Many Internet-based applications authenticate the users before they are allowed to access the services provided by them. The traditional text-based password system is vulnerable to brute force attack, peeping attack, and reverse engineering attacks. The pitfalls of text-based passwords are addressed by employing graphical passwords. To create a password the graphical password systems make use of custom images, icons, or faces. Using images will decrease the tendency to choose insecure passwords. In this paper, we present a shoulder-surfing resistant pair based graphical password scheme to authenticate a user. Further enhancement of the proposed scheme is briefly discussed. Security analysis of the method is also evaluated.
展开▼
