首页> 外文会议>nternational Conference on Reliability, Infocom Technologies and Optimization >Vulnerabilities of CAPTCHA used by IRCTC and an alternative approach of Split Motion Text (SMT) CAPTCHA
【24h】

Vulnerabilities of CAPTCHA used by IRCTC and an alternative approach of Split Motion Text (SMT) CAPTCHA

机译:IRCTC使用的CAPTCHA的漏洞和分裂运动文本(SMT)CAPTCHA的替代方法

获取原文

摘要

Online web services are commonly protected through CAPTCHAs and they are regarded as a class of Human-Interactive Proof (HIP). Numerous CAPTCHA schemes have been proposed in the past to prevent spam and brute-force attacks by automated scripts but many of such CAPTCHAs have been subjected to be broken by decoders. Our paper breaks one such CAPTCHA system used by one of the India's most visited e-commerce website IRCTC.co.in using modern OCRs and list out its vulnerabilities as well. We also propose an alternative scheme called Split Motion Text CAPTCHA (SMT-CAPTCHA) which capitalizes on gestalt perception of vision to read broken animated text. SMT-CAPTCHA focuses on working against the segmentation part of the decoding by splitting and animating each character randomly, making it difficult for decoders to segment and extract text from the CAPTCHA. On experimentation, it was observed that modern OCRs and decoding methodologies fail to break our SMT-CAPTCHA system, whereas, the average computer success of decoding IRCTC's CAPTCHA is significantly high.
机译:在线Web服务通常通过CAPTCHA保护,并且它们被视为一类人交互式证明(HIP)。过去已经提出了许多CAPTCHA方案,以防止自动脚本防止垃圾邮件和暴力攻击,但许多此类CAPTCHA被解码器被破坏。我们的论文突破了印度最受欢迎的电子商务网站IRCTC.CO.IN的一个这样的CAPTCHA系统,使用现代OCRS并列出其漏洞。我们还提出了一种称为分割运动文本CAPTCHA(SMT-CAPTCHA)的替代方案,它大写了对读取破碎动画文本的愿景的最大的感知。 SMT-CAPTCHA专注于通过随机拆分和动画每个字符来对解码的分割部分进行工作,使解码器难以从CAPTCHA中提取文本。在实验上,观察到现代OCR和解码方法未能破坏我们的SMT-CAPTCHA系统,而解码IRCTC的CAPTCHA的平均计算机成功显着高。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号