Bu-dash: A universal and dynamic graphical password scheme
Bu-dash: A universal and dynamic graphical password scheme
复制标题
Bu-dash：通用动态图形密码方案
DOI：
10.1007/978-3-031-05563-8_14
复制
发表时间：
2022
期刊：
影响因子：
--
通讯作者：
A. Takasu
中科院分区：
文献类型：
--
作者：
P. Andriotis;M. Kirby;A. Takasu
在移动设备上，生物特征认证逐渐取代了基于知识的认证方式。然而，个人识别号码、密码和图形密码方案（如Android模式解锁（APU））通常是身份验证的主要手段，或者它们构成了在生物识别失败时使用的辅助（或备份）方法。密码需要易于记忆才能使用，因此用户倾向于选择容易猜测的密码，从而损害安全性。APU是一个很好的例子，一个流行的和可用的图形密码方案，可以很容易地妥协，通过利用共同的和主要的人类行为特征。尽管存在漏洞，但该方案的受欢迎程度促使研究人员提出了一些调整和变化，以提高安全性，同时保持其熟悉的用户界面。然而，先前的工作表明，在保持可用性的同时提高安全性仍然是一项艰巨的任务。本文在APU方法的基础上提出了一种新的图形密码方案，该方案具有可用性、包容性、通用性和抗肩部冲浪和涂抹攻击的鲁棒性。我们的方案名为bu - dash，它具有动态用户界面，每次用户滑动屏幕时都会发生变化。我们的试点研究表明，bu - dash吸引了积极的用户接受率，并保持了可接受的可用性水平。
Biometric authentication gradually replaces knowledge-based methods on mobile devices. However, Personal Identification Numbers, passcodes, and graphical password schemes such as the Android Pattern Unlock (APU) are often the primary means for authentication, or they constitute an auxiliary (or backup) method to be used in case biometrics fail. Passcodes need to be memorable to be usable, hence users tend to choose easy to guess passwords, compromising security. The APU is a great example of a popular and usable graphical password scheme which can be easily compromised, by exploiting common and predominant human behavioristic traits. Despite its vulnerabilities, the scheme’s popularity has led researchers to propose adjustments and variations that enhance security but maintain its familiar user interface. Nevertheless, prior work demonstrated that improving security while preserving usability remains frequently a hard task. In this paper we propose a novel graphical password scheme built on the foundations of the well-accepted APU method, which is usable, inclusive, universal, and robust against shoulder surfing and smudge attacks. Our scheme, namedBu-Dash, features a dynamic user interface that mutates every time a user swipes the screen. Our pilot studies illustrate thatBu-Dashattracts positive user acceptance rates and maintains acceptable usability levels.