GRAPHICAL PASSWORD BY IMAGE SEGMENTATION

ABSTRACT

Graphical password schemes have gained attention as an alternative to traditional alphanumeric passwords due to their potential for improved security and usability. This research focuses on the design and evaluation of a graphical password authentication system based on image segmentation techniques using the PassPoint scheme. The PassPoint scheme, initially proposed by Blonder, involves dividing an image into predefined passpoints and associating them with specific passwords. However, this research extends the scheme by allowing arbitrary images and eliminating the predefined boundaries for passpoints. Users can select any location within the chosen image as their passports, and a tolerance value is calculated to authenticate subsequent clicks. This approach offers users flexibility and freedom in creating passwords while maintaining security. The proposed system aims to enhance the usability, effectiveness, and security of graphical password authentication through the integration of image segmentation techniques within the PassPoint framework. Evaluations will be conducted to assess the system’s performance, usability, and resistance against common attacks, providing valuable insights for developing robust authentication systems.

CHAPTER 1  

INTRODUCTION

1.1          Background

By the very nature of the Internet, access is effortless, attracting individuals of different kinds and with different aims. While some individuals are aimed at sharing information others tend to conduct malicious activities. As a result, information security is of great importance to any service provider. Information security can be described as actions that implement services that assure adequate protection for information systems used by or hosted within an organization. From the description, services are technical or managerial methods used concerning the information being protected. Information systems are computer systems or communication systems that handle the information being protected, and protection implies the conjunction of integrity, confidentiality, authenticity, and availability (Shimeall & Spring, 2014). Hence, most organizations specify a password policy that sets requirements for the composition and usage of passwords, typically dictating minimum length, required categories (e.g. upper and lower case, numbers, and special characters), prohibited elements (e.g. own name, date of birth, address, telephone number). Some governments have national authentication frameworks that define requirements for user authentication to government services, including requirements for passwords (Alfayyadh et al, 2011).

A password is a word or string of characters used for user authentication to prove the identity of access approval to gain access to a resource, which is to be kept secret from those not allowed access. (Rodriguez, 2015). The use of passwords is known to be ancient.  Security would challenge those wishing to enter an area or approach it to supply a password or watchword, and would only allow individuals or groups to pass if they knew the password. In modern times, user names and passwords are commonly used by people during a login process that controls access to protected computer operating systems, mobile phones, cable TV decoders, and automated teller machines (ATMs). A typical computer user has passwords for many purposes: logging into accounts, retrieving e-mail, accessing applications, databases, networks, websites, and even reading the morning newspaper online. Despite the name, there is no need for passwords to be actual words; indeed passwords that are not actual words may be harder to guess, a desirable property. Some passwords are formed from multiple words and may more accurately be called a passphrase. The terms passcode and passkey are sometimes used when the secret information is purely numeric, such as the personal identification number (PIN) commonly used for ATM access. Passwords are generally short enough to be easily memorized and typed. (Christopher, 2015).

Confidentiality, availability, data integrity, and authentication are a few of the major security features provided by information security to ensure the reliability of the information. The importance of each of these varies depending on the type of organization (e.g. confidentiality will be of the most importance to the military). Authentication is related to identification and it is the most fundamental procedure to ensure security and provide access to sensitive web resources to users over the Internet. The most utilized and popular authentication method is Text-based password authentication which requires a valid user I.D. (Identity) and password in other to prevent unauthorized access (Liao & Lee, 2010; Menezes et al, 1997). This mechanism is easy and inexpensive to implement; however, this static password comes with major security drawbacks. For example, users tend to implement easy-to-guess passwords, use the same password in multiple accounts, write the passwords, or store them on their machines making them susceptible to numerous attacks including dictionary attacks, brute force attacks, phishing attacks, shoulder surfing, etc. (Prakash, Infant & Shobana, 2010).

Additionally, traditional passwords often require users to create and remember complex combinations of characters, which can be difficult and impractical. As a result, users may resort to reusing passwords across multiple accounts or choosing weak passwords, both of which further compromise security. Furthermore, traditional passwords are vulnerable to shoulder surfing attacks, where an attacker observes or records a user’s password as it is being entered. This type of attack can be particularly effective in public spaces or crowded environments.

To address these challenges, researchers have proposed alternative authentication methods, such as graphical passwords. Graphical passwords leverage images or graphical elements as password components, providing users with a more intuitive and user-friendly approach to authentication.

1.2 Statement of the Problem

Over the years, other authentication methods have been developed that involve the use of a secondary object (token-based authentication) or biometric system (biometric-based authentication) (Abdulkader, Ayman & Mostafa, 2015). Though more secure, these methods require more infrastructure/equipment. Graphical passwords offer an alternative to traditional alphanumeric passwords by utilizing visual cues for authentication. Instead of relying solely on characters, users create passwords based on images, shapes, colors, or other graphical elements. This approach takes advantage of the human brain’s capacity for visual memory and recognition, making it potentially more memorable and easier to use for many individuals.

Graphical password is based on the use of images/pictures rather than text. The idea of the graphical password has stirred several experiments, theories, and assumptions showing that presenting items as pictures is easier to remember than presenting items as words. Thus, the picture superiority effect appears to significantly increase memorability. (Paivio, 1991; Standing, Conezio & Haber, 1970). Graphical-based password provides some benefits such as enlarging the password space (in some graphical authentication), reducing the choice of trivial passwords, and making it difficult to share and write passwords (Golofit, 2007). However, this method is still vulnerable to various types of attacks especially shoulder-surfing (Biddle, Chiasson & Oorschot, 2011). In addition, in some graphical schemes, users have to browse through the entire set of images/pictures/objects, pictures have larger sizes than text, and therefore the server is expected to allocate a reasonable amount of space in storing these pictures. (Wiedenbeck, Waters, Birget, Brodskiy & Memon, 2005).

Therefore, this research proposes a graphical authentication that increases memorability, is resistant to shoulder surfing, aids in searching, and requires no upload of pictures/images during registration and authentication.

• Aim and Objective of the Study

This research aims to design, implement, and evaluate a graphical password authentication system that incorporates image segmentation techniques within the framework of the PassPoint scheme. The research aims to assess the effectiveness, usability, and security of the developed system, providing insights into the potential of image segmentation in enhancing graphical password authentication methods.

The specific objectives are to:

• Design a graphical password authentication method based on image segmentation using the PassPoint scheme.
• Implement and test the graphical password system based on the designed method.
• Evaluate the effectiveness and security of the graphical password system .
  • Significance of the Study

This research has several significant implications:

1. Security Enhancement: Investigating the security strength of the PassPoint scheme will contribute to the development of more secure authentication methods. Understanding its vulnerabilities and strengths will help in developing robust graphical password schemes.
2. User-Friendly Authentication: Assessing the usability and user experience of the PassPoint scheme will provide insights into its effectiveness as a user-friendly authentication method. This can lead to the design of more intuitive and memorable password systems.
3. Image Segmentation Techniques: Investigating the impact of image segmentation techniques on the PassPoint scheme will contribute to the field of image processing and computer vision. It can lead to advancements in image segmentation algorithms applicable to various domains.
4. Practical Applications: The findings of this research can be utilized by software developers, security professionals, and system designers to enhance the security and usability of authentication systems.
   • Scope of the Study

This study focuses on the PassPoint scheme using image segmentation as a graphical password authentication method. The research will involve the implementation and evaluation of a PassPoint scheme prototype based on selected image segmentation techniques. The evaluations will include security assessments against common attacks and usability studies to compare the PassPoint scheme with other authentication methods. The scope of the study does not include the development of new image segmentation algorithms, but the impact of different segmentation techniques will be investigated.

1.6 Definition of Terms

1. Graphical Passwords: Authentication methods that utilize images or graphical elements as password components instead of traditional alphanumeric passwords.
2. PassPoint Scheme: A graphical password authentication method that involves dividing an image into multiple regions (passpoints) and associating each passpoint with a particular password.
3. Image Segmentation: The process of dividing an image into meaningful or distinct regions based on visual properties or characteristics.
4. Usability: The extent to which a system or interface is easy to learn, understand, and use by the intended users.
5. Security: The protection of information and systems from unauthorized access, attacks, or breaches.
6. Brute-force Attack: An attack method in which an attacker systematically tries all possible combinations of passwords until the correct one is discovered.
7. Dictionary Attack: An attack method in which an attacker uses a precompiled list of commonly used passwords or phrases to attempt to gain unauthorized access.

GRAPHICAL PASSWORD BY IMAGE SEGMENTATION. GET MORE INFORMATION AND CYBER SECURITY PROJECTS TOPICS AND MATERIALS