Audio CAPTCHA: Existing solutions assessment and a new implementation for VoIP telephony

Computers and Security

Volumn 29, Issue 5, 2010, Pages 603-618

  Soupionis, Yannis ^a   Gritzalis, Dimitris ^a  

^a ATHENS UNIVERSITY OF ECONOMICS AND BUSINESS   (Greece)

Author keywords

Audio CAPTCHA attributes; Authentication; Evaluation; Speech Recognition; SPIT; Turing Test; VoIP

Indexed keywords

CAPTCHAS; EVALUATION; SPIT; TURING TESTS; VOIP;

AUDIO SYSTEMS; AUTHENTICATION; INTERNET; INTERNET PROTOCOLS; INTERNET TELEPHONY; SPEECH RECOGNITION; TELEPHONE SYSTEMS; VOICE/DATA COMMUNICATION SYSTEMS;

SECURITY OF DATA;

EID: 77955711266     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2009.12.003     Document Type: Article

References (47)

1. Authorize, www.authorize.net/application/ [retrieved 07.05.09].
2. AOL, http://my.aol.com/ [retrieved 07.05.09].
3. L. von Ahn, M. Blum, N. Hopper, and J. Langford CAPTCHA: using hard AI problems for security E. Biham, Proceedings of the international conference on the theory and applications of cryptographic techniques (EUROCRYPT '03) 2003 Springer Poland 294 311 (LNCS 2656)
4. L. von Ahn, M. Blum, and J. Langford Telling humans and computer apart automatically Communications of the ACM 47 2 2004 57 60
5. L. von Ahn, B. Maurer, C. McMillen, D. Abraham, and M. Blum reCAPTCHA: human-based character recognition via web security measures Science 321 5895 2008 1465 1468
6. Blum M, von Ahn L, Langford J, Hopper N. The CAPTCHA project, USA, November 2000.
7. Bigham J, Cavender A. Evaluating existing audio CAPTCHA optimized for non-visual use. In: Proceedings of the ACM conference on human factors in systems (CHI 2009), USA; 2009, p. 1829-38.
8. Breaking Gmail's Audio CAPTCHA, http://blog.wintercore.com/?p=11 [retrieved 10.10.08].
9. Bursztein E, Bethard S. Decaptcha: breaking 75% of eBay audio CAPTCHA. In: Procedings of the 3rd USENIX workshop on offensive technologies (WOOT '09), Canada; 2009.
10. Bokehman Audio CAPTCHA, http://bokehman.com/captcha-verification.php [retrieved 5.05.09].
11. K. Chellapilla, K. Larson, P. Simard, and M. Czerwinski Building segmentation based human friendly human interaction proofs Proceedings of the SIGCHI conference on human factors in computing systems 2005 ACM Press 711 720 (Pubitemid 41809108)
12. Chew M, Baird H. Baffletext: a human interactive proof. In: Proceedings of the 10th SPIE/IS&T document recognition and retrieval conference, USA; 2003, p. 305-16.
13. Chan T-Y. Using a text-to-speech synthesizer to generate a Reverse Turing Test. In: Proceedings of the 15th IEEE international conference on tools with artificial intelligence (ICTAI'03); 2003, p. 226.
14. Captchas.net, http://captchas.net/ [retrieved 02.05.09].
15. Dusan S, Rabiner L. On integrating insights from human speech perception into automatic speech recognition. In: INTERSPEECH, Portugal; 2005, p. 1233-6.
16. Defeated CAPTCHA, http://libcaca.zoy.org/wiki/PWNtcha [retrieved 18.05.08].
17. DIGG, http://digg.com/ [retrieved 07.05.09].
18. Defeating Audio (Voice) CAPTCHA, http://vorm.net/captchas/ [retrieved 30.08.09].
19. eBay Audio CAPTCHA, http://https://scgi.ebay.com/ws/eBayISAPI.dll? RegisterEnterInfo [retrieved 03.07.09].
20. P. Festa Spam-bot tests flunk the blind July 2, 2003 CNET, News.com Available at: www.news.com/2100-1032-1022814.html
21. Gibbs S, Breiteneder C, Tsichritzis D. Data modeling of time-based media. In: Proceedings of the ACM SIGMOD international conference on management of data, USA; 1994, pp. 91-102.
22. Google Audio CAPTCHA, www.google.com/accounts/NewAccount [retrieved 26.03.09].
23. D. Graham-Rowe A sentinel to screen phone calls technology MIT Review 2006 [accessed 08.11.2009]
24. HTK: Hidden markov model toolkit, http://htk.eng.cam.ac.uk/ [retrieved 10.10.08].
25. D. Jurafsky, and J. Martin, Speech and language processing: an introduction to natural language processing, computational linguistics and speech recognition 2008 Prentice-Hall
26. G. Mori, and J. Malik Recognizing objects in adversarial clutter: breaking a visual CAPTCHA Proceedings of the computer vision and pattern recognition conference 2003 IEEE Press 134 141
27. Markkola A, Lindqvist J. Accessible voice CAPTCHA for Internet telephony. In: Proceedings of the 2008 symposium on accessible privacy and security (SOAPS 2008), USA; 2008.
28. Mp3Captcha, http://scripts.titude.nl/ [retrieved 02.05.09].
29. Quittek J, Niccolini S, Tartarelli S, Stiemerling M, Brunner M, Ewald T. Detecting SPIT calls by checking human communication patterns. In: Proceedings of IEEE international conference on communications (ICC'07), United Kingdom; 2007, p. 1979-84.
30. MSN Audio CAPTCHA, http://https://signup.live.com/ [retrieved 26.03.09].
31. Recaptcha Audio CAPTCHA, http://recaptcha.net/learnmore.html [retrieved 03.07.09].
32. Rosenberg J, Jennings C, Peterson J. The session initiation protocol (SIP) and spam. In: Draft-ietf-sipping-spam-02; March 6, 2006.
33. Secure Image CAPTCHA, www.phpcaptcha.org [retrieved 28.03.09].
34. Slashdot, http://slashdot.org/login.pl?op=newuserform [retrieved 5.05.09].
35. SPHINX: the CMU sphinx group open source speech recognition engines, http://cmusphinx.sourceforge.net/html/cmusphinx.php [retrieved 02.06.09].
36. SER server version 2.0, www.iptel.org/ser, [retrieved 20.03.09].
37. SIP express media server version 2.0, www.iptel.org/sems [retrieved 20.03.09].
38. SIPP traffic generator for the SIP protocol, http://sipp.sourceforge.net/ [retrieved 30.09.08].
39. A. Turing Computing machinery and intelligence Mind LIX 236 October 1950 433 460
40. Tam J, Simsa J, Hyde S, von Ahn L. Breaking audio CAPTCHA: In: Advances in neural information processing systems (NIPS); 2008.
41. Tam J, Huggins-Daines JD, von Ahn L, Blum M. Improving audio CAPTCHAs. In: Proceedings of the 2008 symposium on accessible privacy and security (SOAPS 2008), USA; July 2008.
42. Trend micro's TrendLabs, threat reports, http://us.trendmicro.com/ imperia/md/content/us/trend-watch/researchandanalysis/threat-roundup-may-2009. pdf ; May 2009.
43. Walker W, Lamere P, Kwok P, Raj B, Singh R, Gouvea E, et al. Sphinx-4: a flexible open source framework for speech recognition. Sun Microsystems, Technical Report TR-2004-139; November 2004.
44. J. Yan, and A. El Ahmad CAPTCHA Security: a case study IEEE Security and Privacy 7 4 July/August 2009 22 28
45. J. Yan, and A. El Ahmad Breaking visual CAPTCHA with naive pattern recognition algorithms P. Samarati, Proc. of the 23rd annual computer security applications conference (ACSAC '07) 2007 IEEE Computer Society USA 279 291
46. Yan J, El Ahmad. A Low-cost attack on a microsoft CAPTCHA. In Proceedings of the 15th ACM Conference on Computer and Communications Security (CCS 2008), Virginia, USA; October, 2008, pp 543-554.
47. Yan J, El Ahmad A. Usability of CAPTCHA or usability issues in CAPTCHA design. In: Proceedings of the 2008 symposium on accessible privacy and security (SOAPS 2008), USA; 2008, p. 44-52.