Skip to main content
SpringerLink
Log in

Analysis of the constructing principles and methodology for evaluating the security of shoulder-surfing resistant graphic passwords

  • Published:
Automatic Control and Computer Sciences Aims and scope Submit manuscript

Abstract

In the recent scientific literature, many proposals have been made to increase the resistance of password systems to shoulder surfing attacks. These passwords are called shoulder-surfing resistant graphic passwords (SSRGPs). This paper presents a general methodological approach to analyzing and evaluating the resistance of SSRGPs, which can be described in terms of the input tables.

This is a preview of subscription content, log in via an institution to check access.

Access this article

Log in via an institution

Price excludes VAT (USA)
Tax calculation will be finalised during checkout.

Instant access to the full article PDF.

Institutional subscriptions

Similar content being viewed by others

References

  1. Sobrado, L. and Birget, J.C., Graphical passwords, The Rutgers Scholar, 2002, vol. 4. http://rutgersscholar.rutgers. edu/volume04/sobrbirg/sobrbirg.htm.

    Google Scholar 

  2. Luca, A.D., Hertzschuch, K., and Hussmann, H., ColorPIN: Securing pin entry through indirect input, Proc. CHI, 2010, pp. 1103–1106.

    Google Scholar 

  3. Hirakawa, Y., Take, M., and Ohzeki, K., Pass-image authentication method tolerant to video-recording attacks, Proceedings of the Federated Conference on Computer Science and Information Systems, 2011, pp. 767–773.

    Google Scholar 

  4. Bianchi, A., Oakley, I., Kostakos, V., and Kwon, D.-S., The phone lock: Audio and haptic shoulder-surfing resistant PIN entry methods for mobile devices, Proc. TEI, 2011, pp. 197–200.

    Google Scholar 

  5. Minakov, V.A., Grigor’ev, S.V., and Miroshnikov, V.V., RF Patent 2445685, 2012.

    Google Scholar 

  6. Bianchi, A., Oakley, I., and Kwon, D.-S., Counting clicks and beeps: Exploring numerosity based haptic and audio PIN entry, Interact. Comput., 2012, vol. 24, no. 5, pp. 409–422.

    Article  Google Scholar 

  7. Gao, H.C., Ren, Z.J., Chang, X.L., and Liu, X.Y., A new graphical password scheme resistant to shouldersurfing, International Conference on Cyberworlds (CW), 2010, pp. 194–199.

    Google Scholar 

  8. Yakovlev, V.A. and Arkhipov, V.V., User authentication based on the chess graphical password scheme resistant to shoulder surfing, Autom. Control Comput. Sci., 2015, vol. 49, no. 8, pp. 803–812.

    Article  Google Scholar 

  9. Mun-Kyu Lee, Security notions and advanced method for human shoulder-surfing resistant PIN-entry, IEEE Trans. Inf. Forensics Secur., 2014, vol. 9, no. 4, pp. 695–708.

    Article  Google Scholar 

  10. Blundell, R., BlackBerry’s Picture Password Automatically Protects You from New Hacking Tactic. http://blogs.blackberry.com/2015/07/blackberrys-picture-password-automatically-protects-you-from-new-hackingtactic/.

  11. Kwon, T. and Hong, J., Analysis and improvement of a PIN-entry method resilient to shoulder-surfing and recording attacks, IEEE Trans. Inf. Forensics Secur., vol. 10, no. 2, pp. 278–292.

  12. Davydov, S.N., Kleptsov, M.Ya., and Lyubimova, L.V., The authentication process with the use of graphic passwords, Otkryt. Obraz., 2015, vol. 2, pp. 33–37.

    Article  Google Scholar 

  13. Patra, K., Nemade, B., Mishra, D.P., and Satapathy, P.P., Circular tolerance to increase password space and persuasive features, Procedia Comput. Sci., 2016, vol. 79, pp. 561–568.

    Article  Google Scholar 

  14. N4BB.COM, BlackBerry Picture Password and the PRIV. http://www.youtube.com/watch?v=Zl3EvJ-wunA.

  15. Yakovlev, V.A., Vasil’ev, N.N., and Arkhipov, V.V., Developing an interface and assessing the robustness of a steadfast attack against PIN-code peeping, Mezhdunarodnaya nauchno-tekhnicheskaya i nauchno-metodicheskaya konferentsiya “Aktual’nye problemy infotelekommunikatsii v nauke i obrazovanii”, Sbornik nauchnykh statei (Proc. International Scientific-Technical and Scientific-Methodical Conference Actual Problems of Information Telecommunications in Science and Education), 2015, vol. 1, pp. 216–220.

    Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Bonch-Bruevich St. Petersburg State University of Telecommunications, St. Petersburg, Russia

    V. A. Yakovlev & V. V. Arkhipov

  2. AO Roszheldorproekt, St. Petersburg, Russia

    S. E. Adadurov

Authors
  1. V. A. Yakovlev
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. V. V. Arkhipov
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. S. E. Adadurov
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to V. A. Yakovlev.

Additional information

Original Russian Text © V.A. Yakovlev, V.V. Arkhipov, S.E. Adadurov, 2017, published in Problemy Informatsionnoi Bezopasnosti, Komp’yuternye Sistemy.

About this article

Check for updates. Verify currency and authenticity via CrossMark

Cite this article

Yakovlev, V.A., Arkhipov, V.V. & Adadurov, S.E. Analysis of the constructing principles and methodology for evaluating the security of shoulder-surfing resistant graphic passwords. Aut. Control Comp. Sci. 51, 1000–1010 (2017). https://doi.org/10.3103/S0146411617080247

Download citation

  • Received:

  • Published:

  • Issue Date:

  • DOI: https://doi.org/10.3103/S0146411617080247

Keywords

Search

Navigation