자동화 공격과 릴레이 공격에 저항하는 Emerging Image Cue CAPTCHA 연구
Emerging Image Cue CAPTCHA Resisting Automated and Human-Solver-Based Attacks
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
CAPTCHA는 인터넷에서 서비스 혹은 자원을 요청하는 존재가 사람인지 아닌지를 구별하기 위한 테스트 기법이다. 이러한 대부분의 CAPTCHA들은 CAPTCHA 영상을 제3자에게 스트리밍 하여 제 3자가 사용자 대신 CAPTCHA에응답하는 스트림 릴레이 공격에 의해 우회 될 수 있다는 문제점을 갖는다. 스트림 릴레이 공격에 저항성을 갖기 위해인간의 인지 구조를 이용한 Emerging Image Game CAPTCHA가 제안되었으나, 사용성이 낮다는 문제점이 있다. 본 연구에서는 Emerging Image Game CAPTCHA의 사용성을 개선할 수 있는 Emerging Image Cue CAPTCHA 설계 방법과 CAPTCHA를 제안하며, 제안된 CAPTCHA에 대한 사용성 평가, 릴레이 공격 시뮬레이션을 통해 실질적인 개선이 이루어졌는지를 평가한다.
Abstract
CAPTCHA is a verification scheme whether or not a human user has made a service request. Most CAPTCHAs that are based on text, image, or simple game suffer from vulnerability that can be compromised by automated attacks and stream relay attacks. To resist such attacks, CAPTCHA that utilizes human recognition as been suggested but it show poor usability for deploying in the Internet. We propose an Emerging Image Cue CAPTCHA that offers improved usability and resists stream relay attacks, as well. We also examine the usability of the proposed CAPTCHA and investigate the attack resistance by conducting user study and experiments on simulated network environment.
참고문헌 (17)
- Gao, S., "Emerging image game CAPTCHAs for resisting automated and human-solver relay attacks", Proceedings of the 31st Annual Computer Security Applications Conference, pp.11~20 (2015), ACM
- Von Ahn, L., "CAPTCHA : Using hard AI problems for security", International Conference on the Theory and Applications of Cryptographic Techniques, pp.294~311 (2003), Springer Berlin Heidelberg
- Mori, G., "Recognizing objects in adversarial clutter: Breaking a visual CAPTCHA", Computer Vision and Pattern Recognition, 2003. Proceedings. 2003 IEEE Computer Society Conference, 1, pp.I~I (2003)
- Moy, G., "Distortion estimation techniques in solving visual CAPTCHAs", Computer Vision and Pattern Recognition, 2004. CVPR 2004. Proceedings of the 2004 IEEE Computer Society Conference, 2, pp.II~II (2004), IEEE
- Bansal, Abhay, "BREAKING A VISUAL CAPTCHA: A NOVEL APPROACH USING HMM", ~
- Yan, J., "A Low-cost Attack on a Microsoft CAPTCH", Proceedings of the 15th ACM conference on Computer and communications security, pp.543~554 (2008), ACM
- Chellapilla, K., "Using machine learning to break visual human interaction proofs(HIPs)", NIPS, pp.265~272 (2004)
- Xu, Y., "Security analysis and related usability of motion-based captchas : Decoding codewords in motion", IEEE transactions on dependable and secure computing, 11(5), pp.480~493 (2014)
- Elson, J., "Asirra : a CAPTCHA that exploits interest-aligned manual image categorization", ACM Conference on Computer and Communications Security, 7, pp.366~374 (2007)
- Golle, P, "Machine learning attacks against the Asirra CAPTCHA", Proceedings of the 15th ACM conference on Computer and communications security, pp.535~542 (2008), ACM
- Qiujie, L., "A survey of CAPTCHA technology", Journal of Computer Research and Development, 49(3), pp.469~480 (2012)
- Ross, S. A., "Sketcha : a CAPTCHA based on Line Drawings of 3D Models", Proceedings of the 19th international conference on World wide web, pp.821~830 (2010), ACM
- Nguyen, V. D., "On the security of text-based 3D CAPTCHAs", Computers & Security, 45, pp.84~99 (2014)
- Mohamed, M., "Three-way dissection of a game-captcha : Automated attacks, relay attacks, and usability", arXiv preprint arXiv:1310.1540, ~ (2013)
- Mitra, N. J., "Emerging images", ACM Transactions on Graphics (TOG), 28(5), pp.163~ (2009), ACM
- Yang, C. H., "Synthesizing Emerging Images from Photographs", Proceedings of the 2016ACM on Multimedia Conference, pp.660~664 (2016), ACM
- State of the Internet Report, "Quarter, Akamai Releases Third", ~ (2015)