Graphical Password Techniques Research Articles

Systemic Literature Review of Recognition-Based Authentication Method Resistivity to Shoulder-Surfing Attacks

The rapid advancement of information technology (IT) has given rise to a new era of efficient and fast communication and transactions. However, the increasing adoption of and reliance on IT has led to the exposure of personal and sensitive information online. Safeguarding this information against unauthorized access remains a persistent challenge, necessitating the implementation of improved computer security measures. The core objective of computer security is to ensure the confidentiality, availability, and integrity of data and services. Among the mechanisms developed to counter security threats, authentication stands out as a pivotal defense strategy. Graphical passwords have emerged as a popular authentication approach, yet they face vulnerability to shoulder-surfing attacks, wherein an attacker can clandestinely observe a victim’s actions. Shoulder-surfing attacks present a significant security challenge within the realm of graphical password authentication. These attacks occur when an unauthorized individual covertly observes the authentication process of a legitimate user by shoulder surfing the user or capturing the interaction through a video recording. In response to this challenge, various methods have been proposed to thwart shoulder-surfing attacks, each with distinct advantages and limitations. This study thus centers on reviewing the resilience of existing recognition-based graphical password techniques against shoulder-surfing attacks by conducting a comprehensive examination and evaluation of their benefits, strengths, and weaknesses. The evaluation process entailed accessing pertinent academic resources through renowned search engines, including Web of Science, Science Direct, IEEE Xplore, ProQuest, Scopus, Springer, Wiley Online Library, and EBSCO. The selection criteria were carefully designed to prioritize studies that focused on recognition-based graphical password methods. Through this rigorous approach, 28 studies were identified and subjected to a thorough review. The results show that fourteen of them adopted registered objects as pass-objects, bolstering security through object recognition. Additionally, two methods employed decoy objects as pass-objects, enhancing obfuscation. Notably, one technique harnessed both registered and decoy objects, amplifying the security paradigm. The results also showed that recognition-based graphical password techniques varied in their resistance to different types of shoulder-surfing attacks. Some methods were effective in preventing direct observation attacks, while others were vulnerable to video-recorded and multiple-observation attacks. This vulnerability emerged due to attackers potentially extracting key information by analyzing user interaction patterns in each challenge set. Notably, one method stood out as an exception, demonstrating resilience against all three types of shoulder-surfing attacks. In conclusion, this study contributes to a comprehensive understanding of the efficacy of recognition-based graphical password methods in countering shoulder-surfing attacks by analyzing the diverse strategies employed by these methods and revealing their strengths and weaknesses.

Securing Graphical Password Techniques from Shoulder Surfing and Camera Based Attacks

Authentication is a procedure that checks for validity and may be carried out in a variety of methods, including tokens, biometrics, and passwords with text and graphics. Usability is the primary driver of graphical passwords. However, shoulder surfing and camera-based attacks are the main potential disadvantage of this strategy. Shoulder surfing is a sort of social engineering method used in computer security to peek over the victim’s shoulder and steal information, including personal identification numbers (PINs), passwords, and other private information. This attack can be carried out either up close by peering straight over the victim’s shoulder or from a further distance, perhaps by utilizing a pair of binoculars or other comparable equipment. Crowded areas are when an assailant is most likely to shoulder surf the victim. These days, it’s fairly typical to enter passwords by looking. The fundamental process for gaze-based password entering is same as regular password entry, with the exception that the user stares at each desired character or triggered location in sequence rather of typing a key or touching the screen, much like when they are eye-typing. Therefore, in my project, I have made an effort to avoid these limitations by utilizing a powerful encryption technique like the Vernam Cipher

ENHANCED GRAPHICAL PASSWORD AUTHENTICATION SYSTEM IN BANKING SECTOR

A bank plays a essential role in people s life and security of the customer is the most important. In order to protect the user account the authentication must be secured. The generalmethod which is used is textual password. Graphical Password technique is used to enhance the security of the banking website and to provide an alternative to the alphanumeric password techniques. There is a lot of security breaches can take placein a banking transaction. The Proposed methodis implemented to secure the transactions by executing three step verification processes. Passwords at multiple levels in the banking system ensure higher security. It eradicates unauthorized users at the very initial stages. Cued Click Point technique, Message Digest 5(MD5) algorithm and Reverse One Time Password are used to implement the enhanced graphical password authentication system. Multi-level passwords are proven to be more secure as compared with the current authentication techniques.

Graphical Password Authentication System

Abstract: Graphical password is one of technic for authentication of computer security. Now days digital/computer security is most important things in computer science for protected user or customer data. And Shoulder-surfing is a one of the threats where a criminal can steal a password by direct observation or by recording the authentication session. There are several techniques available for this authentication, the most prevalent and simple of which is the Graphical password technique. So, we suggest a new technique to combat this problem. We have developed two concepts to combat shoulder surfing attacks. First, the user must register if the registration does not exist. Second, you must log in with a valid user ID and password. The password is a grouping of characters and numbers. Third, user has to cross image-based authentication where user can choose their password and this method have higher chances to offset each other. You should choose password according to the registration password, it must to match at login time. In colour base authentication, there should be several colour base passwords and depending on the colour, you need to remember the password sequence. And it’s like three-factor authentication. So, here is proposed a new graphical password authentication technique that is resilient to shoulder surfing and also to other types of probable attacks. Keyword: Computer Authentication, Graphical Password, Computer security

A Hybrid Graphical Password Technique for Mobile Data Security Based on Direction

Mobile Security has exponentially increased data sensitivitydue to the users upsurge in mobile devices. People are utilizing smartphones as the substitute for desktop or laptop systems, from which they access, download, upload, modify, create, and share their files. Every data has become crucial as and when exposed to other platforms via smartphone. Therefore, all smartphones require security from malicious users. Forthcoming mobile devices will have hybrid graphical passwords as prospects for customer authentication. Users can easily interact with their devices through mixed authentication techniques on mobiles by safely entering the graphical passwords. This paper focuses on Character Set and Direction (CSD) technique developed on the android application for mobiles, which takes a character set and a unique direction as a graphical password for its input method. The significant advantage of the proposed technique is that; it is user-friendly, lightweight, has an extraordinary input/output modality, and has a custom-built mobile application prototype for the Registration and Login Phase. Developed a mobile application for Character set and Direction with four standard directions to construct a unique password scheme and investigate its security, memorability, and graphical user interface. The results are highly encouraging as this technique can be a highly secured authentication technique and high user memorability, and increased usability.

A Taxonomy of Multimedia-based Graphical User Authentication for Green Internet of Things

Authentication receives enormous consideration from the research community and is proven to be an interesting field in today’s era. User authentication is the major concern because people have their private data on devices. To strengthen user authentication, passwords have been introduced. In the past, the text-based password was the traditional way of authentication, but this method has particular shortcomings. The graphical password has been introduced as an alternative, which uses a picture or a set of pictures to generate a password. In the future, it is a requirement of such approaches to maintain robustness and consume fewer energy resources to become suitable for the Green Internet of Things (IoT). Similarly, diverse graphical password authentication mechanisms have been used to provide users with better security and usability. In this article, we conduct an extensive survey on the existing approaches of graphical password authentication to highlight the challenges required to be addressed for Green IoT. In comparison to other existing surveys, the objective is to consolidate the graphical password technique and to identify the problem associated with it. Besides, this survey will also identify the vulnerabilities of the graphical password against several potential attacks. We have also examined the strengths and weaknesses of each technique along with the future research directions. This study also evaluates the usability of each approach by considering learnability, memorability, and so forth and also presents a comparative analysis with security.

A Bankable Pictorial Password Authentication Approach

Secrecy has always been a tremendous issue, for data creation and exchange. The biggest question is how to give access to only authorized users. For authorization user needs Authentication which can only be checked by their identity proof. The Password entry system is widely used for identification purposes. Password assures that a device or information can only be used by those who have been given rights to access them. Large systems are facing security issues because of text- password that are most commonly used. An alternative approach for authentication is Graphical passwords; these passwords are used to suppress known problems with traditional authentication methods. In this paper Knowledge-Based authentication techniques have been studied and the need for the graphical password has been discussed. This paper analyzes a Pure Recall graphical password technique known as Draw A Secret and proposes the Advance-DAS technique which overcomes all security and usability problems faced in DAS. The proposed technique presents promising results in terms of security and usability and memorability.

Restricting shoulder surfing: a modified graphical password Technique

Graphical passwords are the ways in which user click on the image or user can select the image to authenticate themselves instead of giving passwords. This technique is more secure that textual password techniques. In this article, the shoulder surfing preventive mechanism of graphical password authentication is given. Finally the login password system is proposed to deal with such type of problems. First time, we are introducing a modified approach is given to resolve the shoulder surfing based on recall and recognition based concepts. Usually it is seen that the most common vulnerability of graphical password is shoulder surfing attack. This research aims to analyze the usability feature of recognition based and recall based graphical password methods and present a technique to apply an image based password that is safe from the shoulder surfing attack. In the similar context, the purpose of this paper is to present an alternative way to apply the recall and recognition based technique that will be protective for guess through shoulder surfing. And this graphical technique will be easy to memories the authentication password and process of authentication.

Graphical passwords for older computer users

Traditional text password authentication is widely used to gain access to computing resources. Not all users possess the same cognitive and manual dexterity skills required to easily create, recall, and enter strong text passwords. We interviewed a group of older users, over the age of 60, and identified user challenges with recall and typing of strong text passwords. We developed and evaluated our graphical password user password system based on familiar facial images embedded randomly among unfamiliar, yet similar images. It assists older users through use of culturally familiar, and age-relevant images forming personalised password image sequences. Our usability study with 19 older volunteers measured recall, and timing with varying password image sequence lengths, increasing display complexity, and two input modalities, touchscreen and mouse. Our graphical password technique demonstrated a recall rate of 97%, password entropy superior to short PINs, and authentication time comparable to short text passwords.

SECURE GRAPHICAL PASSWORD SCHEME

In the world of computer applications authentication is the main process of granting access for an individual to get control over the services provided by different service providers. It is the process of identification of particular individual, unique username and password are used. Username and text-based password are the most commonly used technique in authentication, use of this technique is very popular in web applications. Lots of work has been done in the field of authentication. Conventional technique includes the text-based password, which is the combination of alphanumeric letters. On the other side of the authentication Graphical Password techniques are popular among handheld devices, the main motivation behind developing such kind of authentication technique is to provide strong but easy to remember password. Graphical authentication schemes are in use from decades, they have some limitations in early days, but comparatively the schemes which are in use today are secure and trust worthy. In this paper a technique for graphical authentication has been proposed based on the previous work, which can be implemented on the web application. The proposed authentication scheme is made secure using the homomorphic encryption technique to avoid the security issue in database.

The Shoulder Surfing Resistant Graphical Password Authentication Technique

Nowadays computer as well as information security is the most significant challenge. Authorized users should access the system or information. Authorization can’t occur without authentication. For this authentication various techniques are available. Among them the most popular and easy is the password technique. Password ensures that computer or information can be accessed by those who have been granted right to view or access them. Traditional password technique is a textual password which is also called alphanumeric password. But these textual passwords are easy to crack through various types of attack. So to overcome these vulnerabilities, a graphical password technique is introduced. As name suggests in this technique images (pictures) are used as a password instead of text. Also psychological study says that human can easily remember images than text. So according to this fact, graphical passwords are easy to remember and difficult to guess. But because of graphic nature, nearly all the graphical password techniques are vulnerable to shoulder surfing attack. So here, a new graphical password authentication technique is proposed which is resistant to shoulder surfing and also other types of possible attacks to some extent. It is a combination of recognition and recall based approach. It can be useful for smart held devices like smart phones, PDA, iPod, iPhone etc.

The Shoulder Surfing Resistant Graphical Password Authentication Technique

Nowadays computer as well as information security is the most significant challenge. Authorized users should access the system or information. Authorization can’t occur without authentication. For this authentication various techniques are available. Among them the most popular and easy is the password technique. Password ensures that computer or information can be accessed by those who have been granted right to view or access them. Traditional password technique is a textual password which is also called alphanumeric password. But these textual passwords are easy to crack through various types of attack. So to overcome these vulnerabilities, a graphical password technique is introduced. As name suggests in this technique images (pictures) are used as a password instead of text. Also psychological study says that human can easily remember images than text. So according to this fact, graphical passwords are easy to remember and difficult to guess. But because of graphic nature, nearly all the graphical password techniques are vulnerable to shoulder surfing attack. So here, a new graphical password authentication technique is proposed which is resistant to shoulder surfing and also other types of possible attacks to some extent. It is a combination of recognition and recall based approach. It can be useful for smart held devices like smart phones, PDA, iPod, iPhone etc.

English

New Security Techniques emerge everyday to ensure the safety of a system. The Graphical Password Technique called CaRP(Captcha as gRaphical Passwords) is built on CAPTCHA Technology. This paper proposes DOGGY (Distinct Organized Genius Graphical keY) which is built on multiple layers of CaRP which secures the system from Online Guessing Attacks. The sophistication of DOGGY helps users to secure their systems through a wide layered security which is complex to crack, providing a stronger password choice. DOGGY offers optimum security and can be used for a wide range of applications that require rigid security.

GRAPHICAL PASSWORD AUTHENTICATION USING PCCP WITH SOUND SIGNATURE

Persuasive Cued-Click Point is an advanced method of cued click point of graphical password technique which includes usability and security evaluations. It also useful for reduces hotspot problem and hence it helps the user in selecting password of higher security. This paper includes the persuasion to influence user choice in click based graphical passwords, so that users select more desultory and more difficult to guess the passwords. In this paper includes sound signature for recover the password if user forgot password or click point ,then playing the sound signature which is selected at registration time then it set new password and access the account. This paper include dead zone new concept to avoiding Shoulder surfing attack in graphical password authentication.

User Privileged CAPTCHA as Graphical Password for Multistage Authentication

Nowadays, user authentication is one of the important topics in information security. In today’s world the password security is very important. For password protection various techniques are available. Cued Click Points are a click-based graphical password scheme, a cued-recall graphical password technique. Users Click on one point per image for a sequence of images. The next image is based on the previous click-point. The passwords which are easy to memorize are chosen by the users and it becomes easy for attackers to guess it, but the passwords assigned by the strong system are difficult for users to remember. Many current systems have low level security, and even then users often devise insecure coping strategies in order to compensate for memorability and usability problems. Alternatives such as tokens or biometrics raise other issues such as privacy and loss. Various graphical password mechanisms have received considerable attention in response. In this paper describes CAPTCHA authentication is clearly a practical problem. In a new security primitive based on hard AI problems, namely, a novel family of graphical password systems built on top of Captcha technology is call Captcha as graphical passwords.

Online Password Guessing Attacks by Using Persuasive Click Point with Dynamic User Block

The goal of knowledge-based authentication system is to guide the users in creating graphical passwords. User often creates memorable passwords that are easy for attackers to guess, but strong system assigned passwords are difficult for user to remember. So the researchers of modern days use alternative methods where graphical pictures are used as a password. Human brain is good in remembering picture than textual character. Various graphical password techniques are used, now PCCP with dynamic user blocks approach presents a more feasible way of varying the security level depending upon the user's requirements. The proposed system lets the user to select the security level. In order to help the user to memorize the password audio support can also be provided. The system influence the user to create a click based graphical password, which is more random, so that it will be difficult for the hackers to guess it.

Enhancing a Dynamic user Authentication scheme over Brute Force and Dictionary attacks

The most universal computer authentication method is to use alpha numerical user names and passwords. This technique has been shown to have significant drawbacks. For example, users tend to pick passwords that can be simply guessed. Conversely, if a password is stiff to guess, then it is often tough to memorize. To tackle this setback, some researchers have urbanized authentication methods that use pictures as passwords. In this paper, we accomplish complete assessment of the obtainable graphical password techniques. We classify these techniques into two categories: recognition-based and recall based approaches. We discuss the strengths and boundaries of every scheme and mention the future study directions in this area. In this paper, we are conducting widespread assessment of existing graphical image password authentication technique. Also we are here proposing a new technique for graphical authentication moving towards rather advance we have been added some features like sending text to registered number and as well as registered email ids. so, in this way security is going to be increase more and more. For generating sms we are going to use some embedded devices like gsm modem. In this way we are going to increase the authentication of our application. Index terms : Online password secure attacks , brute force and dictionary attacks, password collections,