Centre for Security, Communications and Network Research

Plymouth University

Quantifying the effect of graphical password guidelines for better security

Jali MZ, Furnell SM, Dowland PS

Future Challenges in Security and Privacy for Academia and Industry (SEC 2011)

Lucerne, Switzerland, 7-9 June 2011. Volume 354/2011, Springer-Verlag, pp80-91

http://dx.doi.org/10.1007/978-3-642-21424-0_7

2011

Authentication using images or graphical passwords is one of the possible alternatives for traditional authentication based upon passwords. This study aims to investigate the practicality of giving guidelines or advice to users before they start choosing their image passwords, the effectiveness of using a smaller tolerance (clickable areas) and the optimum combination of click and image passwords. An alternative graphical prototype known as the Enhanced Graphical Authentication Scheme (EGAS) was developed in order to achieve these aims which implemented two different types of data collection (internal and external). From the findings, both internal and external groups indicated that the implementation of guidelines alone cannot guarantee the security of image passwords created by participants; but, in combination with other usability measurements this study has shown positive outcomes.

Sorry, this publication is not currently available to the public due to copyright restrictions.