CRASH - Cued Recall Authentication resistant to Shoulder Surfing attack

This paper presents an integrated evaluation of the new Shoulder Surfing resistant Cued Recall authentication, including usability and security evaluations, and implementation considerations. In public places, users may be at a risk of attackers stealing their passwords. Capturing the password by direct observation or recording the individual authentication session is called Shoulder surfing attack. Most of the currently designed graphical passwords are vulnerable to shoulder Surfing attack. This paper reports the design and evaluation of the Cued Click Point Graphical Password with a Shoulder Surfing defense feature.