Captcha as Graphical Passwords-A New Security Primitive Based on Hard AI Problems

CORC > 自动化研究所 > 中国科学院自动化研究所 > 数字内容技术与服务研究中心 > 听觉模型与认知计算

	Captcha as Graphical Passwords-A New Security Primitive Based on Hard AI Problems
	Zhu, Bin B.1; Yan, Jeff 2; Bao, Guanbo 3; Yang, Maowei 4; Xu, Ning 1
刊名	IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY
	2014-06-01
卷号	9 期号:6 页码:891-904
关键词	Graphical password password hotspots CaRP Captcha dictionary attack password guessing attack security primitive
英文摘要	Many security primitives are based on hard mathematical problems. Using hard AI problems for security is emerging as an exciting new paradigm, but has been under-explored. In this paper, we present a new security primitive based on hard AI problems, namely, a novel family of graphical password systems built on top of Captcha technology, which we call Captcha as graphical passwords (CaRP). CaRP is both a Captcha and a graphical password scheme. CaRP addresses a number of security problems altogether, such as online guessing attacks, relay attacks, and, if combined with dual-view technologies, shoulder-surfing attacks. Notably, a CaRP password can be found only probabilistically by automatic online guessing attacks even if the password is in the search set. CaRP also offers a novel approach to address the well-known image hotspot problem in popular graphical password systems, such as PassPoints, that often leads to weak password choices. CaRP is not a panacea, but it offers reasonable security and usability and appears to fit well with some practical applications for improving online security.
WOS标题词	Science & Technology ; Technology
类目[WOS]	Computer Science, Theory & Methods ; Engineering, Electrical & Electronic
研究领域[WOS]	Computer Science ; Engineering
关键词[WOS]	PASSPOINTS ; ATTACKS
收录类别	SCI
语种	英语
WOS记录号	WOS:000335386100001
公开日期	2015-09-22
内容类型	期刊论文
源URL	[http://ir.ia.ac.cn/handle/173211/8035]
专题	数字内容技术与服务研究中心_听觉模型与认知计算
作者单位	1.Microsoft Res Asia, Beijing 100080, Peoples R China 2.Newcastle Univ, Newcastle Upon Tyne NE1 7RU, Tyne & Wear, England 3.Chinese Acad Sci, Inst Automat, Beijing 100190, Peoples R China 4.Sichuan Univ, Chengdu 610207, Peoples R China
推荐引用方式 GB/T 7714	Zhu, Bin B.,Yan, Jeff,Bao, Guanbo,et al. Captcha as Graphical Passwords-A New Security Primitive Based on Hard AI Problems[J]. IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY,2014,9(6):891-904.
APA	Zhu, Bin B.,Yan, Jeff,Bao, Guanbo,Yang, Maowei,&Xu, Ning.(2014).Captcha as Graphical Passwords-A New Security Primitive Based on Hard AI Problems.IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY,9(6),891-904.
MLA	Zhu, Bin B.,et al."Captcha as Graphical Passwords-A New Security Primitive Based on Hard AI Problems".IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 9.6(2014):891-904.