Paper 2016/336
No Bot Expects the DeepCAPTCHA! Introducing Immutable Adversarial Examples with Applications to CAPTCHA
Margarita Osadchy, Julio Hernandez-Castro, Stuart Gibson, Orr Dunkelman, and Daniel Pérez-Cabo
Abstract
Recent advances in Deep Learning (DL) allow for solving complex AI problems that used to be very hard. While this progress has advanced many fields, it is considered to be bad news for CAPTCHAs (Completely Automated Public Turing tests to tell Computers and Humans Apart), the security of which is based on the hardness of learning problems. In this paper we introduce DeepCAPTCHA, a new and secure CAPTCHA scheme based on adversarial examples, an inherit limitation of the current Deep Learning networks. These adversarial examples are constructed inputs, computed by adding a small and specific perturbation called adversarial noise to correctly classified items, causing the targeted DL network to misclassify them. We show that plain adversarial noise is insufficient to achieve secure CAPTCHA schemes, which leads us to introduce immutable adversarial noise - an adversarial noise resistant to removal attempts. We implement a proof of concept system and its analysis shows that the scheme offers high security and good usability compared to the best existing CAPTCHAs.
Note: Submitted to Usenix Security 2016
Metadata
- Available format(s)
-
PDF
- Category
- Applications
- Publication info
- Preprint. MINOR revision.
- Keywords
- deep learningCAPTCHAs
- Contact author(s)
- orrd @ cs haifa ac il
- History
- 2016-03-30: received
- Short URL
- https://ia.cr/2016/336
- License
-
CC BY
BibTeX
@misc{cryptoeprint:2016/336,
author = {Margarita Osadchy and Julio Hernandez-Castro and Stuart Gibson and Orr Dunkelman and Daniel Pérez-Cabo},
title = {No Bot Expects the {DeepCAPTCHA}! Introducing Immutable Adversarial Examples with Applications to {CAPTCHA}},
howpublished = {Cryptology {ePrint} Archive, Paper 2016/336},
year = {2016},
url = {https://eprint.iacr.org/2016/336}
}
