Analyzing CAPTCHAs.

Slides:



Advertisements
Similar presentations
Shape Context and Chamfer Matching in Cluttered Scenes
Advertisements

Overview Definition of Norms Low Rank Matrix Recovery Low Rank Approaches + Deformation Optimization Applications.
QR Code Recognition Based On Image Processing
Maayan Zehavi. Pic-a-pix is a paint by number logic puzzle, in which cells in a grid must be colored or left blank according to numbers at the side of.
CAPTCHA: Using Hard AI Problems for Security 12 Jun 2007 Ohad Barak (a.k.a. jo) Luis Von Ahn, EuroCrypt 2003.
CAPTCHA Completely Automated Public Turing test to tell Computers and Humans Apart A Computer Program that can generate and grade test that: Most Humans.
A Low-cost Attack on a Microsoft CAPTCHA Yan Qiang,
CAPTCHA Presented by: Sari Louis SPAM Group: Marc Gagnon, Sari Louis, Steve White University of Illinois Spring 2006.
Breaking an Animated CAPTCHA Scheme
CAPTCHA Presented By Sayani Chandra (Roll )
Jeff Yan School of Computing Science Newcastle University, UK (Joint work with Ahmad Salah El Ahmad) Usability of CAPTCHAs Or “usability issues in CAPTCHA.
CAPTCHA Prabhakar Verma “08MC30”.
Computer Vision Group University of California Berkeley Recognizing Objects in Adversarial Clutter: Breaking a Visual CAPTCHA Greg Mori and Jitendra Malik.
Human Computation CSC4170 Web Intelligence and Social Computing Tutorial 7 Tutor: Tom Chao Zhou
Shape Blending Joshua Filliater December 15, 2000.
Word Processing Standard Grade Computing LA/LM. Word processor a computer program that allows you to manipulate text What is?
Mrs. Beth Cueni Carnegie Mellon
CAPTCHA 1 Are you Human? (Sorry, I had to ask). CAPTCHA 2 Agenda What is CAPTCHA? Types of CAPTCHA Where to use CAPTCHAs? Guidelines when making a CAPTCHA.
Recognizing some of the modern CAPTCHAs Dmitry Nikulin LCME, Saint-Petersburg, 2011.
Analyzing CAPTCHAs May 1, 2009 Kyle Anderson Michelle Krause Matthew Turner.
Exploration Seminar 3 Human Computation Roy McElmurry.
Standard Grade Computing General Purpose Packages WORD-PROCESSING WORD-PROCESSING Chapter 2.
Development of an OCR System Nathan Harmata TJHSST Computer Systems Lab
Readability and the Cloze procedure. Readability  From Wikipedia,  Readability is the ease in which text can be read and understood. Various factors.
CAPTCHA solving Tianhui Cai Period 3. CAPTCHAs Completely Automated Public Turing tests to tell Computers and Humans Apart Determines whether a user is.
Wei Dang Kevin Ellsworth Cory Shirts.  Goal: have a user interface to allow user text input using sign language digits and letters ◦ User interface ◦
Preventing Automated Use of STMP Reservation System Using CAPTCHA.
BARCODE IDENTIFICATION BY USING WAVELET BASED ENERGY Soundararajan Ezekiel, Gary Greenwood, David Pazzaglia Computer Science Department Indiana University.
Presented By: Abirami Poonkundran Authors: Jeff Yan, Ahmad El Ahmad.
Double Entry Journals Four types of double entry journals used for analyzing text while reading literature.
Collage Assignments So you’ve used Daniel Zingaro’s Stereo Sound Processing or Kevin Wayne’s Guitar Heroine. Or maybe you’ve used Joshua Guerin and Debby.
WHAT IS COMPUTATION? Rocky K. C. Chang August 31, 2015.
CAPTCHA solving Tianhui Cai Period 3. CAPTCHAs Completely Automated Public Turing tests to tell Computers and Humans Apart User is human or machine? Prevents.
CAP Malware and Software Vulnerability Analysis Term Project Proposal - Spring 2009 Professor: Dr. Zou Team members: Andrew Mantel & Peter Matthews.
Peter Matthews, Cliff C. Zou University of Central Florida AsiaCCS 2010.
By: Steven Baker.  What is a CAPTCHA?  History of CAPTCHA  Applications of CAPTCHAs  Accessibility  Examples of CAPTCHAs  reCAPTCHA  Vulnerabilities.
Separating man from machine since 2000….. ?. Agenda  Definition  History  Need  Types  Constructing CAPTCHAs  Breaking CAPTCHAs  Applications 
CAPTCHA What humans can do, But computers can not.
Usability of CAPTCHAs Or usability issues in CAPTCHA design Authors: Jeff Yan and Ahmad Salah El Ahmad Presented By: Kim Giglia CSC /19/2008.
SUBMITTED TO:-SUBMITTED BY:- Ms.Kavita KhannaShruty Ahuja H.O.D(CSE DEPARTMENT)02/MT/10 PDM,BAHADURGARHCE(2 ND SEM)
Billy Vivian Dr. Oblitey COSC  What is CAPTCHA?  History  Uses  Artificial Intelligence Relationship  reCAPTCHA  Works Cited.
CAPTCHA Presented by: Md.R ahim 08B21A Agenda Definition Background Motivation Applications Types of CAPTCHAs Breaking CAPTCHAs Proposed Approach.
Update on State Assessment and CCSS Presentation to the West Hartford Parent Teacher Council.
SANDEEP MEHTA (ECE, IV Year). CAPTCHA Completely Automated Public Turing test to tell Computers and Humans Apart Invented at CMU by Luis von Ahn, Manuel.
OCR Reading.
DESKTOP PUBLISHING.
An –Najah National University Submitted to : Dr. Suzan Arafat
Big Data is a Big Deal!.
Proxy-Based Image Verification
Week Twenty Two: Author’s Purpose
Community and Social Impact
Community and Social Impact
UNIT 3 – LESSON 5 Creating Functions.
Are you Human?.
Breaking Visual CAPTCHAs with Naïve Pattern Recognition Algorithms
Web Programming Week 11 Old Dominion University
MELT Grades 6-8 Algebra Sheila S. Brookshire
The Nature of Science Do Now: In your notes answer the following question What does science mean to you?
Machine Learning & Digital Humanities
Mrs. Beth Cueni Carnegie Mellon
EXPLORING COMPUTER SCIENCE Journal Entries, Portfolio Entries, And Check Your Understanding Unit 2 – Strand 2 Problem Solving This unit focuses on.
A novel probabilistic language-based CAPTCHA system
Simple Encryption- Lesson 5
Project P06441: See Through Fog Imaging
Inaccessible CAPTCHA: updating W3C advisory note
Fighting the WebBots A webbot is a program that visits web sites for all kinds of purposes. For example, Google webbots make copies of all web sites for.
Inaccessible CAPTCHA: updating W3C advisory note
Experiment No. (1) - an introduction to MATLAB
Presented By Vibhute J.B. Class : M.Sc. (CS)
Presentation transcript:

Analyzing CAPTCHAs

Objective In the March 2005 College Mathematics Journal (Volume 36, Number 2), Dr. Edward Aboufadel along with students Julia Olsen and Jesse Windle published an article entitled “Breaking the Holiday Inn Priority Club CAPTCHA.” Our objective was to report on their method and reproduce their results.

Overview CAPTCHA stands for Completely Automated Public Turing tests to tell Computers and Humans Apart. What is the purpose of a CAPTCHA? A CAPTCHA is considered broken if a computer algorithm can quickly solve the puzzle at least four out of five times on average.

Motivation The general motivation for decoding CAPTCHAs is financial gain e.g. through spamming, spreading viruses. However, another motivation for decoding CAPTCHAs is improvement of Object Character Recognition.

Variety of CAPTCHAs First CAPTCHA broken: EZ-Gimpy EZ-Gimpy CAPTCHA broken by Mori and Malik using object recognition techniques and dictionary crosschecking. Their program correctly interprets this CAPTCHA 93% of the time.

Variety of CAPTCHAs CAPTCHA used by General Electric CAPTCHA used by Chicago Cubs

Holiday Inn Priority Club CAPTCHA Used by Holiday Inn when members of the Priority Club sign up for Rewards Dining Program.

The Process Generate CAPTCHA Align CAPTCHA Cut CAPTCHA Transform CAPTCHA Decode CAPTCHA

Generate CAPTCHA CAPTCHA generated with our Mathematica code.

Align CAPTCHA Remove gridlines. Undo angle of rotation.

Align CAPTCHA Crop CAPTCHA.

Cut CAPTCHA Cut CAPTCHA cut into 5 pieces.

Transform CAPTCHA Perform the HWT on each of the 5 pieces.

Decode CAPTCHA

Mathematics involved Perform linear regression on the CAPTCHA to find the line of best fit for the data points that make up the CAPTCHA. Matrix multiplication using the rotation matrix to undo the angle of rotation. Three iterations of the Haar Wavelet Transform on each of the cut pieces. Each cut letter is compared to the canonical letters by comparing the Norms.

Generalizations of Method Dr. Aboufadel’s Maple code was successful nearly 100% of the time. Our Mathematica algorithm was about 75% successful at decoding the generated CAPTCHAs. This type of algorithm could be generalized to any CAPTCHA that uses a standardized font and removable background.

Limitations of procedure Line of regression not symmetric about x-axis.

Limitations of procedure Code is built to handle situations where letters are a different color from background. Code can only deal with distortion related to rotation.

Future of CAPTCHA decoding Gimpy-r CAPTCHA used by Yahoo! mail

Future of CAPTCHA decoding New “unbreakable CAPTCHA.” CAPTCHA used at http://www.yuniti.com/register.php

Future of CAPTCHA decoding On Thursday, April 23, 2009, USA TODAY ran a cover story, entitled “Cracking the Code,” about CAPTCHA decoding methods currently being used. As “Captcha designers have made their work increasingly distorted and camouflaged,” captcha-breaking groups have turned to “human captcha-solvers ,” employing humans and paying them ½ cent per decoded captcha.

Future of CAPTCHA decoding ReCAPTCHA “Digitizing Books One Word at a Time” Goal of ReCAPTCHA project is “to archive human knowledge and to make information more accessible to the world.” Uses Object Character Recognition to transform the photographically scanned books into text. Users are given two words to decipher – one to which the answer is known and another that cannot be read correctly by OCR.

Questions? Can we answer your questions about CAPTCHA? YOU BETCHA!!!!