Master Thesis Graphical Passwords Authentication System Resistant To Shoulder Surfing Attacks

Abstract

Passwords are widely used for authentication in information systems, and it is still the dominant method of authentication despite its weaknesses due to its simplicity. However, users have difficulty remembering long passwords that are restricted with high security policies. Thus, they make short password, which makes it insecure and vulnerable to hacking. To solve this problem the graphical password techniques was proposed, which is a technique based on the use of images and patterns instead of text. However, this technique has deficiencies and requires further research. As with current schemes of this technique, when increasing the ease of use, it will reducing the security defenses vice versa. The main goal of this research is combining usability features with providing secure defense mechanisms, without compromising the ease of use and memorization. Where this research focuses on verifying graphical password schemes and summarizing the most important solutions that can be offered in the field of graphical password techniques. To make sure that the main objective of the research is achieved, a new system has been built based on the comparison between graphical password technique and text password technique. The proposed system was also tested with a sample of users and the usability features offered were evaluated, with positive results. Most of the users preferred the graphical password over the text password in terms of ease of use and remembering. The security of the proposed system was also evaluated, and the results showed that the system provides a defense mechanism against common attacks exposed by graphical password techniques.