Is a picture really worth a thousand words? Exploring the feasibility of graphical authentication systems

Angeli, Antonella De; Coventry, Lynne; Johnson, Graham I.; Renaud, Karen

doi:10.1016/j.ijhcs.2005.04.020

Cited by 230 publications

(172 citation statements)

References 20 publications

Supporting

Mentioning

162

Contrasting

Unclassified

Order By: Relevance

“…It is preferred by some users over PINor text-based passwords, as psychology studies show that the human brain remembers and recalls visual information better than numbers and letters [9]. According to a recent study, 40% of the Android users use patterns to protect their devices instead of a PIN [7].…”

Section: Introductionmentioning

confidence: 99%

Cracking Android Pattern Lock in Five Attempts

Ye¹,

Tang²,

Fang³

et al. 2017

Proceedings 2017 Network and Distributed System Security Symposium

View full text Add to dashboard Cite

Abstract-Pattern lock is widely used as a mechanism for authentication and authorization on Android devices. This paper presents a novel video-based attack to reconstruct Android lock patterns from video footage filmed using a mobile phone camera. Unlike prior attacks on pattern lock, our approach does not require the video to capture any content displayed on the screen. Instead, we employ a computer vision algorithm to track the fingertip movements to infer the pattern. Using the geometry information extracted from the tracked fingertip motions, our approach is able to accurately identify a small number of (often one) candidate patterns to be tested by an adversary. We thoroughly evaluated our approach using 120 unique patterns collected from 215 independent users, by applying it to reconstruct patterns from video footage filmed using smartphone cameras. Experimental results show that our approach can break over 95% of the patterns in five attempts before the device is automatically locked by the Android operating system. We discovered that, in contrast to many people's belief, complex patterns do not offer stronger protection under our attacking scenarios. This is demonstrated by the fact that we are able to break all but one complex patterns (with a 97.5% success rate) as opposed to 60% of the simple patterns in the first attempt. Since our threat model is common in day-to-day life, this paper calls for the community to revisit the risks of using Android pattern lock to protect sensitive information.

show abstract

Section: Introductionmentioning

confidence: 99%

Cracking Android Pattern Lock in Five Attempts

Ye¹,

Tang²,

Fang³

et al. 2017

Proceedings 2017 Network and Distributed System Security Symposium

View full text Add to dashboard Cite

show abstract

“…A User might choose the appropriate pixel for password. Mostly pass point is frequently used [15][16], if the given security is poor then password is quite simple ISSN: 2231-5381 http://www.ijcttjournal.org…”

Section: Graphical Passwords Using Normal Click Pointsmentioning

confidence: 99%

Secure User Authentication & Graphical Password using Cued Click-Points

Sahu¹,

Singh²

2014

IJCTT

View full text Add to dashboard Cite

Abstract:The major problem of user registration, mostly text base password, is well known. In the login user be inclined to select simple passwords which is frequently in mind that are straightforward for attackers to guess, difficult machine created password mostly complicated to user take in mind. User authenticate password using cued click points and Persuasive Cued Click Points graphical password scheme which includes usability and security evaluations. This paper includes the persuasion to secure user authentication & graphical password using cued click-points so that users select more random or more difficult to guess the passwords. In click-based graphical passwords, image or video frame that provide database to load the image, and then store all information into database. Mainly passwords are composed of strings which have letters as well as digits. Example is alpha-numeric type letters and digits.

show abstract

“…To overcome this problem, image sequences were used. Graphical passwords employ the cognitive ability to understand and recall images [9], [10]. Using cartoon or character sequences and graphical authentication systems including CAPTCHAs have been an alternative to knowledge-based passwords to biometric authentication [11], [12].…”

Section: Introductionmentioning

confidence: 99%

Using Theme-based Narrative Construct of Images as Passwords: Implementation and Assessment of Remembered Sequences

et al. 2017

View full text Add to dashboard Cite

Abstract-With many online engineering platforms such as virtual and remote laboratories designed for young or aged users, user authentication and passwords-based methods are being re-evaluated for tracking usage patterns and security. For ICT-enabled online engineering platforms, image-based humancentric approaches are gaining relevance for access frameworks. With the rubber-hose attacks, increased senior users, many existing systems are vulnerable to many attacks. This paper employs human uniqueness of narrative skills on an image-based password system for online platforms with focus on theme in the password generation process. To generate the secret password, a specially designed computer game was used. We used narrative constructs composed of cartoon image sequences to generate user-speci!c secret key. The durability of generated passwords and the authentication process while assessing the reconstruction process by a potential hacker was verified. For validating use of coerced attacks, under imposed psychological duress, users failed retrieving the password sequence suggesting the reliability as an anti-coercive attack cybersecurity tool. A set of experiments were used to analyze user behavior behind the image-based password system. EEG measurements demonstrated increased activity of " rhythms in F3 and FC5 channel bins and augmented levels of # rhythms in F3 and O1 channels, suggesting users added personalization to authentication more than in alpha-numeric password-based logins.

show abstract

Is a picture really worth a thousand words? Exploring the feasibility of graphical authentication systems

Cited by 230 publications

References 20 publications

Cracking Android Pattern Lock in Five Attempts

Cracking Android Pattern Lock in Five Attempts

Secure User Authentication & Graphical Password using Cued Click-Points

Using Theme-based Narrative Construct of Images as Passwords: Implementation and Assessment of Remembered Sequences

Contact Info

Product

Resources

About