwords User Authentication Phishing Security

来源：评论

学校读者我要写书评

暂无评论

Do Background Images Improve "Draw a Secret" graphical passwords?

Do Background Images Improve "Draw a Secret" Graphical Passw...

引用

14th ACM Conference on Computer and Communication Security

作者： Dunphy, Paul Yan, Jeff Newcastle Univ Sch Comp Sci Newcastle Upon Tyne NE1 7RU Tyne & Wear England

ISBN: (纸本)9781595937032

Draw a secret (DAS) is a representative graphical password scheme. Rigorous theoretical analysis suggests that DAS supports an overall password space larger than that of the ubiquitous textual password scheme. However, recent research suggests that DAS users tend to choose weak passwords, and their choices would render this theoretically sound scheme less secure in real life. In this paper we investigate the novel idea of introducing background images to the DAS scheme, where users were initially supposed to draw passwords on a blank canvas overlaid with a grid. Encouraging results from our two user studies have shown that people aided with background images tended to set significantly more complicated passwords than their counterparts using the original scheme. The background images also reduced other predictable characteristics in DAS passwords such as symmetry and centering within the drawing grid, further improving the strength of the passwords. We estimate that the average strength of successfully recalled passwords in the enhanced scheme was increased over those created using the original scheme by more than 10 bits. Moreover, a positive effect was observed with respect to the memorability of the more complex passwords encouraged by the background images.

关键词： Usable security graphical passwords authentication Draw a Secret

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：