Persuasive Cued Click-Points: Design, Implementation, and Evaluation of a Knowledge-Based Authentication Mechanism

Chiasson, Sonia; Stobert, Elizabeth; Forget, Alain; Biddle, Robert; Oorschot, Paul C. van

doi:10.1109/tdsc.2011.55

Cited by 140 publications

(123 citation statements)

References 35 publications

Supporting

Mentioning

119

Contrasting

Order By: Relevance

“…To avoid click-point patterns in PassPoints, Chiasson et al proposed an improvement called Cued Click-Points (CCP) [4]. Instead of multiple click-points on one image, in CCP users create multiple click-points, each on a different image.…”

Section: Cued-recall-based Schemesmentioning

confidence: 99%

“…In the latter case, authentication has to be finished regardless, but the legitimate user can detect her/his error. To counter so called hot-spots (points that have been noticed to be chosen significantly more often than other click-points), Chiasson et al proposed Persuasive Cued Click-Points (PCCP) [4]. In the authentication phase, they employ persuasive technology by means of an additional viewport during enrollment.…”

Section: Cued-recall-based Schemesmentioning

confidence: 99%

“…In the authentication phase, they employ persuasive technology by means of an additional viewport during enrollment. While the system offers the possibility to shuffle the viewport, the authors found that the number of hot-spots is significantly reduced and the distribution of click-points in PCCP does not significantly differ from a random distribution [4]. PassPoints and PCCP have an extensive coverage in research literature enabling estimates for the effective password space.…”

Section: Cued-recall-based Schemesmentioning

confidence: 99%

“…Chiasson et al present in [4] a comparison of the three graphical cued-recall-based authentication schemes PCCP, CCP and PassPoints. They cover usability and security aspects with results from eight user studies.…”

Section: Related Workmentioning

confidence: 99%

“…Therefore, we decided to adopt their PassPoints configuration and use an image with a resolution of 400x600 px. However, we follow prior studies, which argue to use 9 px for the tolerance margin instead of 10 px as an uneven number can be centered around one pixel while it is is unclear how this should be done for an even margin [4]. Regarding the image, we decided to use the people image used by Dirik et al as the sole image for our PassPoints implementation, as it scored best in their evaluation.…”

Section: Cued-recall-based Schemesmentioning

confidence: 99%

See 4 more Smart Citations

Authentication Schemes - Comparison and Effective Password Spaces

Mayer

Volkamer

Kauer

2014

Information Systems Security

View full text Add to dashboard Cite

Abstract. Text passwords are ubiquitous in authentication. Despite this ubiquity, they have been the target of much criticism. One alternative to the pure recall text passwords are graphical authentication schemes. The different proposed schemes harness the vast visual memory of the human brain and exploit cued-recall as well as recognition in addition to pure recall. While graphical authentication in general is promising, basic research is required to better understand which schemes are most appropriate for which scenario (incl. security model and frequency of usage). This paper presents a comparative study in which all schemes are configured to the same effective password space (as used by large Internet companies). The experiment includes both, cued-recall-based and recognition-based schemes. The results demonstrate that recognition-based schemes have the upper hand in terms of effectiveness and cued-recall-based schemes in terms of efficiency. Thus, depending on the scenario one or the other approach is more appropriate. Both types of schemes have lower reset rates than text passwords which might be of interest in scenarios with limited support capacities.

show abstract

Section: Cued-recall-based Schemesmentioning

confidence: 99%

Section: Cued-recall-based Schemesmentioning

confidence: 99%

Section: Cued-recall-based Schemesmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Section: Cued-recall-based Schemesmentioning

confidence: 99%

See 3 more Smart Citations

Authentication Schemes - Comparison and Effective Password Spaces

Mayer

Volkamer

Kauer

2014

Information Systems Security

View full text Add to dashboard Cite

show abstract

A novel method to authenticate in website using CAPTCHA‐based validation

Krishnamoorthy

Thankappan

2016

Security Comm Networks

View full text Add to dashboard Cite

Web security has become vital, as the practice of internet is embryonic nowadays. To protect network from adversaries and to improve web security, researches has been done for a long time. The most solemn issue is phishing attack as well as access of web services by illicit users. Many users are not even sentient about phishing websites. Phishing is a kind of falsified approach employed by an attacker to get sensitive information from the users who are unaware of phishing attacks. User authorization is a noteworthy security measure that confirms the integrity of the user and ensures the confidentiality associated user data. The significant work done here is to prevent web users from entering into phishing websites and to provide web access only to authorized users via web server. Applications based on CAPTCHA provides more security against attacks. The proposed novel technique identifies phishing websites and authorized web access using Cropped Image CAPTCHA algorithm. The image CAPTCHA technique is not easily prone to web attacks moreover. Threshold values and conditions are defined. Based on this, Cropping-Based Image CAPTCHA System appraises if the website is phishing website or legitimate website furthermore denies acquiescence to web admittance for unconstitutional users. Copyright

show abstract

SwipeVLock: A Supervised Unlocking Mechanism Based on Swipe Behavior on Smartphones

Tan²,

Meng

et al. 2019

Machine Learning for Cyber Security

View full text Add to dashboard Cite

Smartphones have become a necessity in people's daily lives, and changed the way of communication at any time and place. Nowadays, mobile devices especially smartphones have to store and process a large amount of sensitive information, i.e., from personal to financial and professional data. For this reason, there is an increasing need to protect the devices from unauthorized access. In comparison with the traditional textual password, behavioral authentication can verify current users in a continuous way, which can complement the existing authentication mechanisms. With the advanced capability provided by current smartphones, users can perform various touch actions to interact with their devices. In this work, we focus on swipe behavior and aim to design a machine learning-based unlock scheme called SwipeVLock, which verifies users based on their way of swiping the phone screen with a background image. In the evaluation, we measure several typical supervised learning algorithms and conduct a user study with 30 participants. Our experimental results indicate that participants could perform well with SwipeVLock, i.e., with a success rate of 98% in the best case.

show abstract

Persuasive Cued Click-Points: Design, Implementation, and Evaluation of a Knowledge-Based Authentication Mechanism

Cited by 140 publications

References 35 publications

Authentication Schemes - Comparison and Effective Password Spaces

Authentication Schemes - Comparison and Effective Password Spaces

A novel method to authenticate in website using CAPTCHA‐based validation

SwipeVLock: A Supervised Unlocking Mechanism Based on Swipe Behavior on Smartphones

Contact Info

Product

Resources

About