{"id":"https://openalex.org/W4396735962","doi":"https://doi.org/10.1145/3589334.3645619","title":"The Matter of Captchas: An Analysis of a Brittle Security Feature on the Modern Web","display_name":"The Matter of Captchas: An Analysis of a Brittle Security Feature on the Modern Web","publication_year":2024,"publication_date":"2024-05-08","ids":{"openalex":"https://openalex.org/W4396735962","doi":"https://doi.org/10.1145/3589334.3645619"},"language":"en","primary_location":{"id":"doi:10.1145/3589334.3645619","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3589334.3645619","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://durham-repository.worktribe.com/file/2382737/1/Accepted%20Conference%20Paper","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092404301","display_name":"Behzad Ousat","orcid":"https://orcid.org/0000-0002-2328-6895"},"institutions":[{"id":"https://openalex.org/I190082696","display_name":"Durham University","ror":"https://ror.org/01v29qb04","country_code":"GB","type":"education","lineage":["https://openalex.org/I190082696"]},{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["GB","US"],"is_corresponding":true,"raw_author_name":"Behzad Ousat","raw_affiliation_strings":["Florida International University, Miami, FL, USA","Durham University"],"affiliations":[{"raw_affiliation_string":"Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]},{"raw_affiliation_string":"Durham University","institution_ids":["https://openalex.org/I190082696"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078543357","display_name":"Esteban Schafir","orcid":"https://orcid.org/0009-0006-2175-5383"},"institutions":[{"id":"https://openalex.org/I190082696","display_name":"Durham University","ror":"https://ror.org/01v29qb04","country_code":"GB","type":"education","lineage":["https://openalex.org/I190082696"]},{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["GB","US"],"is_corresponding":false,"raw_author_name":"Esteban Schafir","raw_affiliation_strings":["Florida International University, Miami, FL, USA","Durham University"],"affiliations":[{"raw_affiliation_string":"Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]},{"raw_affiliation_string":"Durham University","institution_ids":["https://openalex.org/I190082696"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101656709","display_name":"Duc Hoang","orcid":"https://orcid.org/0000-0002-7416-6092"},"institutions":[{"id":"https://openalex.org/I190082696","display_name":"Durham University","ror":"https://ror.org/01v29qb04","country_code":"GB","type":"education","lineage":["https://openalex.org/I190082696"]},{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["GB","US"],"is_corresponding":false,"raw_author_name":"Duc C. Hoang","raw_affiliation_strings":["Florida International University, Miami, FL, USA","Durham University"],"affiliations":[{"raw_affiliation_string":"Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]},{"raw_affiliation_string":"Durham University","institution_ids":["https://openalex.org/I190082696"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102924467","display_name":"Mohammad Ali Tofighi","orcid":"https://orcid.org/0000-0003-0934-1664"},"institutions":[{"id":"https://openalex.org/I190082696","display_name":"Durham University","ror":"https://ror.org/01v29qb04","country_code":"GB","type":"education","lineage":["https://openalex.org/I190082696"]},{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["GB","US"],"is_corresponding":false,"raw_author_name":"Mohammad Ali Tofighi","raw_affiliation_strings":["Florida International University, Miami, FL, USA","Durham University"],"affiliations":[{"raw_affiliation_string":"Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]},{"raw_affiliation_string":"Durham University","institution_ids":["https://openalex.org/I190082696"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044703646","display_name":"Cuong V. Nguyen","orcid":"https://orcid.org/0000-0003-4019-181X"},"institutions":[{"id":"https://openalex.org/I190082696","display_name":"Durham University","ror":"https://ror.org/01v29qb04","country_code":"GB","type":"education","lineage":["https://openalex.org/I190082696"]},{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["GB","US"],"is_corresponding":false,"raw_author_name":"Cuong V. Nguyen","raw_affiliation_strings":["Durham University, Durham, United Kingdom","Florida International University"],"affiliations":[{"raw_affiliation_string":"Durham University, Durham, United Kingdom","institution_ids":["https://openalex.org/I190082696"]},{"raw_affiliation_string":"Florida International University","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013179900","display_name":"Sajjad Arshad","orcid":"https://orcid.org/0000-0001-5311-451X"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]},{"id":"https://openalex.org/I190082696","display_name":"Durham University","ror":"https://ror.org/01v29qb04","country_code":"GB","type":"education","lineage":["https://openalex.org/I190082696"]},{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["GB","US"],"is_corresponding":false,"raw_author_name":"Sajjad Arshad","raw_affiliation_strings":["Google, Mountain View, CA, USA","Durham University","Florida International University"],"affiliations":[{"raw_affiliation_string":"Google, Mountain View, CA, USA","institution_ids":["https://openalex.org/I1291425158"]},{"raw_affiliation_string":"Durham University","institution_ids":["https://openalex.org/I190082696"]},{"raw_affiliation_string":"Florida International University","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019145852","display_name":"A. Selcuk Uluagac","orcid":"https://orcid.org/0000-0002-9823-3464"},"institutions":[{"id":"https://openalex.org/I190082696","display_name":"Durham University","ror":"https://ror.org/01v29qb04","country_code":"GB","type":"education","lineage":["https://openalex.org/I190082696"]},{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["GB","US"],"is_corresponding":false,"raw_author_name":"Selcuk Uluagac","raw_affiliation_strings":["Florida International University, Miami, FL, USA","Durham University"],"affiliations":[{"raw_affiliation_string":"Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]},{"raw_affiliation_string":"Durham University","institution_ids":["https://openalex.org/I190082696"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069500419","display_name":"Amin Kharraz","orcid":null},"institutions":[{"id":"https://openalex.org/I190082696","display_name":"Durham University","ror":"https://ror.org/01v29qb04","country_code":"GB","type":"education","lineage":["https://openalex.org/I190082696"]},{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["GB","US"],"is_corresponding":false,"raw_author_name":"Amin Kharraz","raw_affiliation_strings":["Florida International University, Miami, FL, USA","Durham University"],"affiliations":[{"raw_affiliation_string":"Florida International University, Miami, FL, USA","institution_ids":["https://openalex.org/I19700959"]},{"raw_affiliation_string":"Durham University","institution_ids":["https://openalex.org/I190082696"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5092404301"],"corresponding_institution_ids":["https://openalex.org/I190082696","https://openalex.org/I19700959"],"apc_list":null,"apc_paid":null,"fwci":2.2903,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.89851149,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1835","last_page":"1846"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/captcha","display_name":"CAPTCHA","score":0.9110091924667358},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7974888682365417},{"id":"https://openalex.org/keywords/login","display_name":"Login","score":0.5662471652030945},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5079105496406555},{"id":"https://openalex.org/keywords/solver","display_name":"Solver","score":0.46720001101493835},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.43706780672073364},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4307035803794861},{"id":"https://openalex.org/keywords/internet-security","display_name":"Internet security","score":0.41987815499305725},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4166969656944275},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.1495395004749298}],"concepts":[{"id":"https://openalex.org/C163339463","wikidata":"https://www.wikidata.org/wiki/Q484598","display_name":"CAPTCHA","level":2,"score":0.9110091924667358},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7974888682365417},{"id":"https://openalex.org/C113324615","wikidata":"https://www.wikidata.org/wiki/Q472302","display_name":"Login","level":2,"score":0.5662471652030945},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5079105496406555},{"id":"https://openalex.org/C2778770139","wikidata":"https://www.wikidata.org/wiki/Q1966904","display_name":"Solver","level":2,"score":0.46720001101493835},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43706780672073364},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4307035803794861},{"id":"https://openalex.org/C22111027","wikidata":"https://www.wikidata.org/wiki/Q1070427","display_name":"Internet security","level":4,"score":0.41987815499305725},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4166969656944275},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.1495395004749298},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3589334.3645619","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3589334.3645619","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"},{"id":"pmh:oai:durham-repository.worktribe.com:2382737","is_oa":true,"landing_page_url":"https://durham-repository.worktribe.com/output/2382737","pdf_url":"https://durham-repository.worktribe.com/file/2382737/1/Accepted%20Conference%20Paper","source":{"id":"https://openalex.org/S4306400188","display_name":"Durham Research Online (Durham University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I190082696","host_organization_name":"Durham University","host_organization_lineage":["https://openalex.org/I190082696"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"acceptedVersion"}],"best_oa_location":{"id":"pmh:oai:durham-repository.worktribe.com:2382737","is_oa":true,"landing_page_url":"https://durham-repository.worktribe.com/output/2382737","pdf_url":"https://durham-repository.worktribe.com/file/2382737/1/Accepted%20Conference%20Paper","source":{"id":"https://openalex.org/S4306400188","display_name":"Durham Research Online (Durham University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I190082696","host_organization_name":"Durham University","host_organization_lineage":["https://openalex.org/I190082696"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"acceptedVersion"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3765939988","display_name":null,"funder_award_id":"2331908","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7103097731","display_name":null,"funder_award_id":"H98230-21-1-0324","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"},{"id":"https://openalex.org/G848032724","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G945897784","display_name":null,"funder_award_id":"2113880,2331908","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320311089","display_name":"National Security Agency","ror":"https://ror.org/0047bvr32"},{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4396735962.pdf"},"referenced_works_count":41,"referenced_works":["https://openalex.org/W1146624807","https://openalex.org/W1525967479","https://openalex.org/W2045726900","https://openalex.org/W2055615493","https://openalex.org/W2056974596","https://openalex.org/W2115601549","https://openalex.org/W2256284630","https://openalex.org/W2295783095","https://openalex.org/W2297075900","https://openalex.org/W2321173840","https://openalex.org/W2350778671","https://openalex.org/W2424402128","https://openalex.org/W2535603283","https://openalex.org/W2547405428","https://openalex.org/W2559753054","https://openalex.org/W2574490029","https://openalex.org/W2604188240","https://openalex.org/W2620476287","https://openalex.org/W2723746209","https://openalex.org/W2794632300","https://openalex.org/W2794855529","https://openalex.org/W2890419535","https://openalex.org/W2932791506","https://openalex.org/W2967704405","https://openalex.org/W3015392158","https://openalex.org/W3107473573","https://openalex.org/W3132588576","https://openalex.org/W3154807658","https://openalex.org/W3155996479","https://openalex.org/W3159196909","https://openalex.org/W3171223431","https://openalex.org/W3184439416","https://openalex.org/W3206707450","https://openalex.org/W3206957188","https://openalex.org/W3216540582","https://openalex.org/W4220935273","https://openalex.org/W4226443146","https://openalex.org/W4233376690","https://openalex.org/W4287884601","https://openalex.org/W4308731136","https://openalex.org/W4384948751"],"related_works":["https://openalex.org/W3134776999","https://openalex.org/W1975364925","https://openalex.org/W3167495357","https://openalex.org/W4316659693","https://openalex.org/W2161683042","https://openalex.org/W2348121092","https://openalex.org/W2992108915","https://openalex.org/W2188737212","https://openalex.org/W3101301301","https://openalex.org/W2613871566"],"abstract_inverted_index":{"The":[0,69,217],"web":[1,26,52,102,173],"ecosystem":[2],"is":[3,195],"a":[4,37,95,107,172,176,211],"fast-paced":[5],"environment.":[6],"In":[7,145],"this":[8],"dynamic":[9],"landscape,":[10],"new":[11],"security":[12,22,42],"features":[13],"are":[14,142],"offered":[15],"one":[16,190],"after":[17],"another":[18],"to":[19,57,76,201,239],"enhance":[20],"the":[21,29,55,89,100,118,198,204,221],"and":[23,28,66,93,137,161,228,244],"robustness":[24],"of":[25,91,117,120,140,165,167,184,208,223,231],"applications":[27,53],"operations":[30],"they":[31],"handle.":[32],"This":[33,193],"paper":[34,70],"focuses":[35],"on":[36,124,134,210],"fragile":[38],"but":[39],"still":[40],"in-use":[41],"feature,":[43],"text-based":[44,85,132,151],"CAPTCHAs,":[45],"that":[46,80,130,171,220],"had":[47],"been":[48],"wildly":[49],"used":[50],"by":[51],"in":[54,99,154,188],"past":[56],"protect":[58],"against":[59],"automated":[60,78,101],"attacks":[61,242],"such":[62,121,157],"as":[63,158],"credential":[64],"stuffing":[65],"account":[67],"hijacking.":[68],"first":[71],"investigates":[72],"what":[73],"it":[74],"takes":[75],"develop":[77],"scanners":[79,123],"can":[81,233],"solve":[82,180],"previously":[83,185],"unseen":[84,186],"CAPTCHAs.":[86],"We":[87,112,169],"evaluated":[88],"possibility":[90],"developing":[92],"integrating":[94],"pre-trained":[96,177],"CAPTCHA":[97,152],"solver":[98,178],"scanning":[103,225],"process":[104],"without":[105],"using":[106],"significantly":[108,234],"large":[109],"training":[110],"dataset.":[111],"also":[113],"perform":[114],"an":[115],"analysis":[116,128],"impact":[119],"autonomous":[122,224],"CAPTCHA-enabled":[125],"websites.":[126],"Our":[127],"shows":[129],"solvable":[131],"CAPTCHAs":[133,187],"login,":[135],"contact,":[136],"comment":[138],"pages":[139],"websites":[141,153,209],"not":[143],"uncommon.":[144],"particular,":[146],"we":[147],"identified":[148],"over":[149],"3,100":[150],"critical":[155],"sectors":[156],"finance,":[159],"government,":[160],"health":[162],"with":[163,175,214,226],"hundreds":[164],"thousands":[166,207],"users.":[168],"showed":[170],"scanner":[174],"could":[179],"more":[181],"than":[182],"20%":[183],"just":[189],"single":[191],"attempt.":[192],"result":[194],"worrisome":[196],"considering":[197],"substantial":[199],"potential":[200],"autonomously":[202],"run":[203],"operation":[205],"across":[206],"daily":[212],"basis":[213],"minimal":[215],"training.":[216],"findings":[218],"suggest":[219],"integration":[222],"pre-training":[227],"local":[229],"optimization":[230],"models":[232],"increase":[235],"adversaries'":[236],"asymmetric":[237],"power":[238],"launch":[240],"their":[241],"cheaper":[243],"faster.":[245]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2024-05-09T00:00:00"}