The Design and Analysis of Graphical Passwords

By Ian H. Jermyn, A. Mayer, Fabian Monrose, Michael K. Reiter, Aviel D. Rubin. 1999

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

Differentially Private Password Frequency Lists (2016, neutral): “Passwords are the dominant method of authentication on the internet, and, despite many attempts to replace them [21], [8], [2], they are likely to remain entrenched as the dominant means of authentication [19].”
A Fuzzy Vault Scheme (2002, methodology): “One example is provided by graphical password systems, as in [ 18 ], where a user sketches a secret picture in lieu of entering a text password.”
Fast dictionary attacks on passwords using time-space tradeoff (2005, methodology): “Possible techniques include graphical passwords [18, 36, 8], reverse Turing tests [31, 35], and hardening passwords with biometric information [26].”
Touch me once and i know it's you!: implicit authentication based on touch screen patterns (2012, methodology): “The password pattern, similar to shape-based authentication approaches like Draw-a-secret [18] or PassShapes [36], enables user authentication by drawing a shape on the screen.”
A comparison of perceived and real shoulder-surfing risks between alphanumeric and graphical passwords (2006, background): “Early research into this idea found the potential for increased security [17] without much focus on usability.”
Behavioural biometrics: a survey and classification (2008, methodology): “Similar approaches are tried by Varenhorst (2004) with a system called 'passdoodles' and also by Jermyn et al. (1999) with a system called 'draw-a-secret'.”
Continuous mobile authentication using touchscreen gestures (2012, unknown): “[15] proposed a technique – “Draw a secret (DAS)”.”
The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes (2012, unknown): “A-Secret) scheme [45].”
You Are How You Touch: User Verification on Smartphones via Tapping Behaviors (2014, background): “Researchers have also suggested the use of graphical passwords as an easier alternative to text-based passwords [7, 17], based on the idea that people have a better ability to recall images than texts.”
Graphical passwords: a survey (2005, methodology): “Nali and Thorpe [29] conducted further analysis of the “Draw-A-Secret (DAS)” scheme [24].”
Smudge Attacks on Smartphone Touch Screens (2010, background): “Specifically, it should also be noted that there are several other proposed graphical password schemes [2, 4, 10].”
Graphical Password Authentication Using Cued Click Points (2007, background): “And brute force passwordguessing gets easier every year because computers get faster [6] [7].”
Securing passwords against dictionary attacks (2002, unknown): “Another class of authentication methods replaces textual passwords altogether by graphical password schemes [13, 23].”
Guessing human-chosen secrets (2012, background): “introduced the first such scheme, Draw-a-Secret, in 1999 [157].”
Graphical passwords: Learning from the first twelve years (2012, methodology): “Canonical Example: Draw-A-Secret Draw-A-Secret (DAS) [Jermyn et al. 1999] was the .rst recall-based graphical password system proposed.”
PassPoints: Design and longitudinal evaluation of a graphical password system (2005, methodology): “Here we focus on recognition and cued recall of images, rather than graphical systems based purely on unaided recall, such as ‘‘Draw-A-Secret’’ (Jermyn et al., 1999).”
On User Choice in Graphical Password Schemes (2004, unknown): “We note that not all graphical password schemes prescribe user chosen passwords (e.g., [24]), though most do (e.g., [2] [8] [3] [4] [7]).”