|COOKIES: By using this website you agree that we can place Google Analytics Cookies on your device for performance monitoring.|
The robustness of CAPTCHAs
If you have a question about this talk, please contact Andrew Lewis.
No matter whether you like or hate it, CAPTCHA has found widespread application on numerous commercial web sites – it is now almost a standard security mechanism for defending against undesirable or malicious Internet bot programs.
This talk introduces our recent work on attacking numerous widely deployed CAPTCH As. I will present new techniques of general value to attack a number of text CAPTCH As, including the schemes designed and deployed by Microsoft, Yahoo and Google. In particular, the Microsoft CAPTCHA has been deployed since 2002 at many of their online services including Hotmail, MSN and Windows Live. Designed to be segmentation-resistant, this scheme has been studied and tuned by its designers over the years. However, our simple attack has achieved a segmentation success rate of higher than 90% against this scheme. It took on average ~80 ms for the attack to completely segment a challenge on an ordinary desktop computer. As a result, we estimate that this CAPTCHA could be instantly broken by a malicious bot with an overall (segmentation and then recognition) success rate of more than 60%. On the contrary, the design goal was that automated attacks should not achieve a success rate of higher than 0.01%. For the first time, our work shows that CAPTCH As that are carefully designed to be segmentation-resistant are vulnerable to novel but simple attacks.
Our experience suggests that CAPTCHA will go through the same process of evolutionary development as cryptography, digital watermarking and the like, with an iterative process in which successful attacks lead to the development of more robust systems.
This talk is part of the Computer Laboratory Security Group meeting presentations series.
This talk is included in these lists:
Note that ex-directory lists are not shown.
Other listsSir Andrew Motion Visits Cambridge in War Poets Event Psychiatry Experience Islam Week 2011 (12th February - 20th February)
Other talksIs there Enough for All of Us? Global Growth, Climate Change and Food Security CADASIL - an affair between Notch3 receptor and the extracellular matrix Webinars for Professional Development in the Arts Series 8: "Learning to let go: How expert improvisors choose notes subconsciously" Soqotra - Island of Dragons Webinars for Professional Development in the Arts Series 8: "A neuropsychological case study of two chromesthetic musicians" The role of macrophages in tumour progression and metastasis