We introduce and evaluate various methods for purely automated attacks against
PassPoints-style graphical passwords. For generating these attacks, we introduce a graph …

We present and evaluate various methods for purely automated attacks against click-based
graphical passwords. Our purely automated methods combine click-order heuristics with …

Although motivated by both usability and security concerns, the existing literature on click-
based graphical password schemes using a single background image (eg, PassPoints) has …

We provide an in-depth study of the security of click-based graphical password schemes like
PassPoints (Weidenbeck et al., 2005), by exploring popular points (hot-spots), and …

Graphical password systems based on the recognition of photographs are candidates to
alleviate current over-reliance on alphanumeric passwords and PINs. However, despite …

PassBYOP is a new graphical password scheme for public terminals that replaces the static
digital images typically used in graphical password systems with personalized physical …

The passwords for authenticating users are susceptible to shoulder-surfing attacks in which
attackers learn users' passwords through direct observations without any technical support …

Graphical passwords are often considered prone to shoulder-surfing attacks, where
attackers can steal a user's password by peeking over his or her shoulder in the …

In this paper, a new scheme that uses digraph substitution rules to conceal the mechanism
or activity required to derive password-images is proposed. In the proposed method, a user …

An information system is only as secure as its weakest point. In many information systems
that remains to be the human factor, despite continuous attempts to educate the users about …