Cryptanalysis of a Shoulder-Surfng Resistant Password Authentication Scheme

Abstract

Researchers have been trying to improve authentication for a long time. User still uses textual passwords to authenticate the systems. However, since weak textual passwords are susceptible to the dictionary attack and strong textual passwords are hard to remember. Graphical passwords have been proposed as an alternative to textual passwords because graphical passwords can increase password memorability. However, most textual and graphical passwords are vulnerable to shoulder-surfing attacks. Shoulder-surfing attacks refer to using direct observation techniques, such as looking over someone's shoulder, to get password. Shouldersurfing can also be done long distance with the aid of binoculars or other vision-enhancing devices. In 2011, C. Srinadhu etc. proposed a textual password scheme, MIRAGE 1.0 scheme, to reduce shoulder-surfing attacks. This paper reviews MIRAGE 1.0 scheme and discusses its advantages and disadvantages. Keywords-weak textual passwords; strong textual passwords; graphical passwords; shoulder-surfing attacks