Multiple access point grid based password scheme for enhanced online security

In this paper, we discuss how to prevent users´ passwords from being stolen by adversaries. Textual-based password authentication scheme tend to be more vulnerable to attacks such as shoulder surfing. To overcome the vulnerabilities of traditional methods, visual or graphical password schemes have been developed as possible alternative solutions to text-based scheme. But simply adopting graphical password authentication also has some drawbacks; hence some hybrid schemes based on text as well as graphics were developed. We propose a virtual password concept involving a small amount of human computing to secure users´ passwords in on-line environments. We also analyze how the proposed scheme defends against phishing, key logger, shoulder-surfing, man in the middle and session hijacking attacks.