Abstract:The development of deep learning techniques has significantly increased the ability of computers to recognize CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart), thus breaking or mitigating the security of existing captcha schemes. To protect against these attacks, recent works have been proposed to leverage adversarial machine learning to perturb captcha pictures. However, they either require the prior knowledge of captcha solving models or lack adaptivity to the evolving behaviors of attackers. Most importantly, none of them has been deployed in practical applications, and their practical applicability and effectiveness are unknown. In this work, we introduce advCAPTCHA, a practical adversarial captcha generation system that can defend against deep learning based captcha solvers, and deploy it on a large-scale online platform with near billion users. To the best of our knowledge, this is the first such work that has been deployed on international large-scale online platforms. By applying adversarial learning techniques in a novel manner, advCAPTCHA can generate effective adversarial captchas to significantly reduce the success rate of attackers, which has been demonstrated by a large-scale online study. Furthermore, we also validate the feasibility of advCAPTCHA in practical applications, as well as its robustness in defending against various attacks. We leverage the existing user risk analysis system to identify potential attackers and serve advCAPTCHA to them. We then use their answers as queries to the attack model. In this manner, advCAPTCHA can be adapted/fine-tuned to accommodate the attack model evolution. Overall, advCAPTCHA can serve as a key enabler for generating robust captchas in practice and providing useful guidelines for captcha developers and practitioners.

LineCAPTCHA Mobile: A User Friendly Replacement for Unfriendly Reverse Turing Tests for Mobile Devices (ICIAfS14)

Explore Training of Deep Convolutional Neural Networks on Battery-powered Mobile Devices: Design and Application

CAPTCHA Types and Breaking Techniques: Design Issues, Challenges, and Future Research Directions

A survey of CAPTCHA technologies to distinguish between human and computer

The Robustness of a New 3D CAPTCHA

Text Captcha is Dead? A Large Scale Deployment and Empirical Study.

Efficient and Secure Flash-based Gaming CAPTCH

Bypassing Captcha By Machine A Proof For Passing The Turing Test

Robust Text CAPTCHAs Using Adversarial Examples

Deceiving computers in Reverse Turing Test through Deep Learning

Robust CAPTCHAs Towards Malicious OCR

A Study of CAPTCHAs for Securing Web Services

Secure CAPTCHA by Genetic Algorithm (GA) and Multi-Layer Perceptron (MLP)

Diff-CAPTCHA: An Image-based CAPTCHA with Security Enhanced by Denoising Diffusion Model

reCAPTCHA: Human-Based Character Recognition via Web Security Measures

How Secure is Your Website? A Comprehensive Investigation on CAPTCHA Providers and Solving Services

Web Authentication Biometric 3D Animated CAPTCHA System Using Artificial Intelligence and Machine Learning Approach

Applying Visual Cryptography to Enhance Text Captchas

Knowledge distillation of convolutional neural network models on inaccurately labeled data for automatic text CAPTCHA recognition on mobile devices

An Empirical Study & Evaluation of Modern CAPTCHAs

Dazed & Confused: A Large-Scale Real-World User Study of reCAPTCHAv2