1. Cultural Aspects of Authentication Ron Poet

2. Graphical Passwords  Use image rather than text.  A picture is worth 1000 words.  Complex image easier to remember than complex text password.  There are more easy to remember images than easy to remember text strings.

3. Recognition Based  Recognise your pass-image when you see it again.  Choose it from a number of distractors.

4. Where Does Your Pass-Image Come From  User supplied  More likely to remember it  Involved in creation / selection  System supplied  Less likely to remember  System has more control  Choose from a system supplied collection  Half way between the two.

5. Where do the Distractors Come From  Special pool of professional distractors.  The real image will stand out, easier to guess.  Other user’s pass-images  The real pass-image will not look different.

6. Offensive Images  If a user supplies their pass-image, it may be offensive.  Having an administrator check them is an additional cost and makes it harder to scale up.  The user may not be bothered by their offensive image.  But it will end up as another user’s distractor.

7. Offensive is Subjective  One person may find an image amusing while another finds it offensive.  Some types of images may be offensive in one culture but not in another.  We are investigating if this is a serious problem for graphical passwords.

8. Cultural Choice of Images  Some cultures may favour one type of images over another.  An attacker may find it easier to guess someone's pass- image if they know their cultural background.  Well known cultural difference between  Western: focus on foreground  Eastern: focus on background.  This affects both user-supplied and system-supplied images.