Preventing massive automated access to web resources

Computers and Security

Volumn 28, Issue 3-4, 2009, Pages 174-188

  Basso, Alessandro ^a   Sicco, Stefano ^a  

^a UNIVERSITY OF TURIN   (Italy)

Author keywords

Anti bot techniques; Massive access; Visual HIP; Web content protection; Web security

Indexed keywords

AUTOMATION; WORLD WIDE WEB;

ANTI-BOT TECHNIQUES; MASSIVE ACCESS; VISUAL HIP; WEB CONTENT PROTECTION; WEB SECURITY;

SECURITY OF DATA;

EID: 63049124713     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2008.11.002     Document Type: Article

References (41)

1. Ahn L.V., Blum M., Hopper N.J., and Langford J. CAPTCHA: using hard AI problems for security. EUROCRYPT. Lecture notes in computer science vol. 2656 (2003), Springer
2. Ahn L.V., Blum M., and Langford J. Telling humans and computers apart automatically. Commun. ACM 47 2 (2004) 56-60
3. Back A. Hash cash: a partial hash collision based postage scheme (2002). http://www.hashcash.org/papers/hashcash.pdf
4. Baird H.S. Complex image recognition and web security. Data complexity in pattern recognition (2006), Springer-Verlag London Ltd
5. Basso A., Bergadano F., Coradazzi I., and Checco P.D. Lightweight security for internet polls. EGCDMAS (2004), INSTICC Press
6. Basso A., and Miraglia M. Avoiding massive automated voting in internet polls. STM2007. Electron. Notes Theor. Comput. Sci. vol. 197 2 (2008) Elsevier
7. Canny J. A computational approach to edge detection. IEEE Trans. Pattern Anal. Mach. Intell. 8 6 (1986) 679-698
8. Chellapilla K., and Simard P.Y. Using machine learning to break visual Human Interaction Proofs (HIPs) (2005), MIT Press, Cambridge, MA p. 265-72
9. Chellapilla K., Larson K., Simard P.Y., and Czerwinski M. Building segmentation based human-friendly human interaction proofs (HIPs). In: Baird H.S., and Lopresti D.P. (Eds). HIP. Lecture notes in computer science vol. 3517 (2005), Springer
10. Chellapilla K., Simard P., and Czerwinski M. Computers beat humans at single character recognition in reading-based human interaction proofs (HIPs). Proceedings of the second Conference on Email and Anti-Spam (CEAS), Palo Alto, CA (2005)
11. Chew M., and Baird H.S. Baffletext: a human interactive proof. Proceedings of the SPIE/IS&T document recognition and retrieval X conference vol. 4670 (2003), SPIE, Santa Clara, CA, USA
12. Chew M., and Tygar J.D. Image recognition CAPTCHAs. Proceedings of the seventh international Information Security Conference (ISC 2004) (2004), Springer
13. Coates A., Baird H., and Fateman R. Pessimal print: a reverse Turing test. Proceedings of the sixth international conference on document analysis and recognition, Seattle, WA (2001)
14. Datta R., Li J., and Wang J.Z. Imagination: a robust image-based captcha generation system. Proceedings of the 13th annual ACM international conference on Multimedia (MULTIMEDIA '05) (2005), ACM Press, New York, NY, USA
15. Dwork C., and Naor M. Pricing via processing or combatting junk mail. CRYPTO '92: proceedings of the 12th annual international cryptology conference on advances in cryptology (1992), Springer-Verlag, London, UK
16. Fisher R., Perkins S., Walker A., and Wolfart E. Hypermedia image processing reference (2004)
17. Gonzalez R., and Woods R. Digital image processing (1992) p. 679-98
18. Google's CAPTCHA busted in recent spammer tactics (2008). http://www.websense.com/securitylabs/blog/blog.php? BlogID = 174
19. Hopper N.J., and Blum M. Secure human identification protocols. ASIACRYPT. Lecture notes in computer science vol. 224 (2001), Springer
20. Kandula S., Katabi D., Jacob M., and Berger A.W. Botz-4-sale: surviving organized ddos attacks that mimic flash crowds. Second symposium on Networked Systems Design and Implementation (NSDI), Boston, MA (2005)
21. KittenAuth (2007). http://www.thepcspy.com/kittenauth
22. Kochanski G., Lopresti D., and Shih C. A reverse Turing test using speech. Proceedings of the international conferences on spoken language processing, Denver, Colorado (2002)
23. Laurie B., and Clayton R. Proof-of-work proves not to work. The third annual workshop on economics and information security, Minneapolis, MN (2004)
24. Lew M.S., Sebe N., Djeraba C., and Jain R. Content-based multimedia information retrieval: state of the art and challenges. ACM Trans. Multimedia Comput. Commun. Appl. 2 1 (2006) 1-19
25. Long F., Zhang H., and Feng D. Fundamentals of content-based image retrieval (2003), Springer [chapter 1]
26. May M. Inaccessibility of CAPTCHA: alternatives to visual Turing tests on the web. W3C working group note (November 2005). http://www.w3.org/TR/turingtest/
27. Microsoft Asirra (2007). http://research.microsoft.com/asirra/
28. Minsky M. Mind as society, thinking allowed: conversations on the leading edge of knowledge and discovery with Dr. Jeffrey Mishlove (1998). http://www.intuition.org/txt/minsky.htm
29. Morein W., Stavrou A., Cook D., Keromytis A., Misra V., and Rubenstein D. Using graphic Turing tests to counter automated ddos attacks against web servers. Proceedings of the 10th ACM international conference on Computer and Communications Security (CCS), Washington D.C. (2003)
30. Mori G., and Malik J. Recognizing objects in adversarial clutter: breaking a visual CAPTCHA. Proceedings of the conference on computer vision and pattern recognition, Madison, USA (2003)
31. Moy G., Jones N., Harkless C., and Potter R. Distortion estimation techniques in solving visual CAPTCHAs. In: Proceedings of the 2004 IEEE Computer Society Conference on Computer Vision and Pattern Recognition (CVPR 2004) 2 (2004) 23-28
32. Namprempre C., and Dailey M.N. Mitigating dictionary attacks with text-graphics character CAPTCHAs. IEICE Trans. Fundam. Electron. Commun. Comput. Sci. E90-A 1 (2007) 179-186
33. Nancy C. Sound oriented captcha. Proceedings of the first workshop on human interactive proofs (2002), Xerox Palo Alto Research Center, CA
34. Ollmann G. Anti brute force resource metering. Whitepaper - NGS software insight security research (2005). http://www.ngssoftware.com/papers/NISR-AntiBruteForceResourceMetering.pdf
35. Ollmann G. Stopping automated attack tools. Whitepaper - NGS software insight security research (2005). http://www.ngssoftware.com/papers/StoppingAutomatedAttackTools.pdf
36. Pinkas B., and Sander T. Securing passwords against dictionary attacks. CCS '02: proceedings of the 9th ACM conference on computer and communications security (2002), ACM Press, New York, NY, USA
37. reCAPTCHA: stop spam, read books (2007), Department of Computer Science, Carnegie Mellon University. http://www.recaptcha.net/
38. The CAPTCHA project: completely automatic public Turing test to tell computers and humans apart (2000), Department of Computer Science, Carnegie Mellon University. http://www.captcha.net
39. Turing A.M. Computing machinery and intelligence. Mind LIX (59) 236 (1950) 433-460
40. Vivo M.D., Vivo G.O.D., Koeneke R., and Isern G. Internet vulnerabilities related to tcp/ip and t/tcp. SIGCOMM Comput. Commun. Rev. 29 1 (1999) 81-85
41. Yahoo! CAPTCHA is broken (2008). http://network-security-research.blogspot.com/2008/01/yahoo-captcha-is- broken.html