COUNT BASED HYBRID GRAPHICAL PASSWORD TO PREVENT BRUTE FORCE ATTACK AND SHOULDER SURFING ATTACK

Abstract

Graphical passwords are more secure and resistant to dictionary attacks when compared to textual passwords, but they are not fully resistant to shoulder surfing and brute force attacks. Usually users tend to set their graphical password short and simple for usability but the problem here is their security is compromised. Another problem in graphical password is most of the graphical passwords contain hotspots and the users are tempted to set the graphical password with the hotspots by which attackers easily guess the password. In this work we have proposed a hybrid graphical password system. In our system, we have increased the password space by proposing count based click point algorithm in recognition based graphical password to make the system resistant to brute force attack. In the recall based graphical password step of our hybrid graphical password, we have included a gesture based password which makes the attacker difficult to record or observe and reproduce it to bypass the security.