This document discusses CAPTCHAs, which are programs that generate tests to distinguish humans from bots by having users decipher distorted text or images. It describes the background and need for CAPTCHAs, and various types including text, distorted-word, and graphic-based CAPTCHAs. It also covers how CAPTCHAs work, challenges in constructing and breaking them, and issues with usability and compatibility.

1. CAPTCHA
 BY- SREE POOJA.R
14A81A05A8

2. CONTENTS
 DEFINITION
 BACKGROUND
 TYPES
 APPLICATIONS
 CONSTRUCTING CAPTCHA
 BREAKING CAPTCHA
 ISSUES WITH CAPTCHA
 CONCLUSION

3. INTRODUCTION
CAPTCHA – Completely Automated
Public Turing test to tell Computers &
Humans Apart.
Invented at CMU by Luis von Ahn,
Manuel Blum, et.al.
It is a program that is a challenge
response to test to separate humans
from computer programs.

4. Generic CAPTCHAs distort letters &
numbers -
Distorted characters are presented to
the user.
User has to recognize the distorted
letters.
If the guessed letters are correct, the
user is inferred to be a human &
allowed access.

5. Contd…
Humans can read the distorted &
noisy text.
Current OCRs(Optical Character
Recognition) cannot read them.

6. NEED OF CAPTCHA
Why CAPTCHA was needed ?
 Sabotage of Online Polls.
 Spam e-mails.
 Abusing free Online accounts.

7. Contd…
CAPTCHA employs a Reverse Turing
Test.
Judge = CAPTCHA program,
participant = user
If the user passes CAPTCHA, he is
human otherwise it is a machine.

8. 1. Text Based-
 simple, normal questions :-
 What is the sum of three & thirty-five ?
 If today is Saturday, what is day after
tomorrow ?
 Which of mango, table & water is a fruit ?
Very effective, needs a large question bank.
Congnitively challenged users find it hard.

9. 2. Gimpy-
 Designed by Yahoo & CMU(Carnegie Mellon
University)
 Picks up 10 random words from dictionary & distorts,
fills with noise.
 User has to recognize at least 3 words.
 If the user is correct, then he is admitted.

10. 3. EZ-Gimpy-
 A modified version of Gimpy.
 Yahoo used this version in Messenger.
 Has only 1 random string of characters.
 Not a dictionary word, so not prone to dictionary
attack.
 Not a good implimentation , already broken by
OCRs(Optical Character Recognition).

11. 4. MSNs passport service CAPATCHAs-
 Provided for Microsoft’s MSN services.
 Use of 8 characters.
 Warping is used to distort.
 Very strong implementation, hasn’t been broken.
 It is segmentation-resistant.

12. 5. Graphic based CAPTCHAs-
 1. BONGO
 User has to solve a pattern recognition problem.
 Has to tell the distinct characteristic between
two sets of figures.
 Then tell to which set a given figure belongs to.

13. Contd…
 2. PIX-
 Uses a large database of labelled images.
 It shows a set of images, user has to recognize
the common feature among those.
 Eg :- pick the common characteristic among the
following 4 pictures = “aeroplane”.

14. 6. Audio CAPTCHAs-
 Consists of downloadable audio clip.
 User listens & enters the spoken word.
 Helps visually disabled users.
 Below is the Google’s audio enabled CAPTCHA-

15. 7. Applications-
 Protect Online polls.
 Prevent web registration abuse, protect
passwords from brute-force attack.
 Prevent comment spam & spam e-mails.
 E-ticketing, prevent scalping.

16. Constructing CAPTCHAs
 Things to keep in mind :-
 Don’t store CAPTCHA solution in web page’s
metadata.
 A CAPTCHA is no good if it doesn’t distort.
 Need a large database of different CAPTCHA
questions.
 Avoid repetition of question.

17. CAPTCHA logic
 Generate the question
 Persist the correct answer
 Present the question to the user
 Evaluate the answer, if incorrect start again-
Generate a different CAPTCHA
 If correct allow the access to the user

18. Breaking CAPTCHAs
 Cracking CAPTCHAs through programs –
 Convert CAPTCHA into Grey scale.
 Detect patterns in the image
corresponding to the characters.

19. Contd…
 To break this CAPTCHA –
 Segmentation –
 Locate possible letters in the image –
 Construct graph of consisting letters –
 Find out the possible words from the graph, use scores
to rank
Roll = 11.94
Profit = 9.42 (better match)

20. Issues with CAPTCHAs
 Usability issue :
 Some CAPTCHAs are in accessible to visually
impaired, cognitively challenged people.
 Compatibility issue :
 Java script may be needed to be activated in
browsers.
 Some may need Adobe Flash Plugin.

21. SUMMARY
CAPTCHAs are an effective way to
counter bots & reduce spam.
They help advance AI knowledge.
Some issues with current
implementations represent challenges
for future improvements.

22. ANY QUESTIONS -
CAPTCHA
 BY- SREE POOJA.R
14A81A05A8

23. THANK YOU