Authentication using graphical passwords: Effects of tolerance and image choice

ACM International Conference Proceeding Series

Volumn 93, Issue , 2005, Pages 1-12

  Wiedenbeck, Susan ^a   Waters, Jim ^a   Birget, Jean Camille ^b   Brodskiy, Alex ^c   Memon, Nasir ^c  

^a DREXEL UNIVERSITY   (United States)

^b RUTGERS UNIVERSITY   (United States)

^c POLYTECHNIC UNIVERSITY   (United States)

Author keywords

Authentication; Graphical passwords; Password images; Tolerance

Indexed keywords

ALPHANUMERIC PASSWORDS; GRAPHICAL PASSWORD; GRAPHICAL PASSWORDS; HUMAN FACTORS; HUMAN USERS; IMAGE STUDY; MARGIN OF ERROR; PASS POINT; PASSWORD SYSTEMS; USER PERFORMANCE;

AUTHENTICATION; HUMAN ENGINEERING;

SECURITY OF DATA;

EID: 60649116908     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1073001.1073002     Document Type: Conference Paper

References (35)

1. Adams, A. and Sasse, M.A. Users are not the enemy. CACM 42, 12 (1999), 41-46.
2. Bahrick, H.P. semantic memory content in permastore: Fifty years of memory for Spanish learned in school. Journal of Verbal Learning and Verbal Behavior 14 (1984), 1-24.
3. Biederman, I., Glass, A.L. and Stacy, E.W. Searching for objects in real world scenes. Journal of Experimental Psychology 97 (1973), 22-27.
4. Birget, J.C., Hong, d., Memon, N. Robust discretization, with application to graphical passwords. Cryptology ePrint Archive, http://eprint.iacr.org/2003/ 168, accessed Jan. 17, 2005.
5. Blonder, G.E. Graphical passwords. United States Patent 5559961, (1996).
6. Borges, M.A., Stepnowsky, M.A., and Holt, L.H. Recall and recognition of words and pictures by adults and children. Bulletin of the Psychonomic Society 9, 2 (1977), 113-114.
7. Boroditsky, M. Passlogix Password Schemes. http://www.passlogix.com. Accessed Dec. 2, 2002.
8. Bradley, M.M., Grenwald, M.K., Petry, M.C. and Lang, P.J. Remembering pictures: Pleasure and arousal in memory. Journal of Experimental Psychology 81, 2 (1992), 379-390.
9. Brown, A.S., Bracken, E., Zoccoli, S. and Douglas, K. Generating and remembering passwords. Applied Cognitive Psychology 18 (2004), 641-651.
10. Brostoff, S. and Sasse, M.A. Are Passfaces more usable than passwords: A field trial investigation. In People and Computers XIV - Usability or Else: Proceedings of HCI 2000 (Bath, U.K., Sept. 8-12, 2000). Springer Verlag, 405- 424.
11. Coventry, L., De Angeli, A. and Johnson, G. Usability and biometric verification at the ATM interface. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (CHI'03) (Fort Lauderdale, FL, USA, April 5-10, 2003). ACM Press, New York, NY, 153-160.
12. Davis, D. Monrose, F. and Reiter, M.K. On user choice in graphical password schemes. In Thirteenth Usenix Security Symposium (San Diego, CA, USA, Aug. 9-13, 2004). http://www.usenix.org/events/sec04/tech/davis.html, accessed: Feb. 21, 2005.
13. De Angeli, A., Covernty, L., Cameron, D., Johnson, G.I. and Fischer, M. VIP: A visual approach to user authentication. In Proceedings of the Working Conference on Advanced Visual Interfaces (AVI 2002) (Trento, Italy, May 22-24, 2002). ACM Press, New York, NY, 316-323.
14. Dhamija, R. and Perrig, A. Déjà Vu: User study using images for authentication. In Ninth Usenix Security Symposium (Denver, CO, USA, Aug. 14-17, 2000). http://www.usenix.org/publications/library/proceedings/sec2000/ dhamija.html, accessed: Feb. 20, 2005.
15. Dourish, P. Security as experience and practice: Supporting everyday security. Talk given at the DIMACS Workshop on Usable Privacy and Security Software, July 7, 2004.
16. Feldmeier, D.C. and Karn, P.R. UNIX password security - ten years later. In Advances in Cryptology - CRYPTO'89, Lecture Notes in Computer Science 435, Springer Verlag (1990), 44-63.
17. Fitts, P.M. The information capacity of the human motor system in controlling amplitude of movement. Journal of Experimental Psychology 47 (1954), 381-391.
18. Hollingsworth, A. and Henderson, J.S. Accurate visual memory for previously attended objects in natural scenes. Journal of Experimental Psychology - Human Percpetion and Performance 28 (2002), 113-136.
19. Jain, A., Hong, L. and Pankanti, S. Biometric identification. CACM 43, 2 (2000), 91-98.
20. Klein, D. A survey of, and improvement to, password security. In UNIX Security Workshop II Proceedings, Tenth Usenix Security Symposium (Portland, OR, USA, Aug. 27- 28, 1990), 83-86.
21. Mandler, J.M. and Ritchey, G.H. Long-term memory for pictures. Journal of Experimental Psychology: Human Learning and Memory 3 (1977), 386-396.
22. Morris, R. and Thompson, K. Password security; A case study. CACM 22 (1979), 594-597.
23. Nelson, D.L., Reed, U.S., and Walling, J.R. Picture superiority effect. Journal of Experimental Psychology: Human Learning and Memory 3 (1977), 485-497.
24. Norman, D.A. The Design of Everyday Things. Basic Books, New York, NY, 1988.
25. Patrick, A.S., Long, A.C. and Flinn, S. HCI and security systems. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (CHI'04) (Vienna, Austria, April 24-29, 2004). ACM Press, New York, NY, 1056-1057.
26. Paivio, A., Rogers, T.B. and Smythe, P.C. Why are pictures easier to recall than words? Psychonomic Science 11, 4 (1976), 137-138.
27. Real User Corporation. The Science Behind Passfaces. http://www. realusers.com. Accessed Dec. 2, 2002.
28. Rundus, D.J. Analysis of rehearsal processes in free recall. Journal of Experimental Psychology 89 (1971), 63-77.
29. Sasse, M.A., Brostoff, S. and Weirich, D. Transforming the 'weakest link' - a human/computer interaction approach to usable and effective security. BT Technical Journal 19 (2001), 122-131.
30. Shepard, R.N. Recognition memory for words, sentences, and pictures. Journal of Verbal Learning and Verbal Behavior 6, 156-163.
31. Standing, L.P. Learning 10,000 pictures. Quarterly Journal of Experimental Psychology 25, 207-222.
32. Weinshall, D. and Kirkpatrick, S. Passwords you'll never forget, but can't recall. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (CHI'04) (Vienna, Austria, April 24-29, 2004). ACM Press, New York, NY, 1399-1402.
33. Wiedenbeck, S., Waters, J., Birget, J.C., Brodskiy, A. and Memon, N. Authentication using graphical passwords: Basic Results. Proc. Human-Computer Interaction International 2005, in press.
34. Wiedenbeck, S., Waters, J., Birget, J.C., Brodskiy, A. and Memon, N. PassPoints: Design and longitudinal evaluation of a graphical password system. Special Issue on HCI Research in Privacy and Security, International Journal of Human-Computer Studies, in press.
35. Wixted, T.J. The psychology and neuroscience of forgetting. Annual Review of Psychology 55 (2004), 235-26.