Déjà Vu: A user study using images for authentication

Proceedings of the 9th USENIX Security Symposium

Volumn , Issue , 2000, Pages

  Dhamija, Rachna ^a   Perrig, Adrian ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Hash visualization; Human factors in security; Recognition based authentication; User authentication through image recognition

Indexed keywords

HUMAN ENGINEERING; IMAGE RECOGNITION; KNOWLEDGE BASED SYSTEMS;

AUTHENTICATION SYSTEMS; AUTHENTICATION TESTS; HUMAN LIMITATIONS; KNOWLEDGE-BASED AUTHENTICATION; SECURE SYSTEM; TEXT INPUT; USER AUTHENTICATION; WEAK PASSWORDS;

AUTHENTICATION;

EID: 85084161493     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (31)

1. Ross J. Anderson. Why Cryptosystems Fail. Communications of the ACM, 37(11):32-40, November 1994.
2. ID Arts. http://www.id-arts.com/technology/papers/, 1999.
3. Anne Adams and Martina Angela Sasse. Users are not the enemy: Why users compromise computer security mechanisms and how to take remedial measures. Communications of the ACM, 42(12):40-46, December 1999.
4. Andrej Bauer. Gallery of random art. WWW at http://andrej.com/art/, 1998.
5. W. Belgers. Unix password security, 1993.
6. G. Blonder. United states patent, 1996. United States Patent 5559961.
7. B. Cheswick and S. Bellovin. Firewalls and internet security: Repelling the wily hacker, 1994.
8. Rachna Dhamija. Hash visualization in user authentication. In Proceedings of the Computer Human Interaction 2000 Conference, April 2000.
9. D. W. Davies and W. L. Price. Security for Computer Networks. John Wiley and Sons, 1989.
10. Carl Ellison, Chris Hall, Randy Milbert, and Bruce Schneier. Protecting secret keys with personal entropy. to appear in Future Generation Computer Systems, 1999.
11. D. C. Feldmeier and P. R. Karn. UNIX password security - ten years later (invited), 1989. Lecture Notes in Computer Science Volume 435.
12. Ian Goldberg. Visual key fingerprint code. Available at http://www.cs.berkeley.edu/iang/visprint.c, 1996.
13. Ralph Norman Haber. How we remember what we see. Scientific American, 222(5):104-112, May 1970.
14. Helene Intraub. Presentation rate and the representation of briefly glimpsed pictures in memory. Journal of Experimental Psychology: Human Learning and Memory, 6(1):1-12, 1980.
15. Ian Jermyn, Alain Mayer, Fabian Monrose, Michael K. Reiter, and Aviel D. Rubin. The design and analysis of graphical passwords. In Proceedings of the 8th USENIX Security Symposium, August 1999.
16. Daniel Klein. A survey of, and improvements to, password security. In Proceedings of the USENIX Second Security Workshop, Portland, Oregon, 1990.
17. The Knightmare. Secrets of a Super Hacker. Loompanics Unlimited, Port Townsend, Washington, 1994.
18. Raph Levien. Pgp snowflake. Personal communication, 1996.
19. Udi Manber. A simple scheme to make passwords based on one-way functions much harder to crack. Computers and Security, 15(2):171-176, 1996.
20. R. Morris and K. Thompson. Password security: A case history. Communications of the ACM, 22(11), Nov 1979.
21. D. Muffett. Crack: A sensible password checker for unix, 1992. A document distributed with the Crack 4.1 software package.
22. Jakob Nielsen. Usability Engineering. Academic Press, 1993.
23. M. Naor and B. Pinkas. Visual authentication and identification. In Burt Kaliski, editor, Advances in Cryptology - Crypto '97, pages 322-336, Berlin, 1997. Springer-Verlag. Lecture Notes in Computer Science Volume 1294.
24. M. Naor and A. Shamir. Visual cryptography. In Alfredo De Santis, editor, Advances in Cryptology - EuroCrypt '94, pages 1-12, Berlin, 1995. Springer-Verlag. Lecture Notes in Computer Science Volume 950.
25. Passlogix. v-go. www at http://www.passlogix.com/, 2000.
26. A. Paivio and K. Csapo. Concrete image and verbal memory codes. Journal of Experimental Psychology, 80(2):279-285, 1969.
27. Adrian Perrig and Dawn Song. Hash visualization: A new technique to improve real-world security. In Proceedings of the 1999 International Workshop on Cryptographic Techniques and E-Commerce (Cry-TEC '99), 1999.
28. L. Standing, J. Conezio, and R.N. Haber. Perception and memory for pictures: Single-trial learning of 2500 visual stimuli. Psychonomic Science, 19(2):73-74, 1970.
29. Karl Sims. Artificial evolution for computer graphics. In Thomas W. Sederberg, editor, Proceedings of the ACM SIGGRAPH Conference on Computer Graphics (SIG-GRAPH '91), pages 319-328, Las Vegas, Nevada, USA, July 1991. ACM Press.
30. J. Steiner, C. Neuman, and J. Schiller. Kerberos: An authentication service for open network systems. In USENIX Conference Proceedings, pages 191-200, 1988.
31. Alma Whitten and J. D. Tygar. Why johnny can't encrypt: A usability evaluation of pgp 5.0. In Proceedings of the 8th USENIX Security Symposium, August 1999.