...
  • 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Information Forensics and Security, IEEE Transactions on >Research on the Security of Microsoft’s Two-Layer Captcha
【24h】

Research on the Security of Microsoft’s Two-Layer Captcha

机译：微软两层验证码安全性研究

获取原文
获取原文并翻译 | 示例
   

获取外文期刊封面封底 >>

       
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Captcha is a security mechanism designed to differentiate between computers and humans, and is used to defend against malicious bot programs. Text-based Captchas are the most widely deployed differentiation mechanism, and almost all text-based Captchas are single layered. Numerous successful attacks on the single-layer text-based Captchas deployed by Google, Yahoo!, and Amazon have been reported. In 2015, Microsoft deployed a new two-layer Captcha scheme. This appears to be the first application of two-layer Captchas. It is, therefore, natural to ask a fundamental question: is the two-layer Captcha as secure as its designers expected? Intrigued by this question, we have for the first time systematically analyzed the security of the two-layer Captcha in this paper. We propose a simple but an effective method to attack the two-layer Captcha deployed by Microsoft, and achieve a success rate of 44.6% with an average speed of 9.05 s on a standard desktop computer (with a 3.3-GHz Intel Core i3 CPU and 2-GB RAM), thus demonstrating clear security issues. We also discuss the originality and applicability of our attack, and offer guidelines for designing Captchas with better security and usability.
机译：Captcha是一种旨在区分计算机和人类的安全机制，用于防御恶意的bot程序。基于文本的验证码是部署最广泛的区分机制，几乎所有基于文本的验证码都是单层的。据报道，对Google，Yahoo！和Amazon部署的单层基于文本的Captcha进行了许多成功的攻击。 2015年，Microsoft部署了新的两层验证码方案。这似乎是两层验证码的第一个应用程序。因此，自然会提出一个基本问题：两层验证码是否像设计人员所期望的那样安全？对此问题引起了我们的兴趣，这是我们首次系统地分析了两层验证码的安全性。我们提出一种简单但有效的方法来攻击Microsoft部署的两层验证码，并在标准台式计算机（配备3.3 GHz Intel Core i3 CPU和2 GB RAM），从而证明了明确的安全问题。我们还将讨论攻击的独创性和适用性，并为设计具有更好安全性和可用性的验证码提供指导。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号