Resisting Visual Hacking: A Novel Graphical Password Authentication System

Password-based authentication is a widely used method to ensure security and privacy in computer applications. However, the selection of weak passwords and insecure input methods by users is considered the “weakest link” in the authentication process. Instead of employing arbitrary alphanumeric sequences, individuals tend to opt for passphrases that are either mnemonic or abbreviated in nature. With the proliferation of web and mobile applications, users can access these applications at any time and from anywhere with various devices. Although this convenience is highly desirable, it also increases the likelihood of passwords being exposed to Visual Hacking. The forms of attack may be executed through either direct visual observation or the utilization of external recording devices in order to obtain the user's login information. In response to this issue, our team has devised an authentication system that centers on graphical passwords and is made to combat the threat of Visual Hacking. The system incorporates a three-layered security mechanism, comprising color and pattern matching functionalities in conjunction with password verification. This makes it highly challenging for potential attackers to deduce or limit the password even amidst numerous camera-based hacking attempts. Additionally, we have created and put to the test a prototype of the system to assess its user-friendliness. Our experimental results indicate that our system can resist Visual Hacking more effectively than previous authentication systems while still maintaining a high degree of usability and security.