Collaborative Research: Graphical Passwords -- Design, Analysis, and Human Factors

1)摘要===========提案编号：CCR-0310793， CCR-0310490， CCR-0310159和ccr -0310571题目：图形密码——设计、分析和人为因素[j] . Birget和Dawei Hong (Rutgers-Camden), co - pi:S。曼（美国西南州，明尼苏达州），N。Memon (Polytechnic U, Brooklyn)，S。Wiedenbeck(德雷克斯)。摘要：如果密码足够复杂而不安全，人类就不擅长记住字母数字密码。图形密码似乎更容易记忆和使用。这里显示一张图像，用户在图像中选择几个位置。要登录，用户必须再次点击靠近这些地方。旧系统使用带有预定义点击区域的预处理图像，用户必须在其中进行选择。调查人员设计的系统允许用户选择任何点作为点击点，并允许用户导入自己的图像。研究人员发明了一种图像的“鲁棒离散化”；这使得用户能够生成完全相同的离散密码，即使他们不能在每次登录时点击完全相同的像素。密码很容易受到“肩拍”的攻击，即用户在登录过程中被监视或拍摄。调查人员设计了不受肩部冲浪影响的密码系统。本提案的目标之一是对图形密码系统的可学习性、可记忆性、速度、安全性（不安全实践）和用户满意度进行人为因素研究。第二个目标是设计基于曲线、运动和三维场景的新图形密码系统，以及设计用户可以在不同帐户上使用的“密码束”，并且作为一个组易于记住（和区分）。将开发新的鲁棒离散化算法和图形密码系统安全性的概率分析。

1) Abstract===========Proposal Number:CCR-0310793, CCR-0310490, CCR-0310159 and CCR-0310571TITLE:Graphical Passwords -- Design, Analysis, and Human FactorsPI: J.C. Birget and Dawei Hong (Rutgers-Camden),Co-PIs:S. Man (Southwest State U., Minnesota),N. Memon (Polytechnic U., Brooklyn),S. Wiedenbeck (Drexel).Abstract:Humans are not good at remembering alpha-numeric passwords, if the passwords are complicated enough to be secure. Graphical passwords seem easier to remember and to use. Here, an image is displayed and the user chooses a few places in the image. To log in, the user has to click close to these places again. Older systems use preprocessed images with predefined click regions, among which a user has to choose. The investigators designed systems that allow users to choose any points as click points, and that allow users to import their own images. The investigators invented a ``robust discretization'' of images; this enables users to produce exactly the same discrete password even though they cannot click on exactly the same pixels at each login. Passwords are vulnerable to ``shoulder surfing'', which consists of a user being observed, or filmed, during login. The investigators designed password systems that are immune to shoulder surfing.One of the objectives of this proposal is a human factors study, concerning learnability, memorability, speed, security (unsafe practices), and user satisfaction of graphical password systems. A second objective is to design new graphical password systems, based on curves, movement, and three-dimensional scenes, as well as to design ``bundles'' of passwords that a user can use on different accounts, and that are easy to remember (and distinguish) as a group. New robust discretization algorithms and probabilistic analyses of the security of graphical password systems will be developed.