A security assessment of tiles
A security assessment of tiles
复制标题
瓷砖安全评估
DOI：
10.1145/2212776.2223737
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
Nicholson J
中科院分区：
文献类型：
--
作者：
Nicholson J
在本文中，我们提出瓷砖，图形认证系统中，用户被分配一个目标图像，随后要求选择该图像的片段。我们评估该系统在何种程度上提供保护，以抵御两种安全威胁：观察攻击和共享的认证凭据在两个实验室为基础的研究。我们注意到新系统的一些漏洞，但提供的证据表明，自动操纵诱饵图像的相似性可以帮助减轻来自口头共享和观察攻击的威胁。
In this paper we propose Tiles, a graphical authentication system in which users are assigned a target image and subsequently asked to select segments of that image. We assess the extent to which this system provides protection against two security threats: observation attacks and sharing of authentication credentials in two laboratory-based studies. We note some of the vulnerabilities of the new system but provide evidence that automated manipulation of the similarity of the decoy images can help mitigate the threat from verbal sharing and observation attacks.