ProCAPTCHA: A profile-based CAPTCHA for personal password authentication

Nilobon Nanglae and Pattarasinee Bhattarakosol

PLOS ONE, 2024, vol. 19, issue 12, 1-47

Abstract: CAPTCHA was introduced decades ago to distinguish between humans and bots. However, solving CAPTCHA has been a challenging issue for intruders. Various techniques, such as 3rd-party attacks, have been invented to break CAPTCHA. This research proposes ProCAPTCHA, a CAPTCHA system individually generated for each user by merging biometrics and user profiles. ProCAPTCHA leverages keystroke dynamics and personal information to create unique CAPTCHAs that are difficult for intruders to solve. ProCAPTCHA’s algorithm generates CAPTCHA based on the user’s profile data, ensuring randomness and uniqueness for each login. Performance evaluation shows that ProCAPTCHA can identify legitimate users with 100% accuracy, while only 60% of intruders are misclassified as true users. Bots face significant delays, often failing due to system time limits. Nonetheless, the bot’s attack must spend a very long time solving which, in real life, could be interrupted by the time limit of the system. Therefore, all bots cannot gain access as required.

Date: 2024
References: Add references at CitEc
Citations:

Downloads: (external link)
https://journals.plos.org/plosone/article?id=10.1371/journal.pone.0311197 (text/html)
https://journals.plos.org/plosone/article/file?id= ... 11197&type=printable (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:plo:pone00:0311197

DOI: 10.1371/journal.pone.0311197

Access Statistics for this article

More articles in PLOS ONE from Public Library of Science
Bibliographic data for series maintained by plosone ().