DevilTyper

Abstract

CAPTCHA is an effective and widely used solution for preventing computer programs (i.e., bots) from performing automated but often malicious actions, such as registering thousands of free email accounts or posting advertisement on Web blogs. To make CAPTCHAs robust to automatic character recognition techniques, the text in the tests are often distorted, blurred, and obscure. At the same time, those robust tests may prevent genuine users from telling the text easily and thus distribute the cost of crime prevention among all the users. Thus, we are facing a dilemma, that is, a CAPTCHA should be robust enough so that it cannot be broken by programs, but also needs to be easy enough so that users need not to repeatedly take tests because of wrong guesses.In this article, we attempt to resolve the dilemma by proposing a human computation game for quantifying the usability of CAPTCHAs. In our game, DevilTyper, players try to defeat as many devils as possible by solving CAPTCHAs, and player behavior in completing a CAPTCHA is recorded at the same time. Therefore, we can evaluate CAPTCHAs' usability by analyzing collected player inputs. Since DevilTyper provides entertainment itself, we conduct a large-scale study for CAPTCHAs' usability without the resource overhead required by traditional survey-based studies. In addition, we propose a consistent and reliable metric for assessing usability. Our evaluation results show that DevilTyper provides a fun and efficient platform for CAPTCHA designers to assess their CAPTCHA usability and thus improve CAPTCHA design.

Script Familiarity and Its Effect on CAPTCHA Usability

“…Some studies focused on assessing the usability of the most popular CAPTCHA schemes (Bursztein, Bethard, Fabry, Mitchell, Jurafsky, 2010). On the other hand, some researchers have studied the process that can be followed to evaluate CAPTCHA usability (Ho, Wu, Chen, & Lei, 2011;Javed, Nazir, Khan, Khayam, & Shujun, 2011). Others have studied the effect of distortion applied to text-based CAPTCHA and the effect of users' age group (Ying-Lien & Chih-Hsiang, 2011).…”

“…In (Ho, Wu, Chen, & Lei, 2011), Ho et al proposed a human computation game for enumerating the usability of CAPTCHA. They developed DevilTyper a single player game in which players try to defeat devils appearing on the screen by identifying and typing the letters attached to each devil.…”