Modeling user choice in the PassPoints graphical password scheme

ACM International Conference Proceeding Series

Volumn 229, Issue , 2007, Pages 20-28

  Dirik, Ahmet Emir ^a   Memon, Nasir ^a   Birget, Jean Camille ^b  

^a POLYTECHNIC UNIVERSITY   (United States)

^b RUTGERS UNIVERSITY   (United States)

Author keywords

Dic tionary attack; Graphical passwords; Password entropy; User behavior

Indexed keywords

DISTRIBUTED COMPUTER SYSTEMS; GRAPH THEORY; MATHEMATICAL MODELS; PROBABILITY;

DIC-TIONARY ATTACK; GRAPHICAL PASSWORDS; PASSWORD ENTROPY; USER BEHAVIOR;

SECURITY OF DATA;

EID: 36848999302     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1280680.1280684     Document Type: Conference Paper

References (31)

1. A. Adams, M.A. Sasse, "Users are not the enemy: why users comprise computer security mechanisms and how to take remedial measures," Communications of the ACM 4 (1999) 41-46.
2. S. Akula, V. Devisetty, "Image based registration and authentication system," Midwest Instruction and Computing Symposium (2004).
3. J.C. Birget, D. Hong, N. Memon, "Graphical passwords based on robust discretization", IEEE Transactions on Information Forensics and Security 1(3) (Sept. 2006) 395-399. (Earlier version: Cryptology ePrint Archive, http://eprint.iacr.org/2003/168, Aug. 2003.)
4. G.E. Blonder, "Graphical Passwords", United States Patent 5559961 (1996).
5. M. Boroditsky, "Passlogix Password Schemes" (2002). http://www.passlogix.com
6. D. Comaniciu, P. Meer, "Mean shift analysis and applications", 7th International Conference on Computer Vision (1999) 1197-1203.
7. D. Comaniciu, P. Meer, "Mean shift: A robust approach toward feature space analysis", IEEE Transactions on pattern analysis and machine intelligence 24(5) (2002) 603-619.
8. L. Coventry, A. De Angeli, G. Johnson, "Usability and biometric verification at the ATM interface", SIGCHI Conference on Human Factors in Computing Systems (CHI'03) (2003) 153-160.
9. D. Davis, F. Monrose, M. Reiter, "On user choice in graphical password schemes", 13th Usenix Security Symposium (2004) 1-14.
10. R. Dhamija, A. Perrig, "Déjà Vu: User study using images for authentication", Ninth Usenix Security Symposium (2000) 14-17.
11. G. Elias, G. Sherwin, J. Wise, "Eye movements while viewing NTSC format television", SMPTE Psychophysics Subcommittee, white paper (1984).
12. J. Findlay, "The visual stimulus for saccadic eye movement in human observers", Perception (1980) 7-21.
13. D. Hong, S. Man, B. Hawes, M. Mathews, "A password scheme strongly resistant to spy ware", Proc. International Conference on Security and Management, Las Vegas NV (2004) 94-100.
14. I. Jeremyn, A. Mayer, F. Monrose, M.K. Reiter, A.D. Rubin, "The design and analysis of graphical passwords", Proc. 8th Usenix Security Symposium (1999)
15. W. Ku, M. Tsaur, "A remote user authentication scheme using strong graphical passwords", IEEE Conference on Local Computer Networks (2005) 351-357.
16. Jiebo Luo, Amit Singhal, "On measuring low-level saliency in photographic images", Proc. IEEE Conference on Computer Vision and Pattern Recognition (2000) 84-89.
17. R. Morris, K. Thompson, "Password security. A case study", Comm. ACM 22 (1979) 594-597.
18. W. Osberger, A.J. Maeder, "Automatic identification of perceptually important regions in an image", Proc. 14th International Conference on Pattern Recognition (1998).
19. "The Passfaces System", Real User Technology and Products, (2004); http://www.realuser.com/published/RealUserTechnologyAndProducts.pdf
20. A.S. Patrick, A.C. Long, S. Flinn, "HCI and security systems", Proc. SIGCHI Conference on Human Factors in Computing Systems (2004) 24-29.
21. J. Senders, "Distribution of attention in static and dynamic scenes", Proc. of SPIE, 3016 (1997) 186-194.
22. L. Sobrado, J.C. Birget, "Graphical passwords", The Rutgers Scholar, An Electronic Bulletin for Undergraduate Research, vol. 4 (2002).
23. X. Suo, Y. Zhu, G.S. Owen, "Graphical passwords: A survey", 21st Annual Computer Security Applications Conference (ACSAC'05) (2005) 463-472.
24. J. Thorpe, P.C. van Oorschot, " Towards secure design choices for implementing graphical passwords", Computer Security Applications Conference (2004).
25. M. Tkalcic, J.F. Tasic, "Colour spaces: perceptual, historical and applicational background", EUROCON 2003, Computer as a Tool (2003) 304-308.
26. D. Weinshall, S. Kirkpatrick, "Passwords you'll never forget, but can't recall", Conference on Human Factors in Computing Systems (CHI) (2004) 1399-1402.
27. S. Wiedenbeck, J. Waters, J.C. Birget, A. Brodskiy, N. Memon, "Design and longitudinal evaluation of a graphical password system", International J. of Human-Computer Studies 63 (2005) 102-127.
28. S. Wiedenbeck, J. Waters, J.C. Birget, A. Brodskiy, N. Memon, "PassPoints: Design and longitudinal evaluation of a graphical password system", International Journal of Human Computer Studies (2005) 102-127.
29. A. Yarbus, Eye Movements and Vision, Plenum Press, New York, NY (1967).
30. J. Zhao, Y. Shimazu, K. Ohta, R. Hayasaka, Y. Matsushita, "An outstandingness oriented image segmentation and its application", ISSPA (1996) 45-48.
31. J. Thorpe, P.C. van Oorschot, "Human-seeded attacks and exploiting hot-spots in graphical passwords", TR-07-05, School of Computer Science, Carleton University, (Feb. 2007), (Added in proofs).