User interface design affects security: Patterns in click-based graphical passwords

International Journal of Information Security

Volumn 8, Issue 6, 2009, Pages 387-398

  Chiasson, Sonia ^a   Forget, Alain ^a   Biddle, Robert ^a   van Oorschot, P C ^a  

^a CARLETON UNIVERSITY   (Canada)

Author keywords

Authentication; Graphical passwords; Usable security

Indexed keywords

AUTHENTICATION SYSTEMS; BACKGROUND IMAGE; DATA SETS; GRAPHICAL PASSWORD; GRAPHICAL PASSWORDS; PASS POINT; POINT PATTERNS; USABLE SECURITY; USER BEHAVIOUR; USER INTERFACE DESIGNS;

SECURITY OF DATA; USER INTERFACES;

AUTHENTICATION;

EID: 70350567265     PISSN: 16155262     EISSN: 16155270     Source Type: Journal    
DOI: 10.1007/s10207-009-0080-7     Document Type: Article

References (27)

1. Blonder, G.E.: Graphical Passwords. United States Patent 5,559, 961 (1996)
2. Britton, I.: http://freefoto.com (2007). Last accessed April 2009
3. Chiasson, S.: Usable authentication and click-based graphical passwords. Ph.D. Thesis, School of Computer Science, Carleton University, Ottawa, Canada (2008)
4. Chiasson, S., Forget, A., Biddle, R., van Oorschot, P.C.: Influencing Users Towards Better Passwords: Persuasive Cued Click-Points. HCI 2008. British Computer Society, September (2008)
5. Chiasson, S., Biddle, R., van Oorschot, P.C.: A second look at the usability of click-based graphical passwords. In: ACM Symposium on Usable Privacy and Security (SOUPS) (2007)
6. Chiasson, S., van Oorschot, P.C., Biddle, R.: Graphical password authentication using Cued Click Points. In: European Symposium on Research in Computer Security (ESORICS). LNCS, vol. 4734, pp. 359-374 (2007)
7. Davis, D., Monrose, F., Reiter, M.K.: On user choice in graphical password schemes. In: 13th USENIX Security Symposium (2004)
8. Dirik, A.E., Menon, N., Birget, J.C.: Modeling user choice in the PassPoints graphical password scheme. In: ACM Symposium on Usable Privacy and Security (SOUPS) (2007)
9. Dunphy, P., Yan, J.: Do Background Images Improve "Draw a Secret" Graphical Passwords? ACM Computer and Communications Security (CCS) (2007)
10. Florencio, D., Herley, C.: A large-scale study of web password habits. In: ACM International World Wide Web Conference (WWW), pp. 657-666 (2007)
11. FreeImages.com. http://www.freeimages.com (2008). Last accessed April 2009
12. Goldstein, E.B.: Cognitive Psychology. Wadsworth Publishing, Belmont, pp. 150-161 (2006)
13. Golofit, K.: Click passwords under investigation. In: European Symposium on Research in Computer Security (ESORICS). LNCS, vol. 4734, pp. 343-358 (2007)
14. Ihaka R., Gentleman R.: R: A language for data analysis and graphics. J. Comput. Graph. Stat. 5(3), 299-314 (1996)
15. Jermyn, I., Mayer, A., Monrose, F., Reiter, M.K., Rubin, A.D.: The design and analysis of graphical passwords. In: 8th USENIX Security Symposium (1999)
16. Kuo, C., Romanosky, S., Cranor, L.F.: Human selection of mnemonic phrase-based passwords. In: ACM Symposium on Usable Privacy and Security (SOUPS) (2006)
17. Passfaces. http://www.realuser.com (2006). Last accessed April 2009
18. Peters, M.: Revised Vandenberg and Kuse mentalFrotations tests: forms MRT-A to MRT-D. Technical Report, Department of Psychology, University of Guelph (1995)
19. PD Photo. http://pdphoto.org/ (2007). Last accessed April 2009
20. Salehi-Abari, A., Thorpe, J., van Oorschot, P.C.: On purely automated attacks and click-based graphical passwords. In: 24th Annual Computer Security Applications Conference (ACSAC) (2008)
21. St. Clair, L., Johansen, L., Enck, W., Pirretti, M., Traynor, P., McDaniel, P., JPeger, T.: Password exhaustion: predicting the end of password usefulness. In: International Conference on Information Systems Security (ICISS). Springer, Heidelberg, pp. 37-55 (2006)
22. Tao, H.: Pass-Go, a new graphical password scheme. M.S. Thesis, School of Information Technology and Engineering, University of Ottawa, Canada (2006)
23. Thorpe, J., van Oorschot, P.C.: Human-seeded attacks and exploiting hot-spots in graphical passwords. In: 16th USENIX Security Symposium (2007)
24. van Oorschot, P.C., Thorpe, J.: On predictive models and user-drawn graphical passwords. ACM Trans. Inf. Syst. Secur. (TISSEC) 10(4), Article 17, 1-33 (2008)
25. van Oorschot, P.C., Thorpe, J.: On Predicting and Exploiting Hot-Spots in Click-Based Graphical Passwords. School of Computer Science, Carleton University Technical Report TR-08-21, November (2008)
26. Wiedenbeck, S., Birget, J.C., Brodskiy, A., Memon, N.: Authentication using graphical passwords: Effects of tolerance and image choice. In: ACM Symposium on Usable Privacy and Security (SOUPS) (2005)
27. Wiedenbeck S., Waters J., Birget J.C., Brodskiy A., Memon N.: PassPoints: Design and longitudinal evaluation of a graphical password system. Int. J. Hum. Comput. Stud. 63, 102-127 (2005)