Security analysis of image CAPTCHA using a mask R-CNN-based attack model
by Vijaypal Singh Rathor; Bharat Garg; Mandar Patil; G.K. Sharma
International Journal of Ad Hoc and Ubiquitous Computing (IJAHUC), Vol. 36, No. 4, 2021

Abstract: The CAPTCHAs are attacked by automated programs to break their underlying design principle. Therefore, analysing the robustness of CAPTCHA is the critical requirement. Recently, a neural style transfer-based image CAPTCHA called style area CAPTCHA (SACAPTCHA) has been reported. Though the security of SACAPTCHA is evaluated on R-CNN and FCN attack models using accuracy metrics, they are ineffective to analyse its robustness. Therefore, we propose a mask R-CNN-based attack model to critically analyse the robustness of SACAPTCHA. The proposed model performs a shape-wise analysis to test the usability of different shapes and quantifies the model performance using the F1-score. The simulation results show the highest F1 score of 0.962 and 0.828 for star and circle shapes in dataset-1 and dataset-2 respectively. The results show that model prediction is independent of the regularities of the shape. The observations prove that SACAPTCHA is vulnerable to object detection attack even after using irregular shapes.

Online publication date: Thu, 08-Apr-2021

The full text of this article is only available to individual subscribers or to users at subscribing institutions.

 
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.

Pay per view:
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.

Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Ad Hoc and Ubiquitous Computing (IJAHUC):
Login with your Inderscience username and password:

    Username:        Password:         

Forgotten your password?


Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.

If you still need assistance, please email subs@inderscience.com