Starting around 1999, a great many graphical password schemes have been proposed as alternatives to text-based password authentication. We provide a comprehensive overview of published research in the area, covering both usability and security aspects as well as system evaluation. The article first catalogues existing approaches, highlighting novel features of selected schemes and identifying key usability or security advantages. We then review usability requirements for knowledge-based authentication as they apply to graphical passwords, identify security threats that such systems must address and review known attacks, discuss methodological issues related to empirical evaluation, and identify areas for further research and improved methodology.

/pdf/graphical-passwords-learning-from-the-first-twelve-years-1h8jsqlrwr.pdf

Graphical passwords: Learning from the first twelve years

Lately, electroencephalography (EEG)-based auth- entication has received considerable attention from the scientific community. However, the limited usability of wet EEG electrodes as well as low accuracy for large numbers of users have so far prevented this new technology to become commonplace. In this study a novel EEG-based authentication system is presented, which is based on the rapid serial visual presentation paradigm and uses a knowledge-based approach for authentication. Twenty-nine subjects’ data were recorded and analyzed with wet EEG electrodes as well as dry ones. A true acceptance rate of 100% can be reached for all subjects with an average required login time of 13.5 s for wet and 27 s for dry electrodes. Average false acceptance rates for the dry electrode setup were estimated to be $3.33 \times 10^{-5}$ .

A High-Security EEG-Based Login System with RSVP Stimuli and Dry Electrodes

In this paper, we present XSide, an authentication mechanism that uses the front and the back of smartphones to enter stroke-based passwords. Users can switch sides during input to minimize the risk of shoulder surfing. We performed a user study (n = 32) to explore how switching sides during authentication affects usability and security of the system. The results indicate that switching the sides increases security while authentication speed stays relatively fast (≤ 4 seconds). The paper furthermore provides insights on accuracy of eyes-free input (as used in XSide) and shows how 3D printed prototype cases can improve the back-of-device interaction experience.

Now you see me, now you don't: protecting smartphone authentication from shoulder surfers

A Picture Memory.

The graphical password authentication scheme uses icons instead of text-based passwords to authenticate users. Icons might be somehow more familiar to human beings than text-based passwords, since it is hard to remember the latter with sufficient security strength. No matter what kind of password is used, there are always shoulder-surfing problems. An attacker can easily get text-based password or graphical password by observation, capturing a video or recording the login process. In this paper, we propose a shoulder-surfing-proof graphical password authentication scheme using the convex-hull graphical algorithm. We give evaluation and comparisons to demonstrate the security strength and the functionality advantages of our scheme.

Shoulder-surfing-proof graphical password authentication scheme

Text-based passwords are ubiquitous authentication system. This traditional authentication system is well- known for its flaws in the aspects of usability and security issues that bring problems to users. Hence, there is a need for alternative mechanism to overcome these problems. Graphical passwords, which consist of clicking or dragging activities on the pictures rather than typing textual characters, might be the option to overcome the problems that arise from the text-based passwords system. In this paper, a comprehensive study of the existing graphical password schemes is performed. We compared and categorized these schemes into two groups; recognition-based scheme and recall-based scheme. We also list out several usability and security features for research continuity in this area.

/pdf/towards-identifying-usability-and-security-features-of-4j0dp0xgg4.pdf

Towards Identifying Usability and Security Features of Graphical Password in Knowledge Based Authentication Technique

The number of social media users increase rapidly every day, resulting in the increasing number of images uploaded into social media. Some problematic issues may arise if no precautions were taken before uploading the photos. The most current issues are unauthorised sharing of images over the Internet, identity fraud, ownership, and tarnished metadata from the images. Our proposed solution to help solve these issues is by using digital watermark with metadata. In order to increase the security of digital watermarking technique, selected metadata of the image are used as the embedded information for watermarking process. For experimentation purposes, an Android application, Mylmage, was developed to implement visible and invisible watermarking algorithms, and also for further experiments and analysis. These watermarked images will be used in four different social media sites, and then analysed for presence, or changes to, the embedded metadata for each of the watermarking techniques.

A study on image security in social media using digital watermarking with metadata

This paper will provide an analysis of a survey on picture attributes based on userpsilas affinity of choice. There are four picture attributes evaluated, which are picture size, picture presentation, picture colour and picture category. The objective of this survey is to collect and analyze the affinity of choice as selected by the users. There are 63 respondents involved in this survey. The respondents are from the Faculty of Computer Science and Information Systems (FSKSM) of University of Technology Malaysia, including staff members, undergraduate and postgraduate students. The sample involved 27 males and 36 females, with ages ranging from 18 to 30 years. All the respondents are frequent users of personal computers (PCs). The picture attributes information will be analyzed and selected information will be embedded into our graphical password scheme.

Graphical password: User’s affinity of choice — an analysis of picture attributes selection

Land registration requires a complex of sensitive data that requires a decentralized environment. Current technology only concentrates on the less secure database storage and expose to any misconduct. This is due to the characteristics of the database, which still has some problems with unstructured data and non-relational databases. As the land registration methods require complexities and challenges in terms of land tenure security at a high-risk scale, the security level of the land registration system needs to be put at the highest level. Fraud is one the major problem which is currently a severe problem in the land registration methods. Also, the land registration process takes a long duration of time to complete. The land title indicates that the land is confirmed and already registered to an owner. The reason for ownership is to perceive property rights, which incorporates data relating to land region, area, limits, just as proprietorship and title of the ardent property. However, the land is registered, but still, there are lots of causes of fraud happened in which land registration data can be quickly deleted and or edited. Since land is an asset, and any fraud can cause a loss in a lot of money, it becomes very crucial that the registration of land becomes speedy, transparent, and with less hustle. In this research, we propose a framework for secure data storage of land registration using Blockchain. Blockchain offers the solution with its underlying technology. Blockchain is decentralized, transparent, and fast compared to the traditional centralized software approach. For the validation of the proposed framework, we performed a comparison between the proposed and existing methods.

Secured Data Storage Framework for Land Registration using Blockchain Technology

To improve security of mobile device graphical password towards shoulder surfing attack, an anti-shoulder surfing mechanism called Painting Album Mechanism is proposed. This mechanism is constructed based on concept of painting album, and it is consists of three input schemes called Swipe Scheme, Color Scheme, and Scot Scheme. In this paper, usability of this mechanism have been verifying with the memorability test. 30 respondents were authenticating with these three input schemes with multiple authentications. Results were showing Painting Album Mechanism is usable since respondents were succeeding in recalling theirs passwords in acceptable period of time.

Hazinah Kutty Mammi

Papers

Towards Identifying Usability and Security Features of Graphical Password in Knowledge Based Authentication Technique

A study on image security in social media using digital watermarking with metadata

Graphical password: User’s affinity of choice — an analysis of picture attributes selection

Secured Data Storage Framework for Land Registration using Blockchain Technology

An Anti-Shoulder Surfing Mechanism and its Memorability Test