In this paper, a new scheme that uses digraph substitution rules to conceal the mechanism or activity re- quired to derive password-images is proposed. In the pro- posed method, a user is only required to click on one...In this paper, a new scheme that uses digraph substitution rules to conceal the mechanism or activity re- quired to derive password-images is proposed. In the pro- posed method, a user is only required to click on one of the pass-image instead of both pass-images shown in each chal- lenge set for three consecutive sets. While this activity is sim- ple enough to reduce login time, the images clicked appear to be random and can only be obtained with complete knowl- edge of the registered password along with the activity rules. Thus, it becomes impossible for shoulder-surfing attackers to obtain the information about which password images and pass-images are used by the user. Although the attackers may know about the digraph substitution rules used in the pro- posed method, the scenario information used in each chal- lenge set remains. User study results reveal an average login process of less than half a minute. In addition, the proposed method is resistant to shoulder-surfing attacks.展开更多
Alphanumerical usernames and passwords are the most used computer authentication technique.This approach has been found to have a number of disadvantages.Users,for example,frequently choose passwords that are simple t...Alphanumerical usernames and passwords are the most used computer authentication technique.This approach has been found to have a number of disadvantages.Users,for example,frequently choose passwords that are simple to guess.On the other side,if a password is difficult to guess,it is also difficult to remember.Graphical passwords have been proposed in the literature as a potential alternative to alphanumerical passwords,based on the fact that people remember pictures better than text.Existing graphical passwords,on the other hand,are vulnerable to a shoulder surfing assault.To address this shoulder surfing vulnerability,this study proposes an authentication system for web-applications based on visual cryptography and cued click point recall-based graphical password.The efficiency of the proposed system was validated using unit,system and usability testing measures.The results of the system and unit testing showed that the proposed system accomplished its objectives and requirements.The results of the usability test showed that the proposed system is easy to use,friendly and highly secured.展开更多
由图形密码的使用情况可知图形密码的安全性存在致命的问题,即易被攻击者破解,为解决现有图形密码安全问题,设计一种新型多笔画系统推荐图形密码方案(Multi-stroke system recommended graphic password,MSSRGP)。该方案中系统图形密码...由图形密码的使用情况可知图形密码的安全性存在致命的问题,即易被攻击者破解,为解决现有图形密码安全问题,设计一种新型多笔画系统推荐图形密码方案(Multi-stroke system recommended graphic password,MSSRGP)。该方案中系统图形密码的图形是连通或非连通的有向图且系统推荐图形密码模式采用一对一模式,若某个图形密码已被用户选择,则系统不会推荐该图形密码,提高了抵御暴力破解和字典攻击的能力。针对图形密码验证方案中的实用性和安全性,组织兰州交通大学计算机专业的同学测试密码,对采集测试数据进行分析,可知MSSRGP方案在2笔画和3笔画中具有很好的实用性和较高的认可率。展开更多
Oracle Enterprise Manager is a system management tool, which provides an integrated solution for centrally managing your heterogeneous environment Servers. Enterprise Manager combines a graphical Console, Oracle Manag...Oracle Enterprise Manager is a system management tool, which provides an integrated solution for centrally managing your heterogeneous environment Servers. Enterprise Manager combines a graphical Console, Oracle Management Servers, Oracle Intelligent Agents, common services, and tools to provide an integrated, comprehensive systems management platform for managing Oracle products, and is comprised of such as展开更多
文摘In this paper, a new scheme that uses digraph substitution rules to conceal the mechanism or activity re- quired to derive password-images is proposed. In the pro- posed method, a user is only required to click on one of the pass-image instead of both pass-images shown in each chal- lenge set for three consecutive sets. While this activity is sim- ple enough to reduce login time, the images clicked appear to be random and can only be obtained with complete knowl- edge of the registered password along with the activity rules. Thus, it becomes impossible for shoulder-surfing attackers to obtain the information about which password images and pass-images are used by the user. Although the attackers may know about the digraph substitution rules used in the pro- posed method, the scenario information used in each chal- lenge set remains. User study results reveal an average login process of less than half a minute. In addition, the proposed method is resistant to shoulder-surfing attacks.
文摘Alphanumerical usernames and passwords are the most used computer authentication technique.This approach has been found to have a number of disadvantages.Users,for example,frequently choose passwords that are simple to guess.On the other side,if a password is difficult to guess,it is also difficult to remember.Graphical passwords have been proposed in the literature as a potential alternative to alphanumerical passwords,based on the fact that people remember pictures better than text.Existing graphical passwords,on the other hand,are vulnerable to a shoulder surfing assault.To address this shoulder surfing vulnerability,this study proposes an authentication system for web-applications based on visual cryptography and cued click point recall-based graphical password.The efficiency of the proposed system was validated using unit,system and usability testing measures.The results of the system and unit testing showed that the proposed system accomplished its objectives and requirements.The results of the usability test showed that the proposed system is easy to use,friendly and highly secured.
文摘安卓图形解锁(Android unlock pattern,简称AUP)作为目前移动终端上使用最广泛的图形密码方案,实际应用的密码在理论空间上分布很不均匀,导致其实际安全性远低于理论安全性,所暴露出的巨大安全隐患极易被攻击者利用以加快字典攻击与暴力破解的速度.提出一种随机剔除点的安卓图形解锁方案(Android-unlock-pattern scheme through random points exclusion,简称AUP-RPE).在设置密码阶段通过对原界面作一系列改动以规避用户具有安全隐患的使用习惯,并组织了1 100余人次的用户测试以收集实际应用的图形密码.建模分析发现,在保证与AUP相近的可用性前提下,AUP-RPE的安全性提高了3个以上数量级,证明了该方案具有更高的安全性.
文摘由图形密码的使用情况可知图形密码的安全性存在致命的问题,即易被攻击者破解,为解决现有图形密码安全问题,设计一种新型多笔画系统推荐图形密码方案(Multi-stroke system recommended graphic password,MSSRGP)。该方案中系统图形密码的图形是连通或非连通的有向图且系统推荐图形密码模式采用一对一模式,若某个图形密码已被用户选择,则系统不会推荐该图形密码,提高了抵御暴力破解和字典攻击的能力。针对图形密码验证方案中的实用性和安全性,组织兰州交通大学计算机专业的同学测试密码,对采集测试数据进行分析,可知MSSRGP方案在2笔画和3笔画中具有很好的实用性和较高的认可率。
文摘Oracle Enterprise Manager is a system management tool, which provides an integrated solution for centrally managing your heterogeneous environment Servers. Enterprise Manager combines a graphical Console, Oracle Management Servers, Oracle Intelligent Agents, common services, and tools to provide an integrated, comprehensive systems management platform for managing Oracle products, and is comprised of such as
