一种新的抗肩击的图形口令方案
A New Graphical Password Scheme Resistant to Shoulder-Surfing
摘要：
肩扛是一种已知的风险，攻击者可以通过直接观察或记录身份验证会话来捕获密码。由于视觉界面，这个问题在图形密码中变得更加严重。已经有一些图形化的方案抵抗或免疫肩膀冲浪，但他们有显着的可用性缺陷，通常在登录的时间和精力。在本文中，我们提出并评估了一个新的肩冲浪抵抗计划，具有理想的可用性的PDA。我们的灵感来自DAS中的绘图输入法和Story中用于序列检索的关联助记符。新方案要求用户在密码图像上有序地画一条曲线，而不是直接点击它们。绘画输入技巧以及补充措施，如擦除绘画痕迹，显示退化图像，以及以随机指定的图像开始和结束，为肩扛冲浪提供了良好的抵抗力。一项初步的用户研究表明，用户能够准确地输入密码，并随着时间的推移记住它们。
英文摘要：
Shoulder-surfing is a known risk where an attacker can capture a password by direct observation or by recording the authentication session. Due to the visual interface, this problem has become exacerbated in graphical passwords. There have been some graphical schemes resistant or immune to shoulder-surfing, but they have significant usability drawbacks, usually in the time and effort to log in. In this paper, we propose and evaluate a new shoulder-surfing resistant scheme which has a desirable usability for PDAs. Our inspiration comes from the drawing input method in DAS and the association mnemonics in Story for sequence retrieval. The new scheme requires users to draw a curve across their password images orderly rather than click directly on them. The drawing input trick along with the complementary measures, such as erasing the drawing trace, displaying degraded images, and starting and ending with randomly designated images provide a good resistance to shouldersurfing. A preliminary user study showed that users were able to enter their passwords accurately and to remember them over time.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
