A low-cost attack on a microsoft CAPTCHA

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2008, Pages 543-554

  Yan, Jeff ^a   Ahmad, Ahmad Salah El ^a  

^a NEWCASTLE UNIVERSITY   (United Kingdom)

Author keywords

CAFTCHA; Internet security; Robustness; Segmentation attack; Usability

Indexed keywords

CAFTCHA; INTERNET SECURITY; ROBUSTNESS; SEGMENTATION ATTACK; USABILITY;

INTERNET;

CHARACTER RECOGNITION;

EID: 66249097513     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1455770.1455839     Document Type: Conference Paper

References (22)

1. L von Ahn, M Blum and J Langford. "Telling Humans and Computer Apart Automatically", CACM, V47, No2, 2004.
2. J Yan and A S El Ahinad. "Is cheap labour behind the scene? - Low-cost automated attacks on Yahoo CAPTCHAs", School of Computing Science Technical Report, Newcastle University, England, 2008.
3. K Chellapilla and P Simard, "Using Machine Learning to Break Visual Human Interaction Proofs", Neural Information Processing Systems (NIPS), MIT Press, 2004.
4. nd Int'l Workshop on human Interaction Proofs, Springer-Verlag, LNCS 3517, 2005.
5. K Chellapilla, K Larson, P Simard and M Czerwinski, "Designing human friendly human interaction proofs", ACM CHI'05, 2005.
6. K Chellapilla, K Larson, P Simard, M Czerwinski, "Computers beat humans at single character recognition in reading-based Human Interaction Proofs", 2nd Conference on Email and Anti-Spam (CEAS), 2005.
7. Sam Hocevar. PWNtcha - captcha decoder web site, http://sam.zoy. org!pwntcha , accessed Jan 2008.
8. Microsoft Corporation. "Human Interaction Proof (HIP) -- Technical and Market Overview", 2006. Available at http:Hdownload.microsoft.com/.../ Human-Interaction-Proof-Technical-Overview.doc. Accessed Jan 2008.
9. G Mori and J Malik. "Recognising objects in adversarial clutter: breaking a visual CAPTCHA", IEEE Conference on Computer Vision & Pattern Recognition (CVPR), 2003.
10. G Moy, N Jones, C Harkless and R Potter. "Distortion estimation techniques in solving visual CAPTCHAs", IEEE CVPR, 2004.
11. P Simard, R Szeliski, J Benaloh, J Couvreur and I Calinov, "Using character recognition and segmentation to tell computers from humans", International Conference on Document Analysis and Recognition (ICDAR), 2003.
12. P Simard, D Steinkraus, J Platt. "Best Practice for Convolutional Neural Networks Applied to Visual Document Analysis", International Conference on Document Analysis and Recognition (ICDAR), IEEE Computer Society, Los Alamitos, pp.958-962, 2003.
13. C Pope and K Kaur. "Is It human or Computer? Defending E-Commerce with CAPTCHA", IEEE IT Professional, March 2005, pp. 43-49
14. rd'Annual Computer Security Applications Conference (ACSAC'07). FL, USA, Dec 2007. IEEE computer society. pp 279-291.
15. J Yan. "Bot, Cyborg and Automated Turing Test", the Fourteenth International Workshop on Security Protocols, Cambridge, UK, Mar 2006. Also available at http:/ www.cs.ncl.ac.uk/research!pubs/trs/papers/970.pdf.
16. https://signup.live.com/hmnewuser.aspx?mkt-enus&revipc=CN&ts=3 97018 1&sh=WsBO&hm= 1 &m=http% 3a%2ft/o2fmail.live.com%2ft/ o3fnewuser%3dyes&rx http%3 a%2ft/o2fget.live. com%2fmail%2foverview&rollrs=04&lic=1
17. Dan Goodin, "Automated Automated crack for Windows Live captcha goes wild", The Register, Feb 8, 2008. http://www.theregister.co.uk/2008/02/08/ microsoft-captcha-buster/
18. Websense Security Labs, "Streamlined anti-CAPTCHA operations by spammers on Microsoft Windows Live Mail", Feb 6, 2008. http://securitylabs. websense.com!content/Blogs/2907.aspx
19. J Elson, JR Douceur, J Howell and J Saul. "Asirra: a CAPTCHA that exploits interest-aligned manual image categorization". ACM CCS'07.
20. "Yahoo! CAPTCHA is broken", available at http:// networksecurity-research.blogspot.com/2008/01/yahoo-captcha-isbroken.html.
21. J Yan and A S El Ahmad. "Usability of CAPTCHAs - Or, Usability issues in CAPTCHA design", the fourth Symposium on Usable Privacy and Security, Pittsburgh, USA, July 2008.
22. J Yan and A S El Ahmad. "A Low-cost Attack on a Microsoft CAPTCHA", School of Computing Science Technical Report, Newcastle University, England, 2008.