Remotely telling humans and computers apart: An unsolved problem

IFIP Advances in Information and Communication Technology

Volumn 309, Issue , 2009, Pages 9-26

  Hernandez Castro, Carlos Javier ^a   Ribagorda, Arturo ^a  

^a UNIVERSIDAD CARLOS III DE MADRID   (Spain)

Author keywords

CAPTCHA; Design; Flaw; HIP; Implementation; Methodologies; Security assessment

Indexed keywords

DEFECTS; DESIGN; ELECTRONIC MAIL FILTERS; HOT ISOSTATIC PRESSING;

BASIC DESIGNS; CAPTCHAS; IMPLEMENTATION; METHODOLOGIES; SECURITY ASSESSMENT; STATE OF THE ART; THREAT MODELING; UNSOLVED PROBLEMS;

NETWORK SECURITY;

EID: 76549097748     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-05437-2_2     Document Type: Conference Paper

References (45)

1. Chow, R., Golle, P., Jakobsson, M., Wang, L., Wang, X.: Making CAPTCHAs Clickable. In: Proc. of HotMobile 2008 (2008)
2. Hernandez-Castro, C.J., Ribagorda, A.: VideoCAPTCHAs. In: Proceedings of the 5th International Conference on Security and Protection of Information, Brno (to be puslished, 2009)
3. Athanasopoulos, E., Antonatos, S.: Enhanced CAPTCHAs: Using Animation to Tell Humans and Computers Apart. In: IFIP International Federation for Information Processing (2006)
4. Bigham, J.P., Cavender, A.C.: Evaluating Existing Audio CAPTCHAs and an Interface Optimized for Non-Visual Use. In: CHI 2009 (2009)
5. Hernandez-Castro, C.J., Ribagorda, A., Saez, Y.: Side-channel attack on labeling CAPTCHAs (2009), http://arxiv.org/abs/0908.1185
6. Holmes, G., Donkin, A., Witten, I.H.: Weka: A machine learning workbench. In: Proceedings of the Second Australia and New Zealand Conference on Intelligent Information Systems, Brisbane, Australia (1994)
7. Quinlan, R.: Machine Learning. Morgan Kaufmann Pub., CA
8. Golle, P.: Machine Learning Attacks Against the Asirra CAPTCHA. In: ACM CCS 2008 (2008)
9. Hernandez-Castro, C.J., Ribagorda, A.: Preliminary analysis on the Megaupload CAPTCHA (Submitted for publication)
10. Achint, T., Venu, G.: Generation and Performance Evaluation of Synthetic Handwritten CAPTCHAs. In: ICFHR 2008 (2008)
11. Hernandez-Castro, C.J., Ribagorda, A.: Pitfalls in CAPTCHA design and implementation: the Math CAPTCHA, a case study (Submitted for publication)
12. Tam, J., Simsa, J., Hyde, S., Von Ahn, L.: Breaking Audio CAPTCHAs, http://www.captcha.net/Breaking-Audio-CAPTCHAs.pdf
13. Von Ahn, L., Maurer, B., McMillen, C., Abraham, D., Blum, M.: reCAPTCHA: Human-Based Character Recognition via Web Security Measures. Science Magazine 321(5895), 1465-1468 (2008)
14. Caine, A., Hengartner, U.: The AI Hardness of CAPTCHAs does not imply Robust Network Security. In: IFIP, Trust Management, vol.238, pp. 367-382
15. W3C Working Draft, Techniques for WCAG 2.0. G144: Ensuring Web Page contains another CAPTCHA serving same purpose using a different modality
16. Elson, J., Douceur, J.R., Howell, J., Saul, J.: Asirra: A CAPTCHA that Exploits Interest-Aligned Manual Image Categorization. In: Proccedings of the 14th ACM CCS (2007)
17. Von Ahn, L., Blum, M., Hopper, N.J., Langford, J.: CAPTCHA: Using hard AI problems for security. In: Biham, E. (ed.) EUROCRYPT 2003. LNCS, vol.2656, pp. 294-311. Springer, Heidelberg (2003)
18. Mori, G., Malik, J.: Recognizing objects in adversarial clutter: Breaking a visual CAPTCHA. In: Proc. of CVPR 2003, pp. 134-144. IEEE, Los Alamitos (2003)
19. Naor, M.: Verification of human in the loop or Identification via Turing Test, http://www.wisdom.weizmann.ac.il/~naor/PAPERS/human.ps (retrieved January 1, 2009)
20. Chew, M., Tygar, J.D.: Image recognition CAPTCHAs. In: Proc. of ISC 2004, pp. 268-279 (2004); A longer version as UC Berkeley Computer Science Division technical report UCB/CSD-04-1333
21. Von Ahn, L., Dabbish, L.: Labeling Images with a Computer Game. In: ACM Conference on Human Factors in Computing Systems, CHI 2004, pp. 319-326 (2004)
22. US Patent no. 6,195,698, Method for selectively restricting access to computer systems, http://www.freepatentsonline.com/6195698.html
23. Rusu, A., Govindaraju, V.: Handwritten CAPTCHA: using the difference in the abilities of humans and machines in reading handwritten words. In: Proceedings of the IWFHR-9, Tokyo, Japan, pp. 226-231 (2004)
24. Stevanovic, R., et al.: Quantum Random Bit Generator Service for Monte Carlo and Other Stochastic Simulations. In: Lirkov, I., Margenov, S., Wásniewski, J. (eds.) LSSC 2007. LNCS, vol.4818, pp. 508-515. Springer, Heidelberg (2008)
25. Baird, H.S., Riopka, T.: ScatterType: a Reading CAPTCHA Resistant to Segmentation Attack. In: Proc. of the IS & T/SPIE Document Recognition & Retrieval Conference, pp. 197-207 (2005)
26. Datta, R., et al.: IMAGINATION: A Robust Image-based CAPTCHA Generation System. In: Proc. of ACM Multimedia Conf., pp. 331-334 (2005)
27. Hoque, M.E., Russomanno, D.J., Yeasin, M.: 2D Captchas from 3D Models. In: Proceedings of the IEEE SoutheastCon 2006, Memphis (April 2006)
28. Chew, M., Baird, H.S.: BaffleText: a Human Interactive Proof. In: Proceedings of the 10th SPIE/IS&T Doc. Recog. Retr. Conf, DRR 2003 (2003)
29. Baird, H.S., Bentley, J.L.: Implicit CAPTCHAs. In: Proc. SPIE/IS&T Conf. on Document Recognition and Retrieval XII (DR & R 2005), pp. 191-196 (2005)
30. Moy, G., et al.: Distortion Estimation Techniques in Solving Visual CAPTCHAs. In: Proc. of the CVPR 2004, vol.2 (2004)
31. Yan, J., Ahmad, A.S.E.: Breaking Visual CAPTCHAs with Naive Pattern Recognition Algorithms. In: Proceedings of the ACSAC 2007 (2007)
32. Chellapilla, K., Simard, P.Y.: Using Machine Learning to Break Visual HIPs. In: Proc. of the Conf. on Neural Information Processing Systems, NIPS 2004 (2004)
33. Chellapilla, K., Larson, K., Simard, P.Y., Czerwinski, M.: Computers beat Humans at Single Character Recognition in Reading based Human Interaction Proofs (HIPs). In: Procs. of CEAS (2005)
34. Hernandez-Castro, C.J., Ribagorda, A.: Analysis of the Teabag CAPTCHA version 1.2 (Submitted for publication)
35. DarkSEO programming: letter derotation, http://www.darkseoprogramming. com/2008/04/05/letter-derotation/
36. PWNtcha, http://caca.zoy.org/wiki/PWNtcha
37. TROJ CAPTCHAR.A Trojan horse to relay CAPTCHAs at TrendMicro, http://blog.trendmicro.com/ captcha-wish-your-girlfriend-was-hot-like-me/
38. Danchev, D.: Inside India's CAPTCHA solving economy, http://blogs.zdnet. com/security/?p=1835
39. Van Der Vorm, J.: Defeating audio (voice) CATPCHAs, http://vorm.net/ captchas
40. Santamarta, R.: Breaking GMail's audio CAPTCHA, http://blog.wintercore. com/?p=11
41. Kittenauth, O.W.: http://www.thepcspy.com/kittenauth
42. Techworld.com article on fallen CAPTCHAS, http://www.techworld.com/ security/features/index.cfm?featureid=4168
43. Hernandez-Castro, C.J., Ribagorda, A.: Pitfalls in CAPTCHA design and implementation: the Math CAPTCHA, a case study. Computers & Security (2009), http://dx.doi.org/10.1016/j.cose.2009.06.006
44. Yeen, H.: Breaking CAPTCHAs without using OCR, http://www.puremango.co. uk/2005/11/breaking-captcha-115/
45. W. Wieser. Captcha recognition via averaging, http://www.triplespark.net/ misc/captcha/