Recent work suggests that a type of nudge or priming technique called the 'presentation effect' may potentially improve the security of Passpoints-style graphical passwords. These nudges attempt to prime or non-intrusively bias user password choices (i.e., point selections) by gradually revealing a background image from a particular edge to another edge at password creation time. We conduct a large-scale user study (n=865) to develop further insights into the presence of this effect and to perform the first evaluations of its usability and security impacts. Our usability analyses indicate that these priming techniques do not harm usability. Our security analyses reveal that the priming techniques measurably alter the security of graphical passwords; however, this effect is dependent on the combination of both the image and priming techniques used.
翻译:最近的工作表明,一种称为“演示效果”的手法或断层技术有可能改善通行证式图形式密码的安全性。这些手法试图通过逐渐在密码创建时间从特定边缘向另一边缘披露背景图像,从而作出首要或非侵入性偏差的用户密码选择(即点选择)。我们进行了大规模用户研究(n=865),以进一步认识这种效果的存在,并进行其可用性和安全影响的初步评估。我们的可用性分析表明,这些显形技术不会损害使用性。我们的安全分析表明,这些边缘技术可以明显地改变图形密码的安全性;然而,这种影响取决于所使用图像和边缘技术的结合。