{"id":"https://openalex.org/W2168969969","doi":"https://doi.org/10.1145/1280680.1280684","title":"Modeling user choice in the PassPoints graphical password scheme","display_name":"Modeling user choice in the PassPoints graphical password scheme","publication_year":2007,"publication_date":"2007-07-18","ids":{"openalex":"https://openalex.org/W2168969969","doi":"https://doi.org/10.1145/1280680.1280684","mag":"2168969969"},"language":"en","primary_location":{"id":"doi:10.1145/1280680.1280684","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1280680.1280684","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd symposium on Usable privacy and security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042533385","display_name":"Ahmet Emir D\u0131r\u0131k","orcid":"https://orcid.org/0000-0002-6200-1717"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ahmet Emir Dirik","raw_affiliation_strings":["Polytechnic University, Brooklyn, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Polytechnic University, Brooklyn, NY","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006172625","display_name":"Nasir Memon","orcid":"https://orcid.org/0000-0002-0103-9762"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nasir Memon","raw_affiliation_strings":["Polytechnic University, Brooklyn, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Polytechnic University, Brooklyn, NY","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5109973858","display_name":"Jean-Camille Birget","orcid":null},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jean-Camille Birget","raw_affiliation_strings":["Rutgers University at Camden, Camden, NJ"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Rutgers University at Camden, Camden, NJ","institution_ids":["https://openalex.org/I102322142"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":30.6757,"has_fulltext":false,"cited_by_count":208,"citation_normalized_percentile":{"value":0.99577779,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"20","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10789","display_name":"Interactive and Immersive Displays","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11707","display_name":"Gaze Tracking and Assistive Technology","score":0.984000027179718,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.8891391754150391},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8304001092910767},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.595260500907898},{"id":"https://openalex.org/keywords/graphical-model","display_name":"Graphical model","score":0.5514708757400513},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.506164014339447},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.49445319175720215},{"id":"https://openalex.org/keywords/graphical-user-interface","display_name":"Graphical user interface","score":0.4418484568595886},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.43475282192230225},{"id":"https://openalex.org/keywords/cognitive-password","display_name":"Cognitive password","score":0.42216262221336365},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.39398008584976196},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.3661049008369446},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.33846181631088257},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3381962180137634},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.32792407274246216},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.3209310472011566},{"id":"https://openalex.org/keywords/password-policy","display_name":"Password policy","score":0.2253376841545105},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.20099246501922607},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.09058141708374023},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.08210283517837524},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.07464432716369629}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.8891391754150391},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8304001092910767},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.595260500907898},{"id":"https://openalex.org/C155846161","wikidata":"https://www.wikidata.org/wiki/Q1143367","display_name":"Graphical model","level":2,"score":0.5514708757400513},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.506164014339447},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.49445319175720215},{"id":"https://openalex.org/C37789001","wikidata":"https://www.wikidata.org/wiki/Q782543","display_name":"Graphical user interface","level":2,"score":0.4418484568595886},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.43475282192230225},{"id":"https://openalex.org/C23875713","wikidata":"https://www.wikidata.org/wiki/Q5141232","display_name":"Cognitive password","level":5,"score":0.42216262221336365},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.39398008584976196},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3661049008369446},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33846181631088257},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3381962180137634},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32792407274246216},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3209310472011566},{"id":"https://openalex.org/C98705547","wikidata":"https://www.wikidata.org/wiki/Q3394687","display_name":"Password policy","level":4,"score":0.2253376841545105},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.20099246501922607},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.09058141708374023},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.08210283517837524},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.07464432716369629},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":6,"locations":[{"id":"doi:10.1145/1280680.1280684","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1280680.1280684","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd symposium on Usable privacy and security","raw_type":"proceedings-article"},{"id":"pmh:2d0eedc5-3db5-4371-bf19-57c311872cb2","is_oa":false,"landing_page_url":"https://avesis.uludag.edu.tr/publication/details/2d0eedc5-3db5-4371-bf19-57c311872cb2/oai","pdf_url":null,"source":{"id":"https://openalex.org/S7407055210","display_name":"Bursa Uludag University - AVESIS","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.147.4336","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.147.4336","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://cups.cs.cmu.edu/soups/2007/proceedings/p20_dirik.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.149.3151","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.149.3151","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://isis.poly.edu/~graphpw/pubs/soups2007a.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.915.9125","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.915.9125","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://isis.poly.edu/memon/pdf/2007_modeling%20user.pdf","raw_type":"text"},{"id":"pmh:oai:alma.01RUT_INST:11665215330004646","is_oa":false,"landing_page_url":"https://scholarship.libraries.rutgers.edu/esploro/outputs/conferenceProceeding/Modeling-user-choice-in-the-PassPoints/991031666129904646","pdf_url":null,"source":{"id":"https://openalex.org/S4210197018","display_name":"View","issn_l":"2688-268X","issn":["2688-268X","2688-3988"],"is_oa":false,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320595","host_organization_name":"Wiley","host_organization_lineage":["https://openalex.org/P4310320595"],"host_organization_lineage_names":["Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference Proceedings"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.49000000953674316,"id":"https://metadata.un.org/sdg/4","display_name":"Quality Education"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W85152245","https://openalex.org/W1485033854","https://openalex.org/W1503108337","https://openalex.org/W1707366213","https://openalex.org/W1921097329","https://openalex.org/W1964443764","https://openalex.org/W1991368867","https://openalex.org/W2037202491","https://openalex.org/W2042059698","https://openalex.org/W2065853902","https://openalex.org/W2067191022","https://openalex.org/W2098801052","https://openalex.org/W2111465783","https://openalex.org/W2111678510","https://openalex.org/W2115218409","https://openalex.org/W2124192318","https://openalex.org/W2128402656","https://openalex.org/W2135614868","https://openalex.org/W2142663317","https://openalex.org/W2144564014","https://openalex.org/W2145713312","https://openalex.org/W2149929743","https://openalex.org/W2161032904","https://openalex.org/W2171133282","https://openalex.org/W2752929869","https://openalex.org/W4211165038","https://openalex.org/W4237850930","https://openalex.org/W6630133823","https://openalex.org/W6640284056","https://openalex.org/W6641595364"],"related_works":["https://openalex.org/W2115218409","https://openalex.org/W2183044514","https://openalex.org/W165936246","https://openalex.org/W2090949570","https://openalex.org/W2596869006","https://openalex.org/W2417837167","https://openalex.org/W2969720675","https://openalex.org/W181832734","https://openalex.org/W2085528593","https://openalex.org/W2181639618"],"abstract_inverted_index":{"We":[0,99],"develop":[1],"a":[2,28,34,61,65,69,80,145],"model":[3,46,73,106,118,140],"to":[4,12,16,56,76,91,107],"identify":[5],"the":[6,21,43,58,87,97,101,120,139,142],"most":[7],"likely":[8,50],"regions":[9],"for":[10,68,86],"users":[11],"click":[13,51,62],"in":[14,20,36,64],"order":[15],"create":[17],"graphical":[18,66],"passwords":[19],"PassPoints":[22,25,88],"system.":[23,98],"A":[24],"password":[26,67],"is":[27,40,83],"sequence":[29],"of":[30,49,60,109,138,148],"points,":[31],"chosen":[32],"by":[33,104],"user":[35,130],"an":[37],"image":[38,82],"that":[39,129,136],"displayed":[41],"on":[42],"screen.":[44],"Our":[45],"predicts":[47],"probabilities":[48],"points;":[52],"this":[53,115],"enables":[54],"us":[55,75],"predict":[57],"entropy":[59],"point":[63],"given":[70,81],"image.":[71],"The":[72],"allows":[74],"evaluate":[77],"automatically":[78],"whether":[79],"well":[84],"suited":[85],"system,":[89],"and":[90,119,124,135,141],"analyze":[92],"possible":[93],"dictionary":[94],"attacks":[95],"against":[96],"compare":[100],"predictions":[102],"provided":[103],"our":[105,117],"results":[108],"experiments":[110,121,143],"involving":[111],"human":[112],"users.":[113],"At":[114],"stage,":[116],"are":[122,144],"small":[123],"limited;":[125],"but":[126],"they":[127],"show":[128],"choice":[131],"can":[132],"be":[133],"modeled":[134],"expansions":[137],"promising":[146],"direction":[147],"research.":[149]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":10},{"year":2018,"cited_by_count":9},{"year":2017,"cited_by_count":12},{"year":2016,"cited_by_count":18},{"year":2015,"cited_by_count":26},{"year":2014,"cited_by_count":21},{"year":2013,"cited_by_count":28},{"year":2012,"cited_by_count":12}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}
