Shoulder Surfing and Keylogger Resistant using Graphical Password Scheme

Abstract

When users input their passwords in a public place, they may be at risk of attackers stealing their password. An attacker can capture a password by direct observation or by recording the individual’s authentication session. This is referred to as shoulder-surfing and is a known risk, of special concern when authenticating in public places. Attacker can also use various keylogger tools which are freely available over internet. This paper reports on the design and evaluation of a game-like graphical method of authentication that is resistant to shoulder-surfing. Since conventional password schemes are vulnerable to shoulder surfing, many shoulder surfing resistant graphical password schemes have been proposed. However, as most users are more familiar with textual passwords than pure graphical passwords, text-based graphical password schemes have been proposed. Unfortunately, none of existing text-based shoulder surfing resistant graphical password schemes is both secure and efficient enough. In this paper, we propose an improved text-based shoulder surfing resistant graphical password scheme by using colors. In the proposed scheme, the user can easily and efficiently login system. Next, we analyze the security and usability of the proposed scheme, and show the resistance of the proposed scheme to shoulder surfing and accidental login.

 

Keywords: Shoulder surfing, Authentication Scheme, Passwords, Graphical Authentication, password Attack.