The end is nigh: Generic solving of text-based CAPTCHAs

8th USENIX Workshop on Offensive Technologies, WOOT 2014

Volumn , Issue , 2014, Pages

  Bursztein, Elie ^a   Aigrain, Jonathan ^b   Moscicki, Angelika ^a   Mitchell, John C ^b  

^a GOOGLE INC   (United States)

^b STANFORD UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CHARACTER RECOGNITION; ELECTRONIC MAIL FILTERS; MACHINE LEARNING;

CAPTCHAS; REAL-WORLD; SEGMENTATION ALGORITHMS; SEGMENTATION TECHNIQUES; SEQUENTIAL APPROACH; SEQUENTIAL PROCESS; SINGLE-STEP;

IMAGE SEGMENTATION;

EID: 85084161905     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (47)

1. Are you human ? http://areyouahuman.com/.
2. Breaking the minteye image captcha in 23 lines of python. Blog post http://www.jwandrews.co.uk/2013/01/breakingthe-minteye-image-captcha-in-23lines-of-python/.
3. Minteye captcha. website: http://www.minteye.com/, 2013.
4. A. S. E. Ahmad, J. Yan, and M. Tayara. The robustness of google captchas. Technical report, Newcastle University, 2011.
5. E. Athanasopoulos and S. Antonatos. Enhanced captchas: Using animation to tell humans and computers apart. In IFIP International Federation for Information Processing, 2006.
6. P. Baecher, N. Büscher, M. Fischlin, and B. Milde. Breaking recaptcha: A holistic approach via shape recognition. In Future Challenges in Security and Privacy for Academia and Industry, pages 56–67. Springer, 2011.
7. E. Bursztein. How we broke the nucaptcha video scheme and what we propose to fix it. blog post http://elie.im/blog/security/howwe-broke-the-nucaptcha-video-scheme-and-what-we-propose-to-fix-it/, February 2012.
8. E. Bursztein, R. Bauxis, H. Paskov, D. Perito, C. Fabry, and J. C. Mitchell. The failure of noise-based non-continuous audio captchas. In Security and Privacy, 2011.
9. E. Bursztein and S. Bethard. Decaptcha: breaking 75% of eBay audio CAPTCHAs. In Proceedings of the 3rd USENIX conference on Offensive technologies, page 8. USENIX Association, 2009.
10. E. Bursztein, M. Martin, and J. Mitchell. Text-based captcha strengths and weaknesses. In Proceedings of the 18th ACM conference on Computer and communications security, CCS’11, pages 125–138, New York, NY, USA, 2011. ACM.
11. E. Bursztein, A. Moscicki, C. Fabry, S. Bethard, D. Jurafsky, and J. C. Mitchell. Easy does it: More usable captchas. CHI, 2014.
12. K. Chellapilla, K. Larson, P. Simard, and M. Czerwinski. Computers beat humans at single character recognition in reading based human interaction proofs (hips). In CEAS, 2005.
13. K. Chellapilla and P. Simard. Using machine learning to break visual human interaction proofs (HIPs). Advances in Neural Information Processing Systems, 17, 2004.
14. C. Cortes and V. Vapnik. Support-vector networks. Machine learning, 20(3):273–297, 1995.
15. C. Cruz-Perez, O. Starostenko, F. Uceda-Ponga, V. Alarcon-Aquino, and L. Reyes-Cabrera. Breaking recaptchas with unpredictable collapse: heuristic character segmentation and recognition. In Pattern Recognition, pages 155–165. Springer, 2012.
16. B. Dasarathy. Nearest Neighbor ({NN}) Norms:{NN} Pattern Classification Techniques. 1991.
17. R. Datta. Imagination: A robust image-based captcha generation system. In ACM Multimedia Conf., 2005.
18. J. G. Daugman et al. Uncertainty relation for resolution in space, spatial frequency, and orientation optimized by two-dimensional visual cortical filters. Optical Society of America, Journal, A: Optics and Image Science, 2(7):1160–1169, 1985.
19. T. G. Dietterichl. Ensemble learning. The handbook of brain theory and neural networks, pages 405–408, 2002.
20. J. Elson, J. Douceur, J. Howell, and J. Saul. Asirra: A captcha that exploits interest-aligned manual image categorization. In 4th ACM CCS, 2007.
21. H. Gao, W. Wang, J. Qi, X. Wang, X. Liu, and J. Yan. The robustness of hollow captchas. In Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security, pages 1075–1086. ACM, 2013.
22. P. Golle. Machine learning attacks against the asirra captcha. In ACM CCS 2008, 2008.
23. I. J. Goodfellow, Y. Bulatov, J. Ibarz, S. Arnoud, and V. Shet. Multi-digit number recognition from street view imagery using deep convolutional neural networks. arXiv preprint arXiv:1312.6082, 2013.
24. R. Gossweiler, M. Kamvar, and S. Baluja. What’s up captcha? a captcha based on image orientation. In World Wide Web, 2009.
25. G. E. Hinton, S. Osindero, and Y.-W. Teh. A fast learning algorithm for deep belief nets. Neural computation, 18(7):1527–1554, 2006.
26. R. Hof. Ai startup vicarious claims milestone in quest to build a brain: Cracking captcha. http://www.forbes.com/sites/roberthof/ 2013/10/28/ai-startup-vicarious-claims-milestone-in-quest-to-build-a-brain-craking-captcha/, November 2013.
27. M. Hoque, D. Russomanno, and M. Yeasin. 2d captchas from 3d models. In IEEE SoutheastCon 2006, 2006.
28. A. Kittur, E. H. Chi, and B. Suh. Crowdsourcing user studies with mechanical turk. In CHI’08: Proceeding of the twenty-sixth annual SIGCHI conference on Human factors in computing systems, pages 453–456, New York, NY, USA, 2008. ACM.
29. Q. V. Le, M. Ranzato, R. Monga, M. Devin, K. Chen, G. S. Corrado, J. Dean, and A. Y. Ng. Building high-level features using large scale unsupervised learning. In ICML, 2011.
30. Leapmarketing. Video-based captchas now available for sites and blogs. http://www.prnewswire.com/news-releases/video-basedcaptchas-now-available-for-sites- and-blogs-97471319.html, 2008.
31. Y. Lecun. The mnist database of handwritten digits algorithm results. http://yann.lecun.com/exdb/mnist/.
32. Y. LeCun, L. Bottou, Y. Bengio, and P. Haffner. Gradient-based learning applied to document recognition. Proceedings of the IEEE, 86(11):2278–2324, 1998.
33. B. Leibe, A. Leonardis, and B. Schiele. Robust object detection with interleaved categorization and segmentation. International Journal of Computer Vision, 77(1):259–289, 2008.
34. C. D. Manning, P. Raghavan, and H. Schütze. Introduction to information retrieval, volume 1. Cambridge University Press Cambridge, 2008.
35. O. Matan, C. Burges, and J. Denker. Multi-digit recognition using a space displacement neural network. Advances in Neural Information Processing Systems, pages 488–488, 1993.
36. N. J. Mitra, H.-K. Chu, T.-Y. Lee, L. Wolf, H. Yeshurun, and D. Cohen-Or. Emerging images. ACM Transactions on Graphics, 28(5), 2009. to appear.
37. G. Mori and J. Malik. Recognizing objects in adversarial clutter: Breaking a visual captcha. In CVPR 2003, pages 134–144, 2003.
38. M. Motoyama, K. Levchenko, C. Kanich, D. McCoy, G. Voelker, and S. Savage. Re: CAPTCHAs–Understanding CAPTCHA-solving services in an economic context. In Proceedings of the 19th USENIX conference on Security, pages 28–28. USENIX Association, 2010.
39. ~naor/PAPERS/human.ps, 1997.
40. L. Rokach. Pattern classification using ensemble methods, volume 75. World Scientific, 2009.
41. F. Rosenblatt. The perceptron: a perceiving and recognizing automation (projet PARA), Cornell Aeronautical Laboratory Report. 1957.
42. Spamtech. Cracking the areyouahuman captcha. http://spamtech.co.uk/software/bots/cracking-the-areyouhumancaptcha/, 2012.
43. J. Tam, J. Simsa, S. Hyde, and L. von Ahn. Breaking audio captchas. In Advances in Neural Information Processing Systems, 2008.
44. J. Wilkins. Strong captcha guidelines v1. 2. Retrieved Nov, 10:2010, 2009.
45. Y. Xu, G. Reynaga, S. Chiasson, J.-M. Frahm, F. Monrose, and P. van Oorschot. Security and usability challenges of moving-object captchas: Decoding codewords in motion. In Usenix Security, 2012.
46. J. Yan and A. Ahmad. Breaking visual captchas with naive pattern recognition algorithms. In ACSAC 2007, 2007.
47. J. Yan and A. El Ahmad. A Low-cost Attack on a Microsoft CAPTCHA. In Proceedings of the 15th ACM conference on Computer and communications security, pages 543–554. ACM, 2008.