A SIMPLE TEXT-BASED SHOULDER

SURFINGRESISTANT GRAPHICAL PASSWORD

SCHEME

PRESENTED BY-DEEPAK SUJITH

CONTENTSWhat is password and why do we need password ?Types of Graphical PasswordWorking of existing Graphical text based Login SystemProposed Login systemImproved solution for Text based Graphical PasswordsCurrent scope and Future ScopeDetails of hardware and software requirementsAdvantage’s/Disadvantage'sDo’s and Don’ts for secured passwordConclusionReferences

PASSWORD

oThe most commonly used form of User authenticationoVarious types of passwordsoStrength of passwordoEvolution of password technique

TYPES OF GRAPHICAL PASSWORDPass faces Pass Points DAS (Draw-A-Secret)

oPass faces• Faces are used as a graphical portfolio• Preference could be a limitationoPass Points• Use “a sequence of clicks” as a shared secret• There are hot spots oDAS(Draw A Secret)• Use “a sequence of clicks” as a shared secret• There are hot spots

WORKING OF EXISTING GRAPHICAL TEXT BASED LOGIN SYSTEMoFill the registration formoEnter text based user nameoChoose type of password Text/GraphicaloAdvantage of graphical passwordoDrawback of existing system

NEW USER REGISTER

Fill Registration form

Choose login method

QR Code user ID Textual user ID

Choose Password method

Textual Password Graphical password

Registration Successful

Existing USER Enter User ID Enter Password

VERIFY

Login Successful

Store

Proposed System

ADVANCEMENT IN GRAPHICAL PASSWORDoUse of QR code instead of textual user nameoUsing password encryption techniqueoSending alert message to user if attacker attempts to login

CURRENT SCOPE

oLocking folder’s

oLock application for smart phones

oSecuring Hard Disk

FUTURE SCOPE

oATM Login SystemoWeb based login

DETAILS OF SOFTWARE REQUIREMENTSoNetBeans IDE 8.02oJava 1.8oSql server for database connectivity

DETAILS OF HARDWARE REQUIREMENTSoMinimum hard disk space required 500GBoMinimum RAM required 2GBoProcessor Intel Core i3oOperating system Windows 7

Advantageso Easy to remembero Reduced shoulder surfing attackso Alert message on wrong attempto Use of QR codes

Disadvantageso Slightly time consuming

DO’S AND DON’TS FOR SECURED PASSWORD

Do’soUse easy to remember textual based color codesoEnter minimum 5 characters and maximum of 8 charactersoInclude special Characters to improve complexityDon'tsoDo not insert password which are easy to guess

CONCLUSIONoTextual based color passwords are an alternative to Picture password.

oIt satisfies both conflicting requirements i.e. it is easy to remember & it is hard to guess.

oBy the solution of the shoulder surfing problem, it becomes more secure & easier password scheme.

oBy implementing encryption algorithms and hash algorithms for storing and retrieving points, one can achieve more security

oTextual based color password is still immature, more research is required in this field.

REFERENCES

oL. Sobrado and J.C. Birget, “Shoulder-surfing resistant graphical passwords,” Draft, 2005. (http://clam.rutgers.edu/~birget/grPssw/srgp.pdf)oM. Sreelatha, M. Shashi, M. Anirudh, Md. Sultan Ahamer, and V. Manoj

Kumar. “Authentication schemes for session passwords using color and images,” International Journal of Network Security & Its Applications, vol. 3, no. 3, May 2011o M. K. Rao and S. Yalamanchili. “Novel shoulder-surfing resistant

authentication schemes using text-graphical passwords,” International Journal of Information & Network Security, vol. 1, no. 3, pp. 163-170, Aug. 2012.

THANK YOU