Vulnerability analysis on the image‐based authentication: Through the WM_INPUT message. (3rd December 2019)

• Record Type: Journal Article
• Authors: Lee, Kyungroul; Yim, Kangbin; Lee, Sun‐Young
• Other Names: Choi Chang guestEditor.; Pop Florin guestEditor.; Huang Jun guestEditor.; Ogiela Marek R. guestEditor.
• Is Part Of: Concurrency and computation. Volume 32:Number 18(2020)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2019-12-03
• Subjects: authentication -- computer crime -- computer hacking -- computer security -- information security; Parallel processing (Electronic computers) -- Periodicals; Parallel computers -- Periodicals; 004.35
• DOI: 10.1002/cpe.5596
• Languages: English
• ISSNs: 1532-0626

Abstract

Summary: We verified the mouse data exposure using the WM_INPUT message handler that obtains the mouse‐inputted data to derive the vulnerability of the image‐based authentication. Consequently, the mouse data were exposed on most of the banking and payment sites of South Korea. Experiment results show that the mouse data are exposed in image‐based authentication in six Internet banking services. Therefore, we proved that the safety of the authentication information is vulnerable even when image‐based authentication is applied. In the future, we will propose an image‐based authentication method to solve the vulnerability found from this paper and derive a set of criteria for the vulnerability analysis of image‐based authentication for the security assessment.