arrow
返回

Using machine learning to identify common flaws in CAPTCHA design: FunCAPTCHA case analysis

delete2017-09-01
delete2
delete
OA
AI
C
Carlos Javier Hernández‐Castro *
M
María D. R‐Moreno
D
David F. Barrero
S
Stuart Gibson
DOI:10.1016/j.cose.2017.05.005delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
Human Interactive Proofs (HIPS (1) or CAPTCHAs (2)) have become a first-level security measure on the Internet to avoid automatic attacks or minimize their effects. All the most widespread, successful or interesting CAPTCHA designs put to scrutiny have been successfully broken. Many of these attacks have been side-channel attacks. New designs are proposed to tackle these security problems while improving the human interface. FunCAPTCHA is the first commercial implementation of a gender classification CAPTCHA, with reported improvements in conversion rates. This article finds weaknesses in the security of FunCAPTCHA and uses simple machine learning (ML) analysis to test them. It shows a side-channel attack that leverages these flaws and successfully solves FunCAPTCHA on 90% of occasions without using meaningful image analysis. This simple yet effective security analysis can be applied with minor modifications to other HIPs proposals, allowing to check whether they leak enough information that would in turn allow for simple side-channel attacks. (C) 2017 Elsevier Ltd. All rights reserved.
Keyword:
HIP
CAPTCHA
Machine learning
Gender classification
Side-channel attack
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

C
Computers and Security
IF:
5.4
论文数:
4.6K
被引数:
1.4W

机构

C
Complutense University of Madrid
学者数:
2.6W
论文数: 2.2W
被引数: 31
U
universidad de alcala
学者数:
7.9K
论文数: 6.8K
被引数: 7
U
University of Kent
学者数:
5.3K
论文数: 6.1K
被引数: 8.1K
学者 查看更多机构
引用论文

引用论文

Functional trees
err2004-06-01
err227
errOAAI
errGama, J
err分享
err收藏
A new image-based CAPTCHA using the orientation of the polygonally cropped sub-images
err2010-04-14
err10
PREAI
errKim, Jong-Woo; Chung, Woo-Keun; Cho, Hwan-Gue
err分享
err收藏
Logistic model trees逻辑模型树
err2005-05-01
err943
errOAAI
errLandwehr, N; Hall, M; Frank, E
err分享
err收藏
Using JPEG to Measure Image Continuity and Break Capy and Other Puzzle CAPTCHAs
err2015-11-01
err13
PREAI
errHernandez-Castro, Carlos J.; R-Moreno, Maria D.; Barrero, David F.
err分享
err收藏
Technical note: Using model trees for classification
err1998-01-01
err283
errOAAI
errFrank, E; Wang, Y; Inglis, S; Holmes, G; Witten, IH
err分享
err收藏
err分享
err收藏
Random forests随机森林
err2001-01-01
err3.1W
errOAAI
errBreiman, L
err分享
err收藏
学者 查看更多内容