Graphical Passwords: Learning from the First Twelve Years
Graphical Passwords: Learning from the First Twelve Years
复制标题
DOI：
10.1145/2333112.2333114
复制
发表时间：
2012-08-01
影响因子：
16.6
通讯作者：
Van Oorschot, P. C.
中科院分区：
文献类型：
--
作者：
Biddle, Robert;Chiasson, Sonia;Van Oorschot, P. C.
从 1999 年左右开始，人们提出了许多图形密码方案作为基于文本的密码身份验证的替代方案。我们全面概述了该领域已发表的研究，涵盖可用性和安全性以及系统评估。本文首先对现有方法进行了分类，强调了所选方案的新颖特征并确定了关键的可用性或安全优势。然后，我们审查基于知识的身份验证适用于图形密码的可用性要求，识别此类系统必须解决的安全威胁并审查已知的攻击，讨论与实证评估相关的方法问题，并确定需要进一步研究和改进方法的领域。
Starting around 1999, a great many graphical password schemes have been proposed as alternatives to text-based password authentication. We provide a comprehensive overview of published research in the area, covering both usability and security aspects as well as system evaluation. The article first catalogues existing approaches, highlighting novel features of selected schemes and identifying key usability or security advantages. We then review usability requirements for knowledge-based authentication as they apply to graphical passwords, identify security threats that such systems must address and review known attacks, discuss methodological issues related to empirical evaluation, and identify areas for further research and improved methodology.