Use of Human Cognition in HIP Design Via EmotIcons to Defend BOT Attacks

Nayeem, Mir Tafseer; Mukta, Md. Saddam Hossain; Ahmed, Samsuddin; Rahman, Mujibur

doi:10.1109/iccse.2012.33

Cited by 5 publications

(6 citation statements)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…CAPTCHA methods, especially text-based, have been widely use as the main defense mechanism against bots on the web. Recently, with the advancements in computer vision technology, text-based systems have become vulnerable to bot attacks with a high success rate (Yan & Ahmad, 2008;Mori & Malik, 2003;Captcha, 2015;El Ahmad, 2010;Bursztein et al, 2010). Hence a lot of work has proposed alternate CAPTCHA systems such as image-based (Elson et al, 2007;Esp-pix, 2015a, b;Chew & Tygar, 2004;Matthews & Zou, 2010;Zhu et al, 2010,) and audio-based systems (41, Bigham & Cavender, 2009;Captcha, 2015;Gao et al, 2010).…”

Section: Various Types Of Captcha Methodsmentioning

confidence: 99%

“…Gimpy works by choosing ten words randomly from a dictionary, and displaying them in a distorted and overlapped manner (shown in Figure 1(a)). Ez-Gimpy (Mori & Malik, 2003) is a simplified version of the Gimpy CAPT-CHA, adopted by Yahoo in their signup page. Ez-Gimpy requires the user to type in an English word picked randomly from dictionary (shown in Figure 1(b)).…”

Section: Text-based Captchasmentioning

confidence: 99%

See 1 more Smart Citation

Human Cognition in Automated Truing Test Design

Nayeem

Akand

Sakib

et al. 2014

International Journal of Software Science and Computational Intelligence

Self Cite

View full text Add to dashboard Cite

Nowadays, many services in the internet including Email, search engine, social networking are provided with free of charge due to enormous growth of web users. With the expansion of Web services, denial of service (DoS) attacks by malicious automated programs (e.g., web bots) is becoming a serious problem of web service accounts. A HIP, or Human Interactive Proofs, is a human authentication mechanism that generates and grades tests to determine whether the user is a human or a malicious computer program. Unfortunately, the existing HIPs tried to maximize the difficulty for automated programs to pass tests by increasing distortion or noise. Consequently, it has also become difficult for potential users too. So there is a tradeoff between the usability and robustness in designing HIP tests. In their propose technique the authors tried to balance the readability and security by adding contextual information in the form of natural conversation without reducing the distortion and noise. In the result section, a microscopic large-scale user study was conducted involving 110 users to investigate the actual user views compare to existing state of the art CAPTCHA systems like Google's reCAPTCHA and Microsoft's CAPTCHA in terms of usability and security and found the authors' system capable of deploying largely over internet.

show abstract

Section: Various Types Of Captcha Methodsmentioning

confidence: 99%

Section: Text-based Captchasmentioning

confidence: 99%

Human Cognition in Automated Truing Test Design

Nayeem

Akand

Sakib

et al. 2014

International Journal of Software Science and Computational Intelligence

Self Cite

View full text Add to dashboard Cite

show abstract

“…On the other hand, the fig-b has better usability but it can easily break by automated system i.e. lack of robustness [3].…”

Section: Robustness Vs Usabilitymentioning

confidence: 99%

“…Usability is always an important issue in designing a CAPTCHA. Successful text used by Microsoft, Yahoo, and Google use technique that are resistant to segmentation attacks by using random arcs, connected random lines and crowding characters [3]. Some text-based CAPTCHA"s are given below: In image-based CAPTCHA, the user is provided with a small set of images to name or differentiate or identify anomalies.…”

Section: Types Of Captchamentioning

confidence: 99%

“…Robustness: refers to the terms that a bot cannot break the CAPTCHA model easily. A bot can break a model by various types of bot-attacks as follows [3]: Dictionary Attack: It is a method of breaking into a password protected computer or server by methodically entering every word in a dictionary as a password. There are two types of dictionary attack [2]:…”

Section: Motivationmentioning

confidence: 99%

See 1 more Smart Citation