Persuasive Cued Click-Points: Design, Implementation, and Evaluation of a Knowledge-Based Authentication Mechanism

Authors:
Sonia Chiasson;Elizabeth Stobert;Alain Forget;Robert Biddle;Paul C. Van Oorschot
Affiliations:
Carleton University, Ottawa;Carleton University, Ottawa;Carleton University, Ottawa;Carleton University, Ottawa;Carleton University, Ottawa
Venue:
IEEE Transactions on Dependable and Secure Computing
Year:
2012

Citing 0
Cited 7

A multi-word password proposal (gridWord) and exploring questions about science in security research and usable security evaluation

Proceedings of the 2011 workshop on New security paradigms workshop
Video-passwords: advertising while authenticating

Proceedings of the 2012 workshop on New security paradigms
Security implications of password discretization for click-based graphical passwords

Proceedings of the 22nd international conference on World Wide Web
Exploring the design space of graphical passwords on smartphones

Proceedings of the Ninth Symposium on Usable Privacy and Security
Usability and security evaluation of GeoPass: a geographic location-password scheme

Proceedings of the Ninth Symposium on Usable Privacy and Security
Revisiting graphical passwords for augmenting, not replacing, text passwords

Proceedings of the 29th Annual Computer Security Applications Conference
On the security of picture gesture authentication

SEC'13 Proceedings of the 22nd USENIX conference on Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper presents an integrated evaluation of the Persuasive Cued Click-Points graphical password scheme, including usability and security evaluations, and implementation considerations. An important usability goal for knowledge-based authentication systems is to support users in selecting passwords of higher security, in the sense of being from an expanded effective security space. We use persuasion to influence user choice in click-based graphical passwords, encouraging users to select more random, and hence more difficult to guess, click-points.