Click to Zoom-Inside Graphical Authentication

Kumar, Varun; Gupta, Manoj; Chaturvedi, Ashish; Bhardwaj, Anuj; Singh, Manu Pratap

doi:10.1109/icdip.2009.65

Cited by 6 publications

(5 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In PCCP, the total time is considered the time taken from the first image to the fifth image and pressing the login button. It also includes time to thinking about the password by the individuals (Kumar et al, 2009) . In SPPCCP, the time differs according to whether three or five images are selected.…”

Section: Secure Password Persuasive Cued Click Point Results For Server Programmentioning

confidence: 99%

“…In this process, usability remains constant (Chiasson et al, 2008b). Kumar et al (2009) propose and evaluate the usability and security of Click to Zoom-inside (CTZ), a new graphical password authentication mechanism. Users have to click six times on one point in some given specific regions (pass regions) shown with dotted lines in a theme image displayed on the screen.…”

Section: Literature Reviewmentioning

confidence: 99%

See 1 more Smart Citation

Performance analysis and evaluation of secure password persuasive cued click points

Nayak¹,

Bansode²

2016

IJPCC

View full text Add to dashboard Cite

Purpose The purpose of this paper is to increase security using persuasive cued click points (PCCP) techniques and to make a system to provide security from the malware, key loggers and attacks. Design/methodology/approach The work methodology comprises two major phases. In phase one, the PCCP take place with the registration and login process done. It also includes text-based password which hides the character of password to protect from shoulder surfing attack. In phase two, the work includes background services which protect from key loggers. Findings Secure password persuasive cued click point (SPPCCP) is a module that facilitates authentication for the desktop-based applications and provides a single-machine licensing functionality. SPPCCP comprises little functionality to thwart attackers, such as persuasive click points with password protection. The techniques to protect against malware such as resist from debuggers and also to the key loggers that run on desktop computers. In this, Spearman rank correlation is used for detection of key loggers. There are functionalities used to secure desktop applications such as time constraint and user selection. Originality/value The contribution of this paper is to provide knowledge in the field of security. It makes the graphical password more secure and useful. The intention behind this research was to increase the security level up to 60-80 per cent. It is also used for prevention of shoulder surfing problem till 80 per cent; this research is also operated on key loggers, and SPPCCP finds the key loggers and removes it from the system. It also decrypts the data of database by encrypting it by SHA-512 algorithm and reduces the average login time up to 20-30 per cent; it will make a smaller view port of 33.5 × 33.5 pixel square to have more choice to select the password, thereby decreasing the probability of hotspot area up to 18-20 per cent.

show abstract

Section: Secure Password Persuasive Cued Click Point Results For Server Programmentioning

confidence: 99%

Section: Literature Reviewmentioning

confidence: 99%

Performance analysis and evaluation of secure password persuasive cued click points

Nayak¹,

Bansode²

2016

IJPCC

View full text Add to dashboard Cite

show abstract

“…COMPARISON GRAPHICAL PASSWORD TECHNIQUES TOWARD ATTACKS A comparison can now be made between graphical password attacks and the recognition type algorithms. The table below highlights the survey that has been done and also based on other surveys and papers [4,[16][17][18][19][20][21]. Despite our best effort to have a complete study, we will consider the missing data as part of future work.…”

Section: F Physical Attackmentioning

confidence: 95%

“…As shown below, Triangle, Movable frame and GUABRR omits mouse clicking that made shoulder surfing attacks attempts unsuccessful. However, there is still not much research done when dealing with spyware and guessing attacks [5,11,16,22]. It is also apparent that recognition algorithm that does not use proper high password space and not acknowledging the severity of physical attacks, are more prone to brute force attacks [16,23].…”

Section: F Physical Attackmentioning

confidence: 99%

A Secure Recognition Based Graphical Password by Watermarking

Lashkari¹,

Manaf²,

Masrom³

2011

2011 IEEE 11th International Conference on Computer and Information Technology

View full text Add to dashboard Cite

One of the most important topics in information security today is user authentication. There is a good security when using the text-based strong password schemes but often memorizing the password is so difficult and users writing them down on a piece of paper or saving inside the computer. There is an alternative solution to the text-based authentication which is the GUA (Graphical User Authentication) or simply Graphical Password based on the fact that humans tend to remember images better. This type of interface provides an easy to create and remember passwords for the users. However, one big issue that is plaguing GUA is shoulder surfing attack that can capture the users mouse clicks and image gallery attack that can change the images of the gallery with physical attack. In this paper, we will propose a new algorithm that using watermarking technique as the solution to solving image gallery attacks and using the random character set generation for each image for resistance to shoulder surfing attack to provide better system security. All the information images in registration phase will be process by copy right protection of watermarking where the login page will check this information for security purposes. Here, we will evaluate and analyze six types of the more common graphical password attack methods.

show abstract

“…In this paper, the reviewed graphical password schemes included are the S3PAS (Huanyu, 2007), Triangle Scheme (Sabrado, 2002), Intersection Scheme (Sabrado, 2002), Moveable Frame (Sabrado, 2002), YAGP (HaiChang, 2008), ColorLogin (HaiChang, 2009, RGGPW (Lin Phen-Lan, 2008), CTZ (Kumar V., 2009), Use Your Illusion (Eiji Hayashi, 2008), Association-based Graphical Password Scheme (Zhi Li, 2005), Blonder's Graphical Password Scheme (G. Blonder, 1996), PassPoint (S. Weidenbeck, 2005), Pass-Go (H. Tao, 2008), Passfaces (realuser.com), V-Go (Passlogix, 2007), Random Art (R. Dhamija, 2000), 3D (Alsulaiman F.A., 2006), Hasegawa et al Algorithm (Hasegawa, 2009), An Interaction and Secure User Authentication Scheme (Qibin Sun, 2008), User Authentication for Mobile Device through Image Selection Scheme (Sarwar M.I, 2008), SFR Password (http://www.sfr-software.de/cms/EN/pocketpc/sfr-password/index.html, 2009), Jansen et al Algorithm (W. Jansen, 2004), Recall-A-Story (Yves Maetx, 2009), Awase-E (Tetsuji Takada, 2008), Stroke-based Graphical Password Scheme (ZiranZheng, 2009), and DAS (Jermyn I., 1999).…”

Section: Existing Graphical Password Schemesmentioning

confidence: 99%

Identifying the Re-usability of Triangle Scheme and Intersection Scheme on Mobile Device

Seng¹,

Ithnin²,

Mammi³

2011

CIS

View full text Add to dashboard Cite

Graphical passwords are vulnerable to shoulder-surfing attacks as the images are easier to remember than text. Therefore, existing graphical password schemes incorporate anti-shoulder-surfing mechanisms to ensure that the graphical password is safe against such attacks. Unfortunately, according to the literature review, most graphical password schemes with anti-shoulder-surfing mechanisms are for general devices, not mobile devices. Therefore, in this experiment, two general device graphical password anti-shoulder-surfing mechanisms, which are the Triangle and Intersection schemes, are reconstructed on a mobile device to test if general device graphical password anti-shoulder-surfing mechanisms can be reused in mobile devices.

show abstract

Click to Zoom-Inside Graphical Authentication

Cited by 6 publications

References 10 publications

Performance analysis and evaluation of secure password persuasive cued click points

Performance analysis and evaluation of secure password persuasive cued click points

A Secure Recognition Based Graphical Password by Watermarking

Identifying the Re-usability of Triangle Scheme and Intersection Scheme on Mobile Device

Contact Info

Product

Resources

About