Evaluation of Recognition-Based Graphical Password Schemes in Terms of Usability and Security Attributes

Abstract

<p>User Authentication is a critical component in information security. Several widely used mechanisms for security to protect services from illegal access include alphanumerical usernames passwords. However, there are several drawbacks attached in this method. For instance, the users themselves usually those passwords that are easy to guess. As difficult passwords are difficult to recall. A new alternative is the graphic-based password and there has been a growing trend in the use of such a password. The human psychology study reveals that humans find it easier to remember pictures as opposed to words. There are two main aspects to the graphical password scheme, namely security and usability. This study comprises of a comprehensive research in the current Recognition-Based graphical password schemes. The common usability attributes and possible attacks on the Recognition-Based graphical password are reviewed, identified and examined in detail. There are several previous surveys on the graphical passwords. The latest research review and summarize graphical password systems concisely and at the same time, analyze usability features for every design. However it was found that there is not a single method that has the most resounding usability attributes. Therefore, this research suggests a set of usability attributes that can be applied into a single Recognition-Based graphical password system. In addition, this study examines and compares success rates on login, login time and memorability of existing systems which are the usability measures most often reported in user studies of graphical passwords. Lastly, a comparison table is revealed to put forth the limitations and strengths of each approach in terms of security and usability.</p>

Enhanced model for ergonomic evaluation of information systems: application to scientific research information system

“…It should be noted that the most used methods are listed by ISO / TR 16982: 2002 [19]. They are most often focused on the utility and usability criteria of the author [20] [21]. In this paper, we use the classification of authors [18], which classifies evaluation methods into 3 main approaches as shown in Figure 1: a.…”

Dashboard of intelligent transportation system (ITS) using mobile agents strategy on notification authentication process

“…There are several security levels which concerns in authentication like password schemes. Users have a tendency to use easy-to-remember passwords [22], [23], use the similar password for different accounts [3], and store these passwords on their systems insecurely, even if the case of strong password. This user may be vulnerable to threats especially family; thus forcing him to give the password to the enemy.…”

“…Most computer systems, Internet-based environments, and networks use password authentication [3]. Once a Password (PW) or One Time Password (OTP) which is valid for the only certain amount of time or one session [4] has been entered, the system looks up it in the password hash.…”

Continuous m-Health Data Authentication Using Wavelet Decomposition for Feature Extraction

“…It is estimated that the worldwide usage of the most popular mobile device, smartphones, is expected to reach an estimated 3.8 billion and 40% of world population expected to own a smart phone by 2021 [ 1 ]. Smart devices are valuable devices not only because of their sophistication but also because they are used to store sensitive data like health, business, and financial information data [ 2 ]. Additionally, most social networking applications such as Facebook, Instagram, Snapchat, and WhatsApp can be accessed through these devices with internet connection.…”