{"id":"https://openalex.org/W4392567315","doi":"https://doi.org/10.1109/access.2024.3373662","title":"A Systematic Literature Review on the Security Attacks and Countermeasures Used in Graphical Passwords","display_name":"A Systematic Literature Review on the Security Attacks and Countermeasures Used in Graphical Passwords","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4392567315","doi":"https://doi.org/10.1109/access.2024.3373662"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3373662","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3373662","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10459167.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"review","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10459167.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003091988","display_name":"Lip Yee Por","orcid":"https://orcid.org/0000-0001-5865-1533"},"institutions":[{"id":"https://openalex.org/I33849332","display_name":"University of Malaya","ror":"https://ror.org/00rzspn62","country_code":"MY","type":"education","lineage":["https://openalex.org/I33849332"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Lip Yee Por","raw_affiliation_strings":["Department of Computer System and Technology, Faculty of Computer Science and Information Technology, Universiti Malaya, Kuala Lumpur, Malaysia"],"raw_orcid":"https://orcid.org/0000-0001-5865-1533","affiliations":[{"raw_affiliation_string":"Department of Computer System and Technology, Faculty of Computer Science and Information Technology, Universiti Malaya, Kuala Lumpur, Malaysia","institution_ids":["https://openalex.org/I33849332"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109636354","display_name":"Ian Ouii Ng","orcid":null},"institutions":[{"id":"https://openalex.org/I33849332","display_name":"University of Malaya","ror":"https://ror.org/00rzspn62","country_code":"MY","type":"education","lineage":["https://openalex.org/I33849332"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Ian Ouii Ng","raw_affiliation_strings":["Department of Computer System and Technology, Faculty of Computer Science and Information Technology, Universiti Malaya, Kuala Lumpur, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer System and Technology, Faculty of Computer Science and Information Technology, Universiti Malaya, Kuala Lumpur, Malaysia","institution_ids":["https://openalex.org/I33849332"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100670010","display_name":"Yen\u2010Lin Chen","orcid":"https://orcid.org/0000-0001-7717-9393"},"institutions":[{"id":"https://openalex.org/I118292597","display_name":"National Taipei University of Technology","ror":"https://ror.org/00cn92c09","country_code":"TW","type":"education","lineage":["https://openalex.org/I118292597"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Yen-Lin Chen","raw_affiliation_strings":["Department of Computer Science and Information Engineering, National Taipei University of Technology, Taipei, Taiwan"],"raw_orcid":"https://orcid.org/0000-0001-7717-9393","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Information Engineering, National Taipei University of Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I118292597"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072215133","display_name":"Yang Jing","orcid":"https://orcid.org/0000-0003-3679-1433"},"institutions":[{"id":"https://openalex.org/I33849332","display_name":"University of Malaya","ror":"https://ror.org/00rzspn62","country_code":"MY","type":"education","lineage":["https://openalex.org/I33849332"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Jing Yang","raw_affiliation_strings":["Department of Computer System and Technology, Faculty of Computer Science and Information Technology, Universiti Malaya, Kuala Lumpur, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer System and Technology, Faculty of Computer Science and Information Technology, Universiti Malaya, Kuala Lumpur, Malaysia","institution_ids":["https://openalex.org/I33849332"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068782746","display_name":"Chin Soon Ku","orcid":"https://orcid.org/0000-0003-0793-3308"},"institutions":[{"id":"https://openalex.org/I931681460","display_name":"Universiti Tunku Abdul Rahman","ror":"https://ror.org/050pq4m56","country_code":"MY","type":"education","lineage":["https://openalex.org/I931681460"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Chin Soon Ku","raw_affiliation_strings":["Department of Computer Science, Universiti Tunku Abdul Rahman, Kampar, Malaysia"],"raw_orcid":"https://orcid.org/0000-0003-0793-3308","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Universiti Tunku Abdul Rahman, Kampar, Malaysia","institution_ids":["https://openalex.org/I931681460"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":3.1794,"has_fulltext":true,"cited_by_count":21,"citation_normalized_percentile":{"value":0.9133574,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"12","issue":null,"first_page":"53408","last_page":"53423"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9819999933242798,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9819999933242798,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.7950125932693481},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7277274131774902},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6819661259651184},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.32249993085861206}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.7950125932693481},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7277274131774902},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6819661259651184},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.32249993085861206}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2024.3373662","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3373662","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10459167.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:5058fd0aa8b4463ba193df4e130b81d0","is_oa":true,"landing_page_url":"https://doaj.org/article/5058fd0aa8b4463ba193df4e130b81d0","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 53408-53423 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3373662","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3373662","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10459167.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321398","display_name":"Universiti Tunku Abdul Rahman","ror":"https://ror.org/050pq4m56"},{"id":"https://openalex.org/F4320331164","display_name":"National Science and Technology Council","ror":"https://ror.org/00wnb9798"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4392567315.pdf","grobid_xml":"https://content.openalex.org/works/W4392567315.grobid-xml"},"referenced_works_count":61,"referenced_works":["https://openalex.org/W1964132625","https://openalex.org/W1970072309","https://openalex.org/W1985631636","https://openalex.org/W1991680015","https://openalex.org/W2013184820","https://openalex.org/W2014338202","https://openalex.org/W2028849308","https://openalex.org/W2031818990","https://openalex.org/W2068548805","https://openalex.org/W2072541872","https://openalex.org/W2073947527","https://openalex.org/W2079302261","https://openalex.org/W2083295738","https://openalex.org/W2116264134","https://openalex.org/W2155194384","https://openalex.org/W2167737729","https://openalex.org/W2183510491","https://openalex.org/W2185434627","https://openalex.org/W2207386671","https://openalex.org/W2252516017","https://openalex.org/W2322203402","https://openalex.org/W2345097515","https://openalex.org/W2444379271","https://openalex.org/W2464359391","https://openalex.org/W2516662871","https://openalex.org/W2567652602","https://openalex.org/W2573809738","https://openalex.org/W2613395272","https://openalex.org/W2617378240","https://openalex.org/W2739707806","https://openalex.org/W2767913674","https://openalex.org/W2777460672","https://openalex.org/W2783244601","https://openalex.org/W2800886194","https://openalex.org/W2801255313","https://openalex.org/W2805163309","https://openalex.org/W2883350670","https://openalex.org/W2890915954","https://openalex.org/W2911941021","https://openalex.org/W2916013051","https://openalex.org/W2926977843","https://openalex.org/W2943138192","https://openalex.org/W2963901295","https://openalex.org/W2970690440","https://openalex.org/W2977860187","https://openalex.org/W2980163529","https://openalex.org/W2992086882","https://openalex.org/W2996642024","https://openalex.org/W3168958371","https://openalex.org/W3210025920","https://openalex.org/W4206808994","https://openalex.org/W4210522779","https://openalex.org/W4251914312","https://openalex.org/W4281780391","https://openalex.org/W4293222709","https://openalex.org/W4297156468","https://openalex.org/W4386485234","https://openalex.org/W6636759762","https://openalex.org/W6686220871","https://openalex.org/W6741689526","https://openalex.org/W6759499157"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W143386018","https://openalex.org/W1004582678","https://openalex.org/W2656445685","https://openalex.org/W2115218409","https://openalex.org/W2090949570","https://openalex.org/W2263162522","https://openalex.org/W2134080857","https://openalex.org/W1989237518","https://openalex.org/W107495730"],"abstract_inverted_index":{"As":[0],"technology":[1],"continues":[2],"to":[3,16,25,64,84,100,138,143,152,168,216,227,257,292,345],"evolve,":[4],"the":[5,45,53,60,75,117,122,148,162,171,218,245,297,320,338,342,347,351,365,372],"need":[6],"for":[7,116,370],"robust":[8],"and":[9,59,96,129,147,165,191,206,210,224,233,238,281,284,315,331,360],"user-friendly":[10],"authentication":[11],"methods":[12,106,124],"becomes":[13],"increasingly":[14],"vital":[15],"safeguarding":[17],"sensitive":[18],"information.":[19],"Graphical":[20],"passwords,":[21,50],"a":[22,34,255],"contemporary":[23],"approach":[24],"authentication,":[26],"utilize":[27],"images,":[28],"patterns,":[29],"or":[30],"graphical":[31,49,69,144,228,258,293,375],"elements":[32],"as":[33,89,254,290,364],"means":[35],"of":[36,48,74,121,134,181,305,323,374],"access":[37],"control.":[38],"This":[39],"systematic":[40],"literature":[41],"review":[42],"delves":[43],"into":[44],"dynamic":[46],"realm":[47],"focusing":[51,220],"on":[52,222,272,276],"myriad":[54],"security":[55,86,103,118,141,373],"attacks":[56,223,289],"they":[57],"face,":[58],"diverse":[61],"countermeasures":[62,150,225,339,353],"devised":[63],"mitigate":[65,101,153,346],"these":[66,102,154,248],"threats.":[67],"The":[68,131,156,189,208,334],"password":[70,145,229,259,294,361,376],"scheme":[71],"is":[72,82,112,137],"one":[73],"most":[76,355,366],"popular":[77],"schemes":[78,146,230],"used,":[79],"yet":[80],"it":[81],"vulnerable":[83],"numerous":[85,105],"attacks,":[87,92,94,274,278,280,302,308,318],"such":[88],"shoulder":[90,252],"surfing":[91,253],"smudge":[93,277],"spyware,":[95],"more.":[97],"In":[98],"order":[99],"threats,":[104],"have":[107],"been":[108],"proposed,":[109],"but":[110],"there":[111,268],"no":[113],"ultimate":[114],"solution":[115],"attacks;":[119],"each":[120],"proposed":[123,340],"has":[125],"its":[126],"own":[127],"advantages":[128],"limitations.":[130],"core":[132],"objective":[133],"this":[135],"paper":[136],"identify":[139,169],"existing":[140],"threats":[142,291],"corresponding":[149,321],"developed":[151],"attacks.":[155,266,349],"study":[157,343],"process":[158],"begins":[159],"by":[160],"identifying":[161],"usable":[163],"databases":[164],"search":[166],"engines":[167],"all":[170,244],"relevant":[172],"resources.":[173],"These":[174],"include":[175],"Academic":[176],"Search":[177],"Elite":[178],"@EBSCOhost,":[179,202],"Web":[180],"Science,":[182],"MDPI,":[183],"Semantic":[184],"Scholar,":[185],"ACM":[186],"Digital":[187],"Library,":[188],"Science":[190,197],"Information":[192],"Organization,":[193],"IEEE":[194],"Xplore,":[195],"ProQuest,":[196],"Direct,":[198],"Education":[199],"Research":[200],"Complete":[201],"IOPScience,":[203],"SAGE":[204],"Journals,":[205],"Scopus.":[207],"inclusion":[209],"exclusion":[211],"criteria":[212],"were":[213,269],"carefully":[214],"selected":[215],"prioritize":[217],"study,":[219],"mostly":[221],"related":[226],"between":[231],"2009":[232],"2023.":[234],"After":[235],"thorough":[236],"identification":[237],"selection":[239],"progress,":[240],"59":[241],"studies":[242],"met":[243],"criteria.":[246],"Among":[247,350],"studies,":[249],"47":[250],"mentioned":[251],"threat":[256],"schemes,":[260],"while":[261],"20":[262],"discussed":[263,287],"brute":[264],"force":[265],"Additionally,":[267],"21":[270],"papers":[271,298,324,344],"dictionary":[273],"13":[275],"spyware":[279],"social":[282],"engineering,":[283],"19":[285],"that":[286],"guessing":[288],"schemes.":[295,377],"Furthermore,":[296],"identified":[299],"several":[300],"other":[301],"including":[303],"frequency":[304],"occurrence":[306],"analysis":[307],"video":[309],"recording,":[310],"eavesdropping,":[311],"computer":[312],"vision,":[313],"sonar,":[314],"image":[316],"gallery":[317],"with":[319],"numbers":[322],"being":[325],"9,":[326],"17,":[327],"5,":[328],"2,":[329,330],"1,":[332],"respectively.":[333],"results":[335],"also":[336],"highlight":[337],"in":[341],"aforementioned":[348],"various":[352],"identified,":[354],"revolve":[356],"around":[357],"randomization,":[358],"obfuscation,":[359],"space":[362],"complexity":[363],"commonly":[367],"used":[368],"techniques":[369],"enhancing":[371]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":8}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}