BounTCHA：一种在引导式生成AI扩展视频中利用边界识别的CAPTCHA
BounTCHA: A CAPTCHA Utilizing Boundary Identification in Guided Generative AI-extended Videos
AI总结：
针对AI机器人绕过现有CAPTCHA的威胁，本文提出BounTCHA机制，利用生成式AI扩展视频并引入突变，通过人类对视频边界的敏感性与时间偏差区分人机，实验证明其能有效抵御多种攻击。
摘要：
近年来，人工智能（AI）尤其是多模态大语言模型（MLLMs）的快速发展，使其能够理解文本、图像、视频和其他多媒体数据，允许AI系统根据人类提供的提示执行各种任务。然而，AI驱动的机器人越来越能够绕过大多数现有的CAPTCHA系统，对Web应用程序构成重大安全威胁。这使得设计新的CAPTCHA机制成为一项紧迫的任务。我们观察到，人类对视频中的切换和突变高度敏感，而当前的AI系统仍然难以有效地理解和响应此类情况。基于这一观察，我们设计并实现了BounTCHA，这是一种利用人类对视频过渡和中断中边界感知的CAPTCHA机制。通过利用生成式AI在提示下扩展原始视频的能力，我们引入了意想不到的转折和变化，创建了一个用于生成CAPTCHA目的的引导式短视频的流水线。我们开发了原型并进行实验，收集了人类在边界识别中的时间偏差数据。该数据作为区分人类用户和机器人的基础。此外，我们对BounTCHA进行了详细的安全分析，证明了其对各种类型攻击的抵御能力。我们希望BounTCHA能够作为一种强大的防御手段，在AI驱动的时代保护数以百万计的Web应用程序。
英文摘要：
In recent years, the rapid development of artificial intelligence (AI) especially multi-modal Large Language Models (MLLMs), has enabled it to understand text, images, videos, and other multimedia data, allowing AI systems to execute various tasks based on human-provided prompts. However, AI-powered bots have increasingly been able to bypass most existing CAPTCHA systems, posing significant security threats to web applications. This makes the design of new CAPTCHA mechanisms an urgent priority. We observe that humans are highly sensitive to shifts and abrupt changes in videos, while current AI systems still struggle to comprehend and respond to such situations effectively. Based on this observation, we design and implement BounTCHA, a CAPTCHA mechanism that leverages human perception of boundaries in video transitions and disruptions. By utilizing generative AI's capability to extend original videos with prompts, we introduce unexpected twists and changes to create a pipeline for generating guided short videos for CAPTCHA purposes. We develop a prototype and conduct experiments to collect data on humans' time biases in boundary identification. This data serves as a basis for distinguishing between human users and bots. Additionally, we perform a detailed security analysis of BounTCHA, demonstrating its resilience against various types of attacks. We hope that BounTCHA will act as a robust defense, safeguarding millions of web applications in the AI-driven era.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
