Towards Secure Design Choices for Implementing Graphical Passwords

We study the impact of selected parameters on the size of the password space for "Draw-A-Secret" (DAS) graphical passwords. We examine the role of and relationships between the number of composite strokes, grid dimensions, and password length in the DAS password space. We show that a very significant proportion of the DAS password space depends on the assumption that users will choose long passwords with many composite strokes. If users choose passwords having 4 or fewer strokes, with passwords of length 12 or less on a 5

• Type: Conference
• Year: 2004
• Where: ACSAC
• Authors: Julie Thorpe, Paul C. van Oorschot
• Keywords: ACSAC 2004, Composite Strokes, DAS Password Space, Password Space, Security Privacy