Image enhanced CAPTCHA for web security
Shaun-Inn Wu, Hieu Trong Ho · 2014
Many websites use CAPTCHA to defend against malicious automated programs from performing abusive tasks such as illegitimate account registration. CAPTCHA is widely used on commercial websites as a HIP system due to its simplicity of use and effectiveness against attacks. Over the years advances in Optical Character Recognition (OCR) software and techniques developed to break CAPTCHA began to expose flaws and vulnerabilities of these CAPTCHA implementations. CAPTCHA can be improved by adding several levels of complexity but still retain the purpose of CAPTCHA by making it simple for human users but difficult for bots to break. In our system different challenge phrases were displayed instead of one like traditional methods. To pass our CAPTCHA challenge questions, users have to graphically interpret the displayed image to determine which challenge phrase to decipher. Several schemes have been designed and implemented. A particular design was chosen based on the result of surveys conducted on human subjects for the user-friendliness. The result of the surveys shows that our design is preferred by users and helps preventing automated attacks from bots using known methods.