An evaluation of the Game Changer Password System: A new approach to password security

McLennan, Conor T.; Manning, Philip; Tuft, Samantha E.

doi:10.1016/j.ijhcs.2016.12.003

Cited by 9 publications

(29 citation statements)

References 41 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…If the educational interventions could change their perception, one could argue that this might also reflect on their actual behaviour (Arachchilage et al, 2016). Serious games were also used to help users remember passwords (Tao and Adams, 2008;Malempati and Mogalla, 2011;McLennan et al, 2017). Most recently, McLennan et al (2017) found that a serious game for security education could be fun and usable for different age groups.…”

Section: Serious Games For Security Educationmentioning

confidence: 99%

“…Serious games were also used to help users remember passwords (Tao and Adams, 2008;Malempati and Mogalla, 2011;McLennan et al, 2017). Most recently, McLennan et al (2017) found that a serious game for security education could be fun and usable for different age groups. Most of this research has been well received when evaluated with users.…”

Section: Serious Games For Security Educationmentioning

confidence: 99%

“…A serious game is defined as a game designed for a primary purpose other than pure entertainment (Djaouti et al, 2011). The previous work in security education has found that serious games could motivate users to change their behaviour towards general concepts in computer security (Denning et al, 2013;Dasgupta et al, 2013), phishing attacks (Arachchilage et al, 2016;Misra et al, 2017) and to help users remember passwords (Tao and Adams, 2008;Malempati and Mogalla, 2011;McLennan et al, 2017). Therefore, a serious game that nudges users to improve memorability towards security questions, through educational interventions, could be an effective way to enhance users' behaviour to strengthen their answers to security questions.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Security questions education: exploring gamified features and functionalities

Micallef

Arachchilage

2018

ICS

View full text Add to dashboard Cite

Purpose Security questions are one of the techniques used to recover forgotten passwords. However, security questions have both security and memorability limitations. To limit their security vulnerabilities, stronger answers need to be used. As serious games can motivate users to change their security behaviour, the purpose of this paper is to explore the features and functionalities that users would require in a serious game that educates them to provide stronger answers to security questions. Design/methodology/approach A lab study was conducted to collect users’ feedback on the desired game features and functionalities. In Stage 1, participants selected security questions/answers. In Stage 2, participants played a game and evaluated the usability and the provided features. Findings The main findings reveal that most participants found the current features and functionalities to be desirable; socially oriented functionalities (e.g. getting help from other players) did not seem desirable because users feared that their acquaintances could gain access to their security questions. Originality/value This research recommends that designers of serious games for security education should: use intrinsic rewards to motivate users to have a better learning experience; provide easier challenges during the training period and provide harder challenges only when the game determines that the users learned to play the game; and design their games for mobile devices because even users who usually do not play games would play a security education game on a mobile device.

show abstract

Section: Serious Games For Security Educationmentioning

confidence: 99%

Section: Serious Games For Security Educationmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Security questions education: exploring gamified features and functionalities

Micallef

Arachchilage

2018

ICS

View full text Add to dashboard Cite

show abstract

“…This research showed that sentences make both secure and memorable passwords, thus suggesting that the generally accepted trade‐off between security and memorability is not always true (for a similar idea, see McLennan, Manning, & Tuft, ). This makes long sentences a particularly interesting type of password because they combine both high security and high memorability, thus satisfying the two main characteristics of a good password.…”

Section: Discussionmentioning

confidence: 88%

If it is easy to remember, then it is not secure: Metacognitive beliefs affect password selection

Luna

2019

Applied Cognitive Psychology

View full text Add to dashboard Cite

In this research, we applied current theories of metacognition to study computer security and tested the idea that users' password selection is affected by the metacognitive belief that if a password is memorable, then it is not secure. In two experiments, different types of eight-character passwords and longer, more secure sentences were presented. Participants rated perceived memorability and perceived security of the passwords and indicated whether they would use them in a critical and in a noncritical service. The results confirmed the belief. Sentences that are in fact highly secure and perceived as highly memorable were also perceived as weak passwords. The belief strongly affected password selection for critical services, but it had no effect on noncritical services. In sum, long sentences are a particularly interesting type of password because they meet both security and memorability criteria, but their use is limited by a false belief.

show abstract

“…Graphical passwords have been used as a potential solution for the vulnerabilities of alphanumerical passwords because of human memory limitations and/or social engineering complexities. Research has indicated that it is more difficult to decode graphical passwords than textual passwords, for which one can use methods such as brute force attack, dictionary attack, guessing, social engineering and spyware (Bendale et al , 2015; Bhusari, 2013; Chong and Marsden, 2009; Mclennan et al , 2017; Rao et al , 2013; Ray, 2012; Sahu and Singh, 2015). Graphical passwords also help to resolve the weakness of alphanumeric password memorability.…”

Section: Introductionmentioning

confidence: 99%

Effects of culture on graphical password image selection and design

Mohamed

Chakraborty

Pillutla

2020

JSIT

View full text Add to dashboard Cite

Purpose The purpose of this study is to examine the effects of culture on the cross-cultural design of the recognition-based graphical password (RBG-P) interface as inferred from Chinese and Saudi subjects’ image selections. Design/methodology/approach The authors use a between-group design adopted using two groups of participants from China and the Kingdom of Saudi Arabia to measure the differences caused by the effects of cultures on graphical password image selections. Three hypotheses have been tested in a four-week long study carried out using two questionnaires and an RBG-P webtool designed for images selection. Findings The results have indicated that participants are equally biased not only toward their own culture but also depending on their opinions about other cultures. In addition, when creating the password, it has been observed that culture not only influenced the image selection to create the password but also have an effect on the sequence of the images forming the password. Research limitations/implications Appropriately used image selection differences can be used appropriately in cross-cultural designs that will lead to better development of culturally adaptive interfaces that will boost the security posture of RBG-P authentication. Practical implications Some RBG-P interfaces that are produced outside the designer’s culture may suffer the effects of cultural differences. Hence, to incorporate culture in the interface, authentication systems within applications should be flexible by designing images that fit the culture in which the software will be used. To this end, access control interface testing should also be carried out in the environmental and cultural context in which it is will be used. Originality/value This paper provides useful information for international developers who develop cross-cultural usable secure designs. In such environments, the cross-culturally designs may have significant effects on the acceptability and adoption adaptation of the interface to multi-cultural settings.

show abstract

An evaluation of the Game Changer Password System: A new approach to password security

Cited by 9 publications

References 41 publications

Security questions education: exploring gamified features and functionalities

Security questions education: exploring gamified features and functionalities

If it is easy to remember, then it is not secure: Metacognitive beliefs affect password selection

Effects of culture on graphical password image selection and design

Contact Info

Product

Resources

About