Shoulder-Surfing Resistant Graphical Password System for Cloud

摘要

Cloud based applications authenticate users before they are allowed to access the services provided by them. Most commonly used user authentication mechanism is text-based password systems. Graphical passwords have been proposed because the pictorial-superiority effect suggests that people have better memory for images. After a comprehensive study on various graphical password schemes, it is found that they suffer from vulnerabilities of shoulder surfing attack and teasing the user by using several steps during login. The main objective of this research is to implement a secure shoulder-surfing resistant authentication scheme by providing the variable size grid to select images during login phase. For resistance, two ways of inputting the password is possible with this scheme. In order to analyze security, a shoulder surfing attacking session was conducted in the university with questionnaire utilized the user's feedback on security of proposed scheme. The results show that the proposed scheme can effectively balance the two symbiotic pillars of usability and security by increasing resistant to shoulder-surfing attack.