By: KUKUTLA TEJONATH REDDY, International Center for AI and Cyber Security Research and Innovations (CCRI), Asia University, Taiwan, tejonath45@gmail.com
Abstract:
The cyber world keeps expanding and this creates an issue of concern regarding cybersecurity. Phishing attacks and malicious bots are a serious concern, stressing the importance of robust defences. This article discusses captcha-based recognition, which is one of the important techniques used for the separation of human users from robotic bots. This article discusses the complex business of CAPTCHA that inhibits the phishing efforts by such malicious organisations in the provision of the benefits and limits of CAPTCHA based identification.
Introduction:
With online transactions becoming very common due to advancements in technology, the issue of computer security is quite prevalent. Recently have been experienced a large-scale number of phishing attacks and malicious bots. This has necessitated serious measures that should be taken to safeguard online purchases and financial transactions in particular have increasingly become a priority topic for discussions. One such trick has been developed and termed as CAPTCHA to tell automatically whether a response is coming from a real person or from a bot The aim of this article is to explore the aspect of CAPTCHA-based identification in the current war involving cyber-attacks on computers.
Understanding CAPTCHA-Based Detection:
At its core, CAPTCHA challenges are presented to users to distinguish between real human users and virtual bots. These challenges come in a variety of forms, including distortions, image recognition, puzzle solving, and even simple math problems. By requiring users to complete these tasks, networks can ensure that connections are authentic and not infected with malicious software.
How It Works: A Barrier Against Phishing
Phishing websites that try to trick users into revealing sensitive information often struggle to implement effective CAPTCHA techniques. Because of their automated nature, bots find it difficult to solve CAPTCHA challenges effectively, making them a valuable tool for identifying suspicious environments when users encounter CAPTCHAs challenges that incentivize them to prove their identity by completing a task, accessing automated content of the bot website or committing malicious acts.
Figure 1:How the CAPTCHA-based detection works
Advantages of CAPTCHA-Based Detection
Differentiating real user interactions: CAPTCHA acts as a trusted gatekeeper, allowing real users to interact with websites seamlessly while blocking automated scripts and bots is a mouthful This allows for online transactions such as account logins, form submissions and online purchases by real people It’s definitely happening.
Preventing automated phishing attacks: By requiring human interaction, CAPTCHA effectively reduces the risk of automated phishing attacks. Phishing websites that rely on automated processes find it more difficult to avoid CAPTCHA challenges, reducing the number of successful phishing attempts.
Enhance online security: CAPTCHA-based detection contributes to overall online security by reducing the chances of unauthorized access, data breaches, and fraudulent activity. It provides additional security, and reinforces existing security measures.
Limitations of CAPTCHA-Based Detection:
Effectiveness depends on usability: While CAPTCHA is a powerful tool, its effectiveness depends largely on usability. Some phishing websites may use sophisticated techniques to circumvent the CAPTCHA challenge, making this method less reliable as a stand-alone solution.
User Experience Concerns: Sometimes CAPTCHA challenges, especially complex ones, can frustrate users, resulting in a poor experience. Hard-to-read text or unclear functions can prevent users from interacting with a particular site, affecting user engagement.
Accessibility Issues: Some CAPTCHA techniques, such as visual challenges, pose accessibility challenges for individuals with disabilities. People with low vision or cognitive impairment may find it difficult or impossible to complete CAPTCHA tasks, and be excluded from accessing specific online services.
Conclusion:
CAPTCHA-based detection is a valuable weapon in the ongoing battle against automated threats, providing a powerful safety net against phishing attacks and malicious bots Although not without limitations, but the continuous evolution of CAPTCHA technology seeks to strike a balance between enhanced security and user -friendly experiences If we continue to do so, CAPTCHA-based identification will surely evolve and improve, and has played a key role in securing online transactions for users around the world.
References:
- Souley, B., & Abubakar, H. (2018). A captcha–based intrusion detection model. Int. J. Softw. Eng. Appl, 9(1), 29-40.
- ABUBAKAR, H., SOULEY, B., & GITAL, A. Y. U. (2020). AN IMPROVED CAPTCHA–BASED INTRUSION DETECTION SYSTEM BASED ON REDIRECTOR MODEL. Journal of Theoretical and Applied Information Technology, 98(03).
- Tang, M., Gao, H., Zhang, Y., Liu, Y., Zhang, P., & Wang, P. (2018). Research on deep learning techniques in breaking text-based captchas and designing image-based captcha. IEEE Transactions on Information Forensics and Security, 13(10), 2522-2537.
- Abdullahi, M., Aliyu, S., & Junaidu, S. B. (2019). An enhanced intrusion detection system using honeypot and CAPTCHA techniques. Fudma Journal of Sciences, 3(3), 202-209.
- Xu, X., Liu, L., & Li, B. (2020). A survey of CAPTCHA technologies to distinguish between human and computer. Neurocomputing, 408, 292-307.
- Gao, H., Tang, M., Liu, Y., Zhang, P., & Liu, X. (2017). Research on the security of microsoft’s two-layer captcha. IEEE Transactions on Information Forensics and Security, 12(7), 1671-1685.
- Igbekele, E. O., Adebiyi, A. A., Ibikunle, F. A., Adebiyi, M. O., & Oludayo, O. O. (2021). Research trends on CAPTCHA: A systematic literature. International Journal of Electrical and Computer Engineering, 11(5), 4300.
- Abbas, U. F., & Abdulkarim, A. (2022). PERFORMANCE ANALYSIS OF CAPTCHA BASED BLOCKING AND RESPONSE OF AN INTRUSION DETECTION MODEL USING SIGNATURE. FUDMA JOURNAL OF SCIENCES, 6(3), 248-253.
- Kheshaifaty, N., & Gutub, A. (2020). Preventing multiple accessing attacks via efficient integration of captcha crypto hash functions. Int. J. Comput. Sci. Netw. Secur.(IJCSNS), 20(9), 16-28.
- Poonia, V., Goyal, M. K., Gupta, B. B., Gupta, A. K., Jha, S., & Das, J. (2021). Drought occurrence in different river basins of India and blockchain technology based framework for disaster management. Journal of Cleaner Production, 312, 127737.
- Gupta, B. B., & Sheng, Q. Z. (Eds.). (2019). Machine learning for computer and cyber security: principle, algorithms, and practices. CRC Press.
- Singh, A., & Gupta, B. B. (2022). Distributed denial-of-service (DDoS) attacks and defense mechanisms in various web-enabled computing platforms: issues, challenges, and future research directions. International Journal on Semantic Web and Information Systems (IJSWIS), 18(1), 1-43.
- Almomani, A., Alauthman, M., Shatnawi, M. T., Alweshah, M., Alrosan, A., Alomoush, W., & Gupta, B. B. (2022). Phishing website detection with semantic features based on machine learning classifiers: a comparative study. International Journal on Semantic Web and Information Systems (IJSWIS), 18(1), 1-24.
Cite As
REDDY K.T (2023) The Crucial Role of CAPTCHA-Based Detection in Cybersecurity, Insights2Techinfo, pp.1