XI’AN: A new study suggested that text-based CAPTCHAs, one of the most widely used website security mechanisms, are no longer safe when facing smarter artificial intelligence.
Text-based CAPTCHA uses a jumble of distorted or blurred letters, characters and numbers to distinguish humans from computer programs, to block the latter from accessing polls and auctions disguised as a human user. This reverse Turing test builds on the belief that people are more adept at recognizing these symbols than machines.
But researchers from China’s Northwest University, Peking University, and Lancaster University in Britain said they developed a new algorithm, based on machine learning, that can break most text-based CAPTCHAs within 0.05 seconds.
The research was published in a paper presented at the ACM Conference on Computer and Communications Security (CCS) 2018 in Toronto. It described the algorithm as “generic, low-effort yet effective” compared with previous attacks on CAPTCHAs that could be laborious and scheme-specific.
Read More: Strange Fact: Most Patients Not 100 Percent Honest With Doctors
Fang Dingyi, co-author of the paper at Northwest University, said the program had been tested on CAPTCHA schemes used by 50 popular websites including those operated by Google, Wikipedia, Microsoft, Baidu, Alibaba, and Tencent.
Overall, the program had a success rate of over 50 per cent of decoding CAPTCHAs on most websites within 0.05 seconds. Its success rate of decoding certain Google CAPTCHAs, considered to be the most difficult, stood at 3 per cent.
“It is widely believed that a CAPTCHA scheme is ineffective if the decoding rate is above 1 per cent,” said Tang Zhanyong, co-author of the paper at Northwest University.
The AI tool draws on a technique known as the “generative adversarial network,” or GAN. It teaches a CAPTCHA generator program to produce large numbers of training CAPTCHAs, which are then used to train a solver to break real CAPTCHAs.
“This research suggests one can easily launch an attack on a new CAPTCHA scheme using AI. It means that this first defence of many websites is no longer reliable,” said Fang.
The researchers advised website owners to consider deploying alternative multiple-layer security mechanisms. Fang said his team is looking at ways to develop a more reliable CAPTCHA system.
“We want to offer an alternative to the current text-based CAPTCHA scheme. The alternative should improve its security without compromising the user experience,” Fang said.
Dear TNT Reader,
At The News Tribe, our mission is to bring you free, independent, and unbiased news and content that keeps you informed and empowered. We are committed to upholding the highest standards of journalism, as we understand that we are a platform for truth.
Apart from independent global news coverage, we also commit our unique focus on the Muslim world. In an age marked by the troubling rise of Islamophobia and widespread misrepresentation of Muslims in Western media, we strive to provide accurate and fair coverage.
But to continue doing so, we need your support. Even a small donation of 1$ can make a big difference. Your contribution will help us maintain the quality of our news and counteract the negative narratives that are so prevalent.
Please consider donating today to ensure we can keep delivering the news that matters. Together, we can make a positive impact on the world, and work towards a more inclusive, informed global society.
Donate Monthly Subscription Annual Subscription
