{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T02:55:02Z","timestamp":1760151302225,"version":"build-2065373602"},"reference-count":41,"publisher":"MDPI AG","issue":"5","license":[{"start":{"date-parts":[[2022,3,3]],"date-time":"2022-03-03T00:00:00Z","timestamp":1646265600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>An alternative authentication method to traditional alphanumeric passwords is graphical password authentication, also known as graphical authentication, for which one of the most valuable cued-recall techniques is PassPoints. This technique stands out for its security and usability. However, it can be violated if the user follows a predefined pattern when selecting the five points in an image as their passwords, such as the DIAG and LINE patterns. Dictionary attacks can be built using these two patterns to compromise graphical passwords. So far, no reports have been found in the state of the art about any test capable of detecting graphical passwords with DIAG or LINE patterns in PassPoints. Studies carried out in other scenarios have shown the effectiveness of the characteristics of Delaunay triangulations in extracting information about the dependence between the points. In this work, graphical passwords formed by five randomly selected points on an image are compared with passwords whose points contain patterns of the DIAG or LINE type. The comparison is based on building for each password its Delaunay triangulation and calculating the mean value of the maximum angles of the triangles obtained; such a mean value is denoted by amadt. It is experimentally shown that in passwords containing DIAG and LINE patterns, the value of amadt is higher than the one obtained in passwords formed by random dots. From this result, it is proposed to use this amadt value as a statistic to build a test of means. This result constitutes the work\u2019s main contribution: The proposal of a spatial randomness test to detect weak graphic passwords that contain DIAG and LINE type patterns. The importance and novelty of this result become evident when two aspects are taken into account: First, these weak passwords can be exploited by attackers to improve the effectiveness of their attacks; second, there are no prior criteria to detect this type of weak password. The practical application of said test contributes to increasing PassPoints security without substantially affecting its efficiency.<\/jats:p>","DOI":"10.3390\/s22051987","type":"journal-article","created":{"date-parts":[[2022,3,3]],"date-time":"2022-03-03T20:36:30Z","timestamp":1646339790000},"page":"1987","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Detection of DIAG and LINE Patterns in PassPoints Graphical Passwords Based on the Maximum Angles of Their Delaunay Triangles"],"prefix":"10.3390","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5344-667X","authenticated-orcid":false,"given":"Lisset","family":"Su\u00e1rez-Plasencia","sequence":"first","affiliation":[{"name":"Instituto de Criptograf\u00eda, Facultad de Matem\u00e1tica y Computaci\u00f3n, Universidad de la Habana, Habana 10400, Cuba"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8940-050X","authenticated-orcid":false,"given":"Joaqu\u00edn Alberto","family":"Herrera-Mac\u00edas","sequence":"additional","affiliation":[{"name":"Instituto de Criptograf\u00eda, Facultad de Matem\u00e1tica y Computaci\u00f3n, Universidad de la Habana, Habana 10400, Cuba"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6104-9671","authenticated-orcid":false,"given":"Carlos Miguel","family":"Leg\u00f3n-P\u00e9rez","sequence":"additional","affiliation":[{"name":"Instituto de Criptograf\u00eda, Facultad de Matem\u00e1tica y Computaci\u00f3n, Universidad de la Habana, Habana 10400, Cuba"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7793-896X","authenticated-orcid":false,"given":"Guillermo","family":"Sosa-G\u00f3mez","sequence":"additional","affiliation":[{"name":"Facultad de Ciencias Econ\u00f3micas y Empresariales, Universidad Panamericana, \u00c1lvaro del Portillo 49, Zapopan 45010, Jalisco, Mexico"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0681-3833","authenticated-orcid":false,"given":"Omar","family":"Rojas","sequence":"additional","affiliation":[{"name":"Facultad de Ciencias Econ\u00f3micas y Empresariales, Universidad Panamericana, \u00c1lvaro del Portillo 49, Zapopan 45010, Jalisco, Mexico"},{"name":"Faculty of Economics and Business, Universitas Airlangga, Surabaya 60286, East Java, Indonesia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2022,3,3]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Bertino, E., Shulman, H., and Waidner, M. (2021). An explainable online password strength estimator. Computer Security-ESORICS 2021, Springer. ESORICS 2021; Lecture Notes in Computer Science.","DOI":"10.1007\/978-3-030-88428-4"},{"key":"ref_2","first-page":"37","article-title":"A Taxonomy of Multimedia-based Graphical User Authentication for Green Internet of Things","volume":"22","author":"Awan","year":"2021","journal-title":"ACM Trans. Internet Technol."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Dirik, A.E., Mem\u00f3n, N., and Birget, J.C. (2007, January 20\u201328). Modeling user choice in the PassPoints graphical password scheme. Proceedings of the 3rd Symposium on Usable Privacy and Security 2007, Pittsburgh, PA, USA.","DOI":"10.1145\/1280680.1280684"},{"key":"ref_4","unstructured":"Thorpe, J., Al-Badawi, M., MacRae, B., and Salehi-Abari, A. (May, January 26). The presentation effect on graphical passwords. Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, Toronto, ON, Canada."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"194","DOI":"10.1038\/35058500","article-title":"Computational modelling of visual attention","volume":"2","author":"Itti","year":"2001","journal-title":"Nat. Rev. Neurosci."},{"key":"ref_6","unstructured":"Khanna, A., Gupta, D., Bhattacharyya, S., Hassanien, A.E., Anand, S., and Jaiswal, A. (2022). Implementing Multilevel Graphical Password Authentication Scheme in Combination with One Time Password. International Conference on Innovative Computing and Communications. Advances in Intelligent Systems and Computing, Springer."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Golar, P., and Khandelwal, B. (2021). Graphical-Based Authentication System and its Applications. Design, Applications, and Maintenance of Cyber-Physical Systems, IGI Global.","DOI":"10.4018\/978-1-7998-6721-0.ch004"},{"key":"ref_8","first-page":"68","article-title":"Three level password authentication","volume":"7","author":"Khadke","year":"2020","journal-title":"Int. J. Emerg. Technol. Innov. Res."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Marmolejo-Saucedo, J.A., Vasant, P., Litvinech, I., Rodriguez-Aguilar, R., and Martinez-Rios, F. (2020). Effectiveness of Some Tests of Spatial Randomness in the Detection of Weak Graphical Passwords in Passpoint. Computer Science and Health Engineering in Health Services, Springer. COMPSE 2020; Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering.","DOI":"10.1007\/978-3-030-69839-3"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Herrera, J.A., Leg\u00f3n, C.M., Su\u00e1rez, L., Pi\u00f1eiro, L.R., Rojas, O., and Sosa, G. (2021). Test for Detection of Weak Graphic Passwords in Passpoint Based on the Mean Distance between Points. Symmetry, 13.","DOI":"10.3390\/sym13050777"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Marmolejo-Saucedo, J.A., Vasant, P., Litvinech, I., Rodriguez-Aguilar, R., and Martinez-Rios, F. (2020). Analysis of the Number of Sides of Voronoi Polygons in PassPoint. Computer Science and Health Engineering in Health Services, Springer. COMPSE 2020; Lecture Notes of the Institute for Computer Sciences; Social Informatics and Telecommunications Engineering.","DOI":"10.1007\/978-3-030-69839-3"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Wiedenbeck, S., Waters, J., Birget, J.C., Brodskiy, A., and Memon, N. (2005, January 6\u20138). Authentication Using Graphical Passwords: Effects of Tolerance and Image Choice. Proceedings of the Symposium On Usable Privacy and Security (SOUPS) 2005, Pittsburgh, PA, USA.","DOI":"10.1145\/1073001.1073002"},{"key":"ref_13","first-page":"13","article-title":"Seguridad y usabilidad de los esquemas y t\u00e9cnicas de autenticaci\u00f3n gr\u00e1fica","volume":"12","author":"Socorro","year":"2018","journal-title":"Rev. Cuba. Cienc. Inform."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"102","DOI":"10.1016\/j.ijhcs.2005.04.010","article-title":"Passpoints: Design and longitudinal evaluation of a graphical password system","volume":"63","author":"Wiedenbeck","year":"2005","journal-title":"Int. J. Hum.-Comput. Stud."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"387","DOI":"10.1007\/s10207-009-0080-7","article-title":"User interface design affects security: Patterns in click-based graphical passwords","volume":"8","author":"Chiasson","year":"2009","journal-title":"Int. J. Inf. Secur."},{"key":"ref_16","unstructured":"Thorpe, J., and Van Oorschot, P.C. (2007). Human-Seeded Attacks and Exploiting Hot-Spots in Graphical Passwords. USENIX \u00f37: Proceedings of the 16th USENIX Security Symposium, USENIX."},{"key":"ref_17","unstructured":"Salehi, A., Thorpe, J., and Van Oorschot, P.C. (2008, January 8\u201312). On Purely Automated Attacks and Click-Based Graphical Passwords. Proceedings of the 24th Annual Computer Security Applications Conference (ACSAC), Anaheim, CA, USA."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"393","DOI":"10.1109\/TIFS.2010.2053706","article-title":"Purely automated attacks on passpoints style graphical passwords","volume":"5","author":"Salehi","year":"2010","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Vorster, J.S., Van Heerden, R.P., and Irwin, B. (2016, January 17\u201318). The patterns-richness of graphical passwords. Proceedings of the 15th International Information Security South Africa Conference (ISSA 2016), Pretoria, South Africa.","DOI":"10.1109\/ISSA.2016.7802931"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Princes, P.S.S., and Andrews, J. (2017, January 23\u201324). Analysis of various authentication schemes for passwords using images to enhance network security through online services. Proceedings of the 2017 International Conference on Information Communication and Embedded Systems (ICICES), Chennai, India.","DOI":"10.1109\/ICICES.2017.8070717"},{"key":"ref_21","first-page":"102913","article-title":"A study on priming methods for graphical passwords","volume":"62","author":"Parish","year":"2021","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"367","DOI":"10.1002\/bimj.200390018","article-title":"Spatial point pattern analysis by using Voronoi diagrams and Delaunay tessellations-A comparative study","volume":"45","author":"Chiu","year":"2003","journal-title":"Biometr. J."},{"key":"ref_23","unstructured":"Savicky, P. (2022, January 27). A Strong Nonrandom Pattern in Matlab Default Random Number Generator. Available online: https:\/\/www.cs.cas.cz\/~savicky\/papers\/rand2006.pdf."},{"key":"ref_24","unstructured":"Salmon, J.K., Moraes, M.A., Dror, R.O., and Shaw, D.E. (2011, January 12\u201318). Parallel Random Numbers: As Easy as 1, 2, 3. Proceedings of the International Conference for High Performance Computing, Networking, Storage and Analysis (SC), Seatle, WA, USA."},{"key":"ref_25","first-page":"37","article-title":"Patrones en el orden de los clics y su influencia en la debilidad de las claves de la T\u00e9cnica de Autenticaci\u00f3n Gr\u00e1fica Passpoints","volume":"12","author":"Socorro","year":"2019","journal-title":"Rev. Cuba. Cienc. Inform."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"4","DOI":"10.54870\/1551-3440.1009","article-title":"Voronoi Diagrams","volume":"1","author":"Mumm","year":"2004","journal-title":"Math. Enthus."},{"key":"ref_27","unstructured":"Okabe, A., Boots, B., Sugihara, K., and Chiu, S.N. (2000). Spatial Tessellations: Concepts and Applications of Voronoi Diagrams, British Library Cataloguing in Publication Data."},{"key":"ref_28","first-page":"4","article-title":"Validaci\u00f3n de la triangulaci\u00f3n de Delaunay empleando geometr\u00eda conforme","volume":"20","author":"Romero","year":"2016","journal-title":"Sist"},{"key":"ref_29","unstructured":"Romero, J.N. (2017). \u00c1lgebra Geom\u00e9trica para la Generaci\u00f3n de Regiones de Voronoi. [Ph.D. Thesis, Instituto Polit\u00e9cnico Nacional, Laboratorio de Inteligencia Artificial]."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"De Berg, M., Cheong, O., Van Kreveld, M., and Overmars, M. (2008). Computational Geometry: Algorithms and Applications, Springer. [3rd ed.].","DOI":"10.1007\/978-3-540-77974-2"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"333","DOI":"10.1007\/PL00009464","article-title":"Flipping Edges in Triangulations","volume":"22","author":"Hurtado","year":"1999","journal-title":"Discret. Comput. Geom."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"162","DOI":"10.1093\/comjnl\/24.2.162","article-title":"Computing Dirichlet tessellations","volume":"24","author":"Bowyer","year":"1981","journal-title":"Comput. J."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"167","DOI":"10.1093\/comjnl\/24.2.167","article-title":"Computing the n-dimensional Delaunay tessellation with application to Voronoi polytopes","volume":"24","author":"Watson","year":"1981","journal-title":"Comput. J."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"1038","DOI":"10.1016\/j.cad.2004.10.004","article-title":"An efficient sweep-line Delaunay triangulation algorithm","volume":"37","author":"Zalik","year":"2005","journal-title":"Comput.-Aided Des."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"74","DOI":"10.1145\/282918.282923","article-title":"Primitives for the Manipulation of General Subdivisions and the Computation of Voronoi Diagrams","volume":"4","author":"Guibas","year":"1985","journal-title":"ACM Trans. Graph."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/0141-1195(87)90043-X","article-title":"A fast algorithm for constructing Delaunay triangulations in the plane","volume":"9","author":"Sloan","year":"1987","journal-title":"Adv. Eng. Softw."},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Su, P., and Scot, R.L. (1995, January 5\u20137). A comparison of sequential Delaunay triangulation algorithms. Proceedings of the Eleventh Annual Symposium on Computational Geometry, Association for Computing Machinery, Vancouver, BC, Canada.","DOI":"10.1145\/220279.220286"},{"key":"ref_38","first-page":"31","article-title":"A systematic review of algorithms with linear-time behaviour to generate Delaunay and Voronoi tessellations","volume":"100","author":"Nogueira","year":"2014","journal-title":"Cmes-Comput. Model. Eng. Sci."},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"469","DOI":"10.1145\/235815.235821","article-title":"The Quickhull Algorithm for Convex Hulls","volume":"22","author":"Barber","year":"1996","journal-title":"Acm Trans. Math. Softw."},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Skiena, S.S. (2008). The Algorithm Design Manual, Springer. Corrected Printing 2012.","DOI":"10.1007\/978-1-84800-070-4"},{"key":"ref_41","unstructured":"Dodge, Y. (2009). The Concise Encyclopedia of Statistics, Springer."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/5\/1987\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T22:31:28Z","timestamp":1760135488000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/5\/1987"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,3,3]]},"references-count":41,"journal-issue":{"issue":"5","published-online":{"date-parts":[[2022,3]]}},"alternative-id":["s22051987"],"URL":"https:\/\/doi.org\/10.3390\/s22051987","relation":{},"ISSN":["1424-8220"],"issn-type":[{"type":"electronic","value":"1424-8220"}],"subject":[],"published":{"date-parts":[[2022,3,3]]}}}