Use Your Illusion: Secure authentication usable anywhere

SOUPS 2008 - Proceedings of the 4th Symposium on Usable Privacy and Security

Volumn , Issue , 2008, Pages 35-43

  Hayashi, Eiji ^a   Dhamija, Rachna ^b   Christin, Nicolas ^a   Perrig, Adrian ^a  

^a CyLab ^*  (Japan)

^b HARVARD UNIVERSITY   (United States)

Author keywords

Distortion; Graphical passwords; Social engineering

Indexed keywords

CELLULAR PHONES; DEGRADED IMAGES; DISTORTED IMAGES; DISTORTION; EQUIVALENT ERRORS; GRAPHICAL PASSWORDS; HUMAN ABILITIES; ORIGINAL IMAGES; SMALL DISPLAYS; SOCIAL ENGINEERING; TIME PERIODS; USABILITY STUDIES; USER AUTHENTICATIONS;

MOBILE PHONES; SECURITY OF DATA; TELEPHONE SETS;

AUTHENTICATION;

EID: 65449162720     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1408664.1408670     Document Type: Conference Paper

References (32)

1. Flickr. http://www.flickr.com.
2. Phoney finance. The Economist. October 26, 2006. http://www.economist. com/finance/ displaystory.cfm?story-id=8089667.
3. R. Anderson. Why cryptosystems fail. In Proc. ACM CCS, pages 215-227, Nov. 1993.
4. G. Blonder. United states patent, 1996. United States Patent 5559961.
5. G. H. Bower, M. B. Karlin, and A. Dueck. Comprehension and memory for pictures. Memory and Cognition, 2:216-220, 1975.
6. S. Brostoff and M. Sasse. Are passfaces more usable than passwords? A field trial investigation. In Proceedings of HCI 2000, pages 405-424, Sept. 2000.
7. M. Burton, S. Wilson, M. Cowan, and V. Bruce. Face recognition in poor quality video: Evidence from security surveillance. Psychological Science, 10:243-248, 1999.
8. R. Dhamija and A. Perrig. Deja vu: A user study, using images for authentication. In Proc. 9th USENIX Security Symp., Aug. 2000.
9. R. Dhamija and J. D. Tygar. The battle against phishing: Dynamic security skins. In Proc. 1st Symp. on Usable Privacy and Security, 2005.
10. A. Goldstein and J. E. Chance. Visual recognition memory for complex configurations. Perception and Psychophysics, 9:237-241, 1970.
11. P. Golle and D. Wagner. Cryptanalysis of a cognitive authentication scheme. In Proc. of the 2007 IEEE Symposium on Security and Privacy, 2007.
12. R. L. Gregory. The Intelligent Eye. 1970.
13. A. Harada, T. Isarida, T. Mizuno, and M. Nishigaki. A user authentication system using schema of visual memory. In Proc. BioADIT'06, pages 338-345, Jan. 2006.
14. Z. Henderson, V. Bruce, and M. Burton. Matching the faces of robbers captured on video. Applied Cognitive Psychology, 15:445-464, 2001.
15. G. J. Holzmann. Beyond Photography: The Digital Darkroom. Prentice Hall, June 1988.
16. I. Jermyn, A. Mayer, F. M. M. Reiter, and A. Rubin. The design and analysis of graphical passwords. In Proc. 8th USENIX Security Symp., Aug. 1999.
17. H. Kinjo and J. G. Snodgrass. Does the generation effect occur for pictures? Amer. J. of Psych., 6:156-163, 2000.
18. T. Matsumoto, H. Matsumoto, K. Yamada, and S. Hoshino. Impact of artificial gummy fingers on fingerprint systems. In Proc. SPIE: Optical Security and Counterfeit Deterrence Techniques IV, volume 4677, pages 275-289, Jan. 2002.
19. W. Moncur and G. Leplatre. Pictures at the ATM: exploring the usability of multiple graphical passwords. In Proc. ACM CHI, pages 887-894, Apr. 2007.
20. F. Monrose, D. Davis, and M. Reiter. On user choice to graphical password schemes. In Proc. of the 13th USENIX Security Symp., pages 151-164, San Diego, CA, Aug. 2004.
21. Real User Corporation. The science behind Passfaces, 2001. http://www.realusers.com.
22. H. Sasamoto, N. Christin, and E. Hayashi. Undercover: Authentication usable in front of prying eyes. In Proceedings of 2008 ACM Symposium on Computer-Human Interaction (CHI '08), Florence, Italy, Apr. 2008. To appear.
23. R. Shepard. Recognition memory for words, sentences and pictures. J. Verbal Learning and Verbal Behavior, 113(1):95-121, 1967.
24. Sony Corporation. Overview of FeliCa. http://www. sony.net/Products/ felica/abt/dvs.html.
25. L. Standing, J. Conezio, and R. N. Haber. Perception and memory for pictures: single trial learning of 2,500 visual stimuli. Psychonomic Sci., 19(2):73-74, 1970.
26. A. Stubblefield and D. Simon. Inkblot authentication. Technical Report MSR-TR-2004-85, Aug. 2004.
27. J. Thorpe and P. van Oorschot. Graphical dictionaries and the memorable space of graphical passwords. In Proc. 13th USENIX Security Symp., Aug. 2004.
28. J. Thorpe and P. van Oorschot. Towards secure design choices for implementing graphical passwords. In Proc. 20th ACSAC, Dec. 2004.
29. J. Thorpe and P. van Oorschot. Human-seeded attacks and exploiting hot-spots in graphical passwords. In Proc. 16th USENIX Security Symp., Aug. 2007.
30. D. Weinshall. Cognitive authentication schemes safe against spyware. In Proc. IEEE Symp. Sec. and Privacy, May 2006.
31. S. Wiedenbeck, J. Waters, J.-C. Birget, A. Brodskiy, and N. Memon. Authentication using graphical passwords: Basic results. In HCI International, July 2005.
32. S. Wiedenbeck, J. Waters, J.-C. Birget, A. Brodskiy, and N. Memon. Authentication using graphical passwords: effects of tolerance and image choice. In Proc. of the 1st Symp. Usable Privacy and Security, pages 1-12, July 2005.