ITR/SY: Mandatory Human Participation: A New Paradigm for Building Secure Systems

目前，自动攻击是计算机安全的主要威胁。 例如，最便宜的家用PC可以针对目标系统尝试数千个“探测”。 暴力密码（或PIN码）猜测程序每秒可以生成并尝试数万个候选密码。 或者一台家用PC可能试图用数千个“虚假”请求淹没一个网站。 虽然有一些方法试图阻止这种攻击，但它们都可以在某种程度上被击败。 我们提出了一种新的方法来实现这种安全性，这种方法基于可以区分机器人和人类的技术。 因此，我们可以禁止自动攻击。 我们的技术允许一种新的限制：现在系统可以坚持只有人类才能访问他们宝贵的资源，他们可以拒绝机器人。这个问题的解决方案受到图灵对人工智能的测试的启发。 解决方案的基本思想是，计算机系统在接受或执行交易之前，首先要求每笔交易的作者解决一个难题。 谜题的内容将基于模式识别，视觉解释和自然语言理解领域的重大挑战问题。这些问题有一个本质属性，即人们可以很容易地解决它们，而计算机在可预见的未来不太可能解决它们。 一个典型的谜题是由计算机系统向代理发送一个位图图像，代理用一个asplayer字符串回复。 该图像可能包括一张图片和一个问题以及关于该图片的问题，例如“请键入以下手写单词”或“这张图片中的哪些对象是可食用的？“计算机系统根据提供的答案确定交易作者是否是人类。这个解谜过程导致了构建安全计算机系统的新框架。 在这个框架中，人类必须直接参与（通过解决难题并输入答案）身份验证或其他易受自动攻击的过程，称为强制人类参与（MHP）。 显然，在这个框架下，不可能对受保护的进程进行自动攻击。我们的研究目的是建立一个试验系统，可以用来演示MHP的基本思想。 这将主要基于基于字符的方法。 然后，我们计划仔细测试和衡量我们的系统性能如何以及用户的接受程度。

Currently, automatic attacks are a major threat to computer security. For example, the cheapest home PC can try thousands of "probes" against a targeted system. A brute-force password (or PIN number) guessing program can generate and try tens of thousands of candidate passwords each second. Or a home PC could attempt to flood a web site with thousands of "bogus" requests. While there methods that attempt to stop such attacks they all can be defeated to some degree. We propose a new approach to this security based on technology that can tell the difference between robots and humans. Thus, we can disallow automatic attacks. Our technology allows a new kind of restriction: now systems can insist that only humans have access to their valuable resources and they can disallow robots.The proposed solution to the problem is inspired by Turing's test for artificial intelligence. The fundamental idea of the solution is for a computer system to first ask the author of every transaction to solve a puzzle before accepting or executing the transaction. The content of the puzzle will be based on grand challenge problems in the domains of pattern recognition, visual interpretation, and natural language understanding. These problems have the essential property that people can solve them easily while computers are not likely to solve them in the foreseeable future. A typical puzzle would consist of the computer system sending the agent a bit-mapped image and the agent replying with an ascii string. The image might include a picture and a question and a question about that picture, such as "Please type the following handwritten word" or "Which of the objects in this picture are edible?" The computer system determines whether the transaction author is a human based on the answer supplied.This puzzle-solving process leads to a new framework for building secure computer systems. In this framework, a human being has to be directly involved (by solving the puzzle and typing in the answer) in the authentication or other processes that are vulnerable to automatic attacks, referred to as Mandatory Human Participation (MHP). Apparently, no automatic attack to the protected process would be possible under this framework.Our proposed research is to build a pilot system that can be used to demonstrate the basic idea of MHP. This will be based mostly on character based methods. We then, plan to carefuly test and measure how well our system performs and how well it is received by users.