Password Scheme Research Articles

Advancements and Applications of Anti-Fraud Graphical Passwords

Visual cryptography represents a sophisticated and innovative approach to secure information sharing, gaining traction within the field of information security. This technology adeptly transforms sensitive data into visually interpretable graphics or images. These images are then segmented into multiple independent parts, each distributed among different stakeholders. This strategy ensures that no single party can access the complete data without collaboration, thereby enhancing security. This dissertation delves into several anti-fraud visual password schemes designed to mitigate risks associated with deceptive behaviors by participants and distributors alike. By addressing these vulnerabilities, the proposed schemes enhance the integrity and reliability of the data sharing process. The application of visual passwords in real-life scenarios not only bolsters data security but also shields private information from potential leaks. By reducing the complexity and cost associated with traditional decryption methods, visual cryptography offers substantial support for a wide array of application scenarios. This dissertation presents a comprehensive exploration of visual cryptography's potential to revolutionize data protection strategies, illustrating its importance and utility in contemporary digital environments.

Multiple Approaches Towards Authentication Using Keystroke Dynamics

In the realm of global computer security, safeguarding sensitive data and computer systems stands as an ongoing challenge. Striking the delicate balance between convenient access for legitimate users and thwarting imposter attacks is imperative. Traditional authentication methods, primarily reliant on username and password schemes, have been the longstanding cornerstone of cyber system authentication. Yet, this conventional approach is marred by inherent vulnerabilities, including password exchange, shoulder surfng, brute force attacks, dictionary attacks, speculation, phishing, and emerging threats. In response to these shortcomings, biometrics technology has emerged as a reliable alternative for authentication and verification, with Keystroke Dynamics being a well-established method. This research advances Keystroke Dynamics-based authentication through cutting-edge technologies, including machine learning, deep learning, and neural networks. A quantitative assessment demonstrates remarkable results—Machine Learning achieves 99.9% accuracy with the Random Forest model, Deep Learning combines CNN with GRU to reach 99.31% accuracy, and the DBN model registers at 98.01%. In the realm of neural networks, Bi-CNN and FFM-NN excel, with accuracy rates of 96.8% and 94.7%, respectively. These findings lay the foundation for robust, secure authentication systems, ensuring the protection of sensitive data and computer assets in our interconnected world.

Graphical Password Scheme Based on Color Hint Approach

Generally, textual password is the most used kind of authentication technique. However, this authentication type is vulnerable to a lot of attacks. Users using this kind of authentication techniques are at the risk of exposing vital organizational data or even password to attacks such as phishing, shoulder surfing, brute force and dictionary attacks etc. This is the major reason why a new authentication type is required, in other to minimize these threats or attacks, graphical authentication techniques were developed. But this authentication also faces attacks such as shoulder surfing and guessing attacks etc. In this paper, a graphical password scheme based on color hint approach has been developed and analyzed. The scheme authenticates users in two different ways which are: using an image to select different password click points and using secret color hint and transparent shapes as a way for the user to know the position of the click points after it had been reshuffled on the selected image. The project will be limited to the reliability, efficiency, ease of use and friendliness of graphical user interface during the user authentication. The system has been able to minimize or reduce the problem of shoulder surfing and guessing attacks.

Anonymization of face images with Contrastive Learning

Abstract Photos or videos taken by individuals often carry sensitive details such as facial identities, which has led to an escalating societal interest in privacy protection measures. We suggest an improved face identity transformer that offers password-protected anonymization and de-anonymization of photo-realistic facial images in visual data. Our face identity transformer is designed to (1) erase facial identity information after anonymization, (2) restore the original face when a correct password is provided and (3) generate an incorrect but realistic face when given an incorrect password. The processes of image anonymization and de-anonymization are facilitated through a password scheme, a multi-task learning objective and generative adversarial networks comprising InfoGAN and contrastive learning. In-depth experiments indicate that our methodology can execute anonymization and de-anonymization based on password conditions whilst reducing training time and enhancing image quality compared to existing anonymization procedures. Additionally, it maintains a recognition rate as low as 4.8% for anonymized images without sacrificing the face detection rate of the original method.

Choice-Based Graphical Password (CGP) Scheme for web applications

Choice-Based Graphical Password (CGP) Scheme for web applications

A Captcha-Based Graphical Password with Strong Password Space and Usability Study

stract: Security for authentication is required to give a superlative secure users’ personal information. This paper presents a model of the Graphical password scheme under the impact of security and ease of use for user authentication. We integrate the concept of recognition with re-called and cued- recall based schemes to offer superior security compared to existing schemes. Click Symbols (CS) Alphabet combine into one entity: Alphanumeric (A) and Visual (V) symbols (CS-AV) is Captcha-based password scheme, we integrate it with recall- based n×n grid points, where a user can draw the shape or pattern by the intersection of the grid points as a way to enter a graphical password. Next scheme, the combination of CS-AV with grid cells allows very large password space (2.4 × 104 bits of entropy) and provides reasonable usability results by determining an empirical study of memorable password space. Proposed schemes support most applicable platform for input devices and promising strong resistance to shoulder surfing attacks on a mobile device which can be occurred during unlocking (pattern) the smartphone

Pixel Value Graphical Password Scheme: Analysis on Time Complexity performance of Clustering Algorithm for Passpix Segmentation

Passpix is a key element in pixel value access control, containing a pixel value extracted from a digital image that users input to authenticate their username. However, it is unclear whether cloud storage settings apply compression to prevent deficiencies that would alter the file's 8-bit attribution and pixel value, causing user authentication failure. This study aims to determine the fastest clustering algorithm for faulty Passpix similarity classification, using a dataset of 1,000 objects. The source code for the K-Means, ISODATA, and K-Harmonic Mean scripts was loaded into a clustering experiment prototype compiled as Clustering.exe. The results demonstrate that the number of clusters affects the time taken to complete the clustering process, with the 20-cluster setting taking longer than the 10-cluster setting. The K-Harmonic Mean algorithm was the fastest, while K-Means performed moderately and ISODATA was the slowest of the three clustering algorithms. The results also indicate that the number of iterations did not affect the time taken to complete the clustering process. These findings provide a basis for future studies to increase the number of clusters for better accuracy.

To Survey Graphical Password Verification Method

Abstract: In this present time, authentication is the way of giving persons access to system object based on user's uniqueness. If the codes match, the process will be succeed and user will get the consent to access the system. Text based password scheme follows the guidelines such as at least 8 characters long, should combine upper-case and lower-case and digit. user have problem to remember their complicated password over time due to the limitation of human brain, user tend to forget about their password. User tend to use the same password for all type of account. So if one account is hacked, the possibility for other account to be hack is a high. Graphical password can be used as alternative to solve the issue related to the text-based authentication based on the fact that humans can tend to remember pictures batter then text. Now a day’s many computer system, Network and internet based environment are trying to use of graphical authentication technique in this paper we make a survey of the basic authentication and its technique and also presents a comprehensive study of graphical password authentication method and graphical password system.

STEGANOGRAPHY BASED MULTI LEVEL PASSWORD AUTHENTICATION SYSTEM IN BANKING SECTOR

Nowadays password selection is very important verification process. Various password authentication techniques are implemented in many applications. Traditional text-based password schemes are suffered from shoulder surfing problem, easily guessed by others. Password is easily identified by others. Graphical password, steganography-based password authentication technologies creating strong security for user password. The process of information hiding is known as steganography. It is used to shield the user password or hide the credential information. Then, graphical password authentication is authentication which increases the accuracy level. The proposed work described the secureness of web login application. Water marking based graphical password is best for accessing the web accounts. Image level authentication is easily understandable by authorized user. This paper majorly described, what requirement is needed by todays technologies, and focused to minimum password gesture attacks.

Bu-Dash: a universal and dynamic graphical password scheme (extended version)

Passwordless authentication is a trending theme in cyber security, while biometrics gradually replace knowledge-based schemes. However, Personal Identification Numbers, passcodes, and graphical passwords are still considered as the primary means for authentication. Passwords must be memorable to be usable; therefore, users tend to choose easy to guess secrets, compromising security. The Android Pattern Unlock is a popular graphical password scheme that can be easily attacked by exploiting human behavioristic traits. Despite its vulnerabilities, the popularity of the scheme has led researchers to propose adjustments and variations that enhance security but maintain its familiar user interface. Nevertheless, prior work demonstrated that improving security while preserving usability remains frequently a hard task. In this paper we propose a novel graphical password scheme built on the foundations of the well-accepted Android Pattern Unlock method, which is usable, inclusive, universal, and robust against shoulder surfing and (basically) smudge attacks. Our scheme, named Bu-Dash, features a dynamic user interface that mutates every time a user swipes the screen. Our pilot studies illustrate that Bu-Dash attracts positive user acceptance rates, it is secure, and maintains high usability levels. We define complexity metrics that can be used to further diversify user input, and we conduct complexity and security assessments.

Graphical-based password for user authentication in internet of things

Internet of Things has become a significant and evolving technology that cannot be avoidable in most of the sectors. However, the Internet of Things security became a concern due to the huge amount of the sensitive data that transferring through IoT resources. Secure the users' authentication process of the IoT is the first line of defense to protect the users' data from violation. Typically, the alphanumeric-based password is the popular method to authenticate the users of the IoT. But it is a vulnerable mechanism that can be violated easily. For that, this research aims to develop a graphical-based password scheme to support the traditional text password in the IoT technology. The proposed scheme is a hybrid (Two-factor) approach, based on two types of Knowledge-based Authentication method (alphanumeric-based password and graphical-based password) naming as IoT-GP. IoT-GP aims to improve the users' authentication security considering the usability enhancement. The results obtain from the conducted field study indicated that IoT-GP significantly improved the security and the usability. The results of the password entropy and password space indicated that IoT-GP obtained a high rate comparing to another schemes, which reflected on the IoT-GP ability to resist the guessing and brute force attacks.

Authentication By Grid Image Pattern

Abstract: This paper tries to point out flashy topics in an authentication system that works by having the user select from images, in a specific pattern (order), presented in a Graphical User Interface (GUI). So that the graphical password approach is called Graphical Image Authentication (GIA). The most common authentication method is to use alpha-numerical passwords. For example user tends to choose passwords that can be easily guessed on the other hand, if a password is difficult to guess then it is often difficult to remember. To overcome this problem of low security, Authentication methods change from images to passwords. Because humans can remember visuals (patterns) better than text, graphical password schemes have been offered as a feasible replacement to text-based systems. Visual patterns, rather than specific images, are easier to remember.Patterns are general easier to remembered or recognized than text. This early study implies that many graphics in graphical password systems may support memorability. Keywords: Authentication, Pattern based authentication, Click points, Grid images, Graphical passwords

Innovative Color Band Security System to Avoid Shoulder Surfing

Conventional password schemes are greatly at risk of shoulder surfing, many shoulder surfing graphical way schemes are created. But, end users are more acquainted with textual password than pure graphical password, text-based graphical password schemes are proposed. Sadly, none of the text-based shoulder surfing resistant graphical password schemes is both secure and efficient enough right now. In this paper, it proposed an enhanced version of text-based shoulder surfing resistant graphical password using your favourite color. In this proposed scheme, the user can easily and efficiently login in the system. Next, we analyze the protection and usefulness of the proposed scheme, and show the resistance of the proposed scheme to shoulder surfing and accidental login. The shoulder surfing attack is an attack in which attacker try get the user’s password by watching over the user’s shoulder as he enters his password. As conventional password schemes are prone to shoulder surfing, Bravado and Biretta proposed three shoulder surfing resistant graphical password schemes. Since then, many graphical password schemes with different degrees of resistance to shoulder surfing are proposed and every has its pros and cons. The alphabet utilized in the proposes scheme contains 16 characters, including 8 small letter alphabets from a to h & 8 numerical from 1-8.

Secure Data Access using Steganography and Image Based Password

Technology has developed to a very great extent, and the use of smart systems has introduced an increasing threat to data security and privacy. Most of the applications are built-in unsecured operating systems, and so there is a growing threat to information cloning, forging tampering counterfeiting, etc. This will lead to an un-compensatory loss for end-users particularly in banking applications and personal data in social media. The shoulder surfing attack in an assault that can be achieved with the aid of the adversary to accumulate the individual’s password by way of searching over the client’s shoulder as he enters his password. As conventional password schemes are vulnerable to Shoulder Surfing, Steganography and Cryptography proposed three shoulder surfing resistant graphical password schemes. However, most of the current graphical password schemes is liable to shoulder-browsing a recounted hazard wherein an attacker can seize a password by means of way of direct statement or by recording the authentication consultation. Because of the visual interface, shoulder-browsing becomes an exacerbated problem in graphical passwords. A graphical password is easier than a textual content-based password for the majority to undergo in thoughts. Suppose an eight-man or woman password is critical to benefit access into a specific computer network. Sturdy passwords may be produced which might be proof against guessing, dictionary assault. Key-loggers, shoulder surfing and social engineering. Graphical passwords have been utilized in authentication for mobile phones, ATM machines, E-transactions.

Verification Grid and Map Slipping Based Graphical Password against Shoulder-Surfing Attacks

Graphical password systems have received significant attention as one potential solution to the need for more usable authentication, but graphical passwords are often considered prone to shoulder-surfing attacks. In this paper, in order to build a balance between usability and security for authentication, we propose a new graphical password scheme by combining a specific verification grid with map slipping strategy. In the proposed scheme, a set of fixed grids are pregenerated on a map. During the registration process, the user is not only asked to select several points in sequence on the map to form a password route, but also required to choose one of the pregenerated grids as a specific verification grid for the subsequent authentication. The password route and the specific verification grid together form the complete graphical password. During the authentication process, the user needs to slip the map to let each point on the password route sequentially fit inside the specific verification grid which is already remembered by the user but difficult to be detected by the attackers. With the specific verification grid and the map slipping strategy, the proposed scheme can effectively defend against shoulder-surfing attacks. Meanwhile, the password points are represented as coordinates on the map; therefore, the proposed scheme has a negligible storage burden. The comparative experiments show that, using the proposed scheme, the success rate of shoulder-surfing defense can be increased by 37% to 56% with different grid sizes and password point numbers, and the usability of passwords can also be improved by 3% to 6%. Therefore, the proposed scheme can achieve good shoulder-surfing defense and reasonable usability simultaneously.

Impact of Cyber-Attacks on Economy of Smart Grid and their Prevention

The technical improvements in modern power systems by the use of smart sensors, smart meters, multi-direction communication networks, and computers have given birth to the cyber-physical smart grid networks. Any attack on the grid is a threat to the grid's operation and the data collected from it. Therefore, the security of this diverse network is the primary concern. Two attacks on a smart grid network tested in this paper are: Denial of Service (DoS) and Man In The Middle (MITM). Remote monitoring of the smart meter under either of the attacks indicates load fluctuations on the consumer side. It is seen that the location of these fluctuations is not limited to the area under attack. The supplier has to bear the economic effects. This paper discusses the cyber, physical and monetary impact of different cyber-attacks on a smart meter. An experiment is conducted on a hardware setup connected to a constant load, and the findings are noted. The two attacks are then extended to an IEEE-30 bus system and their impact is studied using MATPOWER simulations. For the same experimental setup, a protection scheme is also tested. The protection scheme is divided based on the attack condition: pre-attack, under-attack and post-attack conditions. Cryptographic data security in the pre-attack conditions is explored using MATLAB simulations where a binary coded password scheme is devised and then extended for a smart grid system. Multi-level encryption methods are used to prevent data breaches during attacks. The importance of firewall and antivirus databases is also analyzed.

A Hybrid Graphical Password Technique for Mobile Data Security Based on Direction

Mobile Security has exponentially increased data sensitivitydue to the users upsurge in mobile devices. People are utilizing smartphones as the substitute for desktop or laptop systems, from which they access, download, upload, modify, create, and share their files. Every data has become crucial as and when exposed to other platforms via smartphone. Therefore, all smartphones require security from malicious users. Forthcoming mobile devices will have hybrid graphical passwords as prospects for customer authentication. Users can easily interact with their devices through mixed authentication techniques on mobiles by safely entering the graphical passwords. This paper focuses on Character Set and Direction (CSD) technique developed on the android application for mobiles, which takes a character set and a unique direction as a graphical password for its input method. The significant advantage of the proposed technique is that; it is user-friendly, lightweight, has an extraordinary input/output modality, and has a custom-built mobile application prototype for the Registration and Login Phase. Developed a mobile application for Character set and Direction with four standard directions to construct a unique password scheme and investigate its security, memorability, and graphical user interface. The results are highly encouraging as this technique can be a highly secured authentication technique and high user memorability, and increased usability.

Review Paper Graphical Password Authentication Technique for Security

Abstract: In modern age user authentication is a mandatory attribute in the area of data security. The characteristics of finding an individual generally based on a user id and password which is commonly used methodology for identifying users in system. Text based password is a general authentication method used from early times. There are numerous authentication systems like biometric, textual, graphical, smart card etc. Graphical password is an alternative to alphanumeric password which is tough to remember and generally forget by users as times passes. But in graphical password there is less probability to disremember password because people generally remember images more effortlessly than text based password. There are also fewer probabilities for intruder to take the graphical based password because hackers will not be capable to access the images uploaded by the user as password. Some graphical password schemes have been intended so far as it grows password usability and security. In this paper, we manner a wide survey of the current graphical password methods. Keywords: Graphical password, Text based password, usability, security, Attacks, Authentication

Attacks on Graphical Password: A Study on Defense Mechanisms and Limitations

User authentication is mostly reliant on password-based based verification. Users generally used text-based passwords, which are user-friendly but often predictable and vulnerable to some common attacks. To overcome these shortcomings, graphical authentication methods have emerged. Here, users choose a sequence of images as passwords. Though such methods help users to better remember their passwords, they too suffer from attacks seen in the case of textual passwords. This paper presents a comprehensive summary of the vulnerabilities state of the art graphical password schemes against the following well-known attacks - Dictionary, Guessing, Brute force, Shoulder surfing, Spyware, and Social engineering. We believe the findings of this study can help researchers design more secure graphical password schemes making them more usable and a realistic replacement for text-based passwords.

Engineering Graphical Captcha and AES Crypto Hash Functions for Secure Online Authentication

Password alone is currently not trusted for user online authentication and security as threats from hackers continue to grow, requiring highly efficient defense safeguard protection against unauthorized users. Therefore, CAPTCHA techniques came into the picture as an automated assistance to distinguish between humans and robots. The CAPTCHA has several applications in the online security domain requiring to be merged with encrypted hash function benefitting from the facility of the graphical password schemes. This paper proposes engineering an authentication technique using graphical CAPTCHA with an AES encrypted hash password to maintain applicable security accessing systems. We propose three layered security system that joins highly efficient security mechanisms to avoid users’ stress of entering password many times or different other hectic routines in order to save account accessing.