On purely automated attacks and click-based graphical passwords

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2008, Pages 111-120

  Salehi Abari, Amirali ^a   Thorpe, Julie ^a   Van Oorschot, P C ^a  

^a CARLETON UNIVERSITY   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

AUTOMATION; COMPUTATIONAL METHODS; COMPUTER APPLICATIONS; SECURITY SYSTEMS;

AUTOMATED ATTACKS; AUTOMATED METHODS; COMPUTATIONAL MODELS; FOCUS OF ATTENTIONS; GRAPHICAL PASSWORDS; MULTIPLE IMAGES; VISUAL ATTENTIONS;

SECURITY OF DATA;

EID: 60649098534     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2008.18     Document Type: Conference Paper

References (33)

1. J.C. Birget, D. Hong, and N. Memon. Robust Discretization, with an Application to Graphical Passwords. IEEE Transactions on Information Forensics and Security, 1:395-399, 2006.
2. G. Blonder. Graphical Passwords. United States Patent 5559961, 1996.
3. Ian Britton. http://www.freefoto.com, site accessed Feb. 2, 2007.
4. S. Chiasson, A. Forget, P.C. van Oorschot, and R. Biddle. Influencing Users Towards Better Passwords: Persuasive Cued Click-Points. In HCI, 2008.
5. S. Chiasson, P.C. van Oorschot, and R. Biddle. A Second Look at the Usability of Click-Based Graphical Passwords. In SOUPS, 2007.
6. S. Chiasson, P.C. van Oorschot, and R. Biddle. Graphical Password Authentication Using Cued Click Points. In ESORICS, 2007.
7. D. Comaniciu and P. Meer. Mean Shift: A Robust Approach Toward Feature Space Analysis. IEEE Trans. PAMI, 24(5):603-619, 2002.
8. N. Cowan. The Magical Number 4 in Short-Term Memory: A Reconsideration of Mental Storage Capacity. Behavioral and Brain Sciences, 24:87-185, 2000.
9. D. Davis, F. Monrose, and M.K. Reiter. On User Choice in Graphical Password Schemes. In USENIX Security, 2004.
10. A. Dirik, N. Memon, and J.-C. Birget. Modeling User Choice in the PassPoints Graphical Password Scheme. In SOUPS, 2007.
11. R. C. Gonzalez and R. E. Woods. Digital Image Processing (3/e). Prentice-Hall, Inc., 2006.
12. C. Harris and M. Stephens. A Combined Corner and Edge Detection. In Proceedings of The Fourth Alvey Vision Conference, pages 147-151, 1988.
13. SFR IT-Engineering. The grafical login solution for your pocket pc - viskey. http://www.sfr-software.de/cms/EN/pocketpc/viskey/index.html, site accessed Sept. 18, 2008.
14. L. Itti and C. Koch. Computational Modeling of Visual Attention. Nature Reviews Neuroscience, 2(3):194-203, Mar 2001.
15. L. Itti, C. Koch, and E. Niebur. A Model of Saliency-Based Visual Attention for Rapid Scene Analysis. IEEE Trans. PAMI, 20(11):1254-1259, Nov 1998.
16. W. Jansen, S. Gavrilla, V. Korolev, R. Ayers, and Swanstrom R. Picture Password: A Visual Login Technique for Mobile Devices. NIST Report - NIS-TIR7030, 2003.
17. I. Jermyn, A. Mayer, F. Monrose, M. Reiter, and A. Rubin. The Design and Analysis of Graphical Passwords. In USENIX Security, 1999.
18. P. D. Kovesi. MATLAB and Octave Functions for Computer Vision and Image Processing. School of Computer Science & Software Engineering, The University of Western Australia. http://www.csse.uwa.edu.au/~pk/research/ matlabfns/.
19. S. Madigan. Picture Memory. In J.C. Yuille, editor, Imagery, Memory and Cognition. Lawrence Erlbaum Assoc., 1983.
20. F. Monrose and M. K. Reiter. Graphical Passwords. In L. Cranor and S. Garfinkel, editors, Security and Usability, chapter 9, pages 147-164. O'Reilly, 2005.
21. Vidhya Navalpakkam and Laurent Itti. Modeling the Influence of Task on Attention. Vison Research, 45:205-231, 2005.
22. A. Oliva, A. Torralba, M. Castelhano, and J. Henderson. Top Down Control of Visual Attention in Object Detection. Journal of Vision, 3(9):253-256, 2003.
23. N. Ouerhani, R. von Wartburg, H. Hugli, and R. Muri. Empirical Validation of the Saliency-based Model of Visual Attention. Electronic Letters on Computer Vision and Image Analysis, 3(1):13-24, 2004.
24. Passlogix. http://www.passlogix.com, site accessed Feb. 2, 2007.
25. G. Stockman and L. G. Shapiro. Computer Vision. Prentice Hall PTR, 2001.
26. Xiaoyuan Suo, Ying Zhu, and G. Scott Owen. Graphical Passwords: A Survey. In ACSAC, 2005.
27. J. Thorpe and P. C. van Oorschot. Human-Seeded Attacks and Exploiting Hot-Spots in Graphical Passwords. In USENIX Security, 2007.
28. P.C. van Oorschot and J. Thorpe. On Predictive Models and User-Drawn Graphical Passwords. ACM TISSEC, 10(4):1-33, November 2007.
29. Dirk Walther and Christof Koch. 2006 Special Issue: Modeling Attention to Salient Proto-objects. Neural Network, 19(9):1395-1407, 2006.
30. S. Wiedenbeck, J. Waters, J. Birget, A. Brodskiy, and N. Memon. PassPoints: Design and Longitudinal Evaluation of a Graphical Password System. Int. J. Hum.-Comput. Stud., 63(1-2):102-127, 2005.
31. S. Wiedenbeck, J. Waters, J.-C. Birget, A. Brodskiy, and N. Memon. Authentication Using Graphical Passwords: Basic Results. In HCII, 2005.
32. S. Wiedenbeck, J. Waters, J.-C. Birget, A. Brodskiy, and N. Memon. Authentication Using Graphical Passwords: Effects of Tolerance and Image Choice. In SOUPS, pages 1-12, 2005.
33. J.M. Wolfe. Guided Search 2.0: A Revised Model of Visual Search. Psychonomic Bulletin and Review, 1(2):202-238, 1994.