Abstract

The authentication based on the passwords is used mostly inapplications for the computer security and privacy. However, the human actionssuch as selecting less secured passwords credentials and inputting passwords inan insecure way are considered ”the weakest link” within the authenticationchain. Instead of arbitrary alphanumeric strings, users tend to selectpasswords either short or purposeful for simple memorization. With internetapplications and mobile apps pile up, individuals will access theseapplications anywhere and anytime with different devices. This evolution bringsgood convenience however it will increases the probability of exposingpasswords credentials to shoulder surfing attacks. Attackers will observedirectly or use external recording devices to get users’ credentials. Toovercome this issue, proposed a novel authentication system named Pass-Matrix,which is based on graphical passwords to resist shoulder surfing attacks.Implemented a Pass-Matrix prototype on web applications and allotted real userexperiments to describe its memorability and usefulness. From the experimentalresult, is shown that, the proposed system achieves better resistance toshoulder surfing attacks whereas maintaining usability.

KEYWORDS: Pass matrix, paired based, ImageDiscretization, authentication, ShoulderSurfing Attack..