Collaborative Research: Graphical Passwords -- Design, Analysis, and Human Factors

1)摘要=提案编号：CCR-0310793、CCR-0310490、CCR-0310159和CCR-0310571标题：图形密码--设计、分析和人为因素PI：J.C. Birget和Dawei Hong（Rutgers-Camden），联合PI：S.曼（西南州立大学，Minnesota），N.梅蒙（理工大学，Brooklyn）、S. Wiedenbeck（Drexel）.摘要：人类不善于记住字母数字密码，如果密码是足够复杂的安全。图形密码似乎更容易记住和使用。这里，显示图像并且用户选择图像中的几个地方。要登录，用户必须再次点击关闭这些地方。较旧的系统使用预处理的图像与预定义的点击区域，其中用户必须选择。研究人员设计的系统允许用户选择任何点作为点击点，并允许用户导入自己的图像。研究人员发明了一种图像的“鲁棒离散化”;这使用户能够产生完全相同的离散密码，即使他们不能在每次登录时点击完全相同的像素。密码很容易受到“肩膀冲浪”的攻击，这包括用户在登录过程中被观察或拍摄。研究人员设计的密码系统是免疫的shoulder surfing.One的目标，这项建议是人为因素的研究，有关易学性，记忆力，速度，安全性（不安全的做法），和用户满意度的图形密码系统。第二个目标是设计新的图形密码系统，以曲线、运动和三维场景为基础，以及设计用户可以在不同帐户上使用的密码“组合”，并作为一个组容易记住（和区分）。新的强大的离散化算法和概率分析的图形密码系统的安全性将被开发。

1) Abstract===========Proposal Number:CCR-0310793, CCR-0310490, CCR-0310159 and CCR-0310571TITLE:Graphical Passwords -- Design, Analysis, and Human FactorsPI: J.C. Birget and Dawei Hong (Rutgers-Camden),Co-PIs:S. Man (Southwest State U., Minnesota),N. Memon (Polytechnic U., Brooklyn),S. Wiedenbeck (Drexel).Abstract:Humans are not good at remembering alpha-numeric passwords, if the passwords are complicated enough to be secure. Graphical passwords seem easier to remember and to use. Here, an image is displayed and the user chooses a few places in the image. To log in, the user has to click close to these places again. Older systems use preprocessed images with predefined click regions, among which a user has to choose. The investigators designed systems that allow users to choose any points as click points, and that allow users to import their own images. The investigators invented a ``robust discretization'' of images; this enables users to produce exactly the same discrete password even though they cannot click on exactly the same pixels at each login. Passwords are vulnerable to ``shoulder surfing'', which consists of a user being observed, or filmed, during login. The investigators designed password systems that are immune to shoulder surfing.One of the objectives of this proposal is a human factors study, concerning learnability, memorability, speed, security (unsafe practices), and user satisfaction of graphical password systems. A second objective is to design new graphical password systems, based on curves, movement, and three-dimensional scenes, as well as to design ``bundles'' of passwords that a user can use on different accounts, and that are easy to remember (and distinguish) as a group. New robust discretization algorithms and probabilistic analyses of the security of graphical password systems will be developed.