On Purely Automated Attacks and Click-Based Graphical Passwords

We present and evaluate various methods for purely automated attacks against click-based graphical passwords. Our purely automated methods combine click-order heuristics with focusof-attention scan-paths generated from Itti et al.’s (1998) computational model of visual attention. Testing our method against previous work, it results in a significantly better automated attack, guessing 8-15% of passwords for two representative images using dictionaries of less than 224.6 entries, and about 16% of passwords on each of these images using dictionaries of less than

• Type: Conference
• Year: 2008
• Where: ACSAC
• Authors: Amirali Salehi-Abari, Julie Thorpe, Paul C. van Oorschot
• Keywords: ACSAC 2008, Better Automated Attack, Click-based Graphical Passwords, Itti Et Al, Security Privacy