CAPTCHA generation based on environment-specific vocabulary
Approaches presented herein enable restricting access to a locked computing resource in a web browser with a user-tailored CAPTCHA. More specifically, a request for a CAPTCHA is obtained from a web browser of a user attempting to access a resource. A set of terms associated with the user are selected from a pool of terms collected from an environment of the user within a pre-determined time period. A familiarity value of the selected terms indicating a recognizability of the terms by the user is determined. A CAPTCHA of the selected set of terms is generated having a level of graphic noise corresponding to the familiarity value. The generated CAPTCHA is then sent to the web browser. When a response to the CAPTCHA is received from the web browser, it is analyzed to determine whether the response matches the selected set of terms. If so, the web browser is instructed to grant the user access to the resource.
1. A method for restricting access to a locked computing resource in a web browser with a user-tailored Completely Automated Public Turing test to tell Computers and Humans Apart (CAPTCHA), the method comprising:
obtaining a request for a CAPTCHA from a web browser of a user attempting to access a resource;
selecting a set of terms associated with the user from a pool of terms collected from an environment of the user within a pre-determined time period;
determining a familiarity value of the selected terms indicating a recognizability of the terms by the user;
generating a CAPTCHA of the selected set of terms having a level of graphic noise corresponding to the familiarity value; and
sending the generated CAPTCHA to the web browser.
2. The method of claim 1 , the method further comprising:
receiving a response to the CAPTCHA from the web browser;
analyzing the response to determine whether the response matches the selected set of terms;
instructing the web browser to grant the user access to the resource in response to a match; and
instructing the web browser not to grant the user access to the resource in response to a non-match.
3. The method of claim 2 , the method further comprising:
increasing the familiarity value of the selected terms in response to the match; and
decreasing the familiarity value of the selected terms in response to the non-match.
4. The method of claim 1 , the method further comprising:
monitoring a set of interactions between the user and a system of an enterprise associated with the user;
identifying environment-specific terminology in the monitored interactions;
associating the environment-specific terminology with the user; and
adding the user-associated environment-specific terminology to the pool of terms.
5. The method of claim 4 , wherein at least one interaction of the set of interactions is selected from the group consisting of: a recent browsing history of the user, a social media profile of the user, a document processed by the user, a professional profile of the user, a message written by the user, and an entry in an information store by the user.
6. The method of claim 1 , the method further comprising calculating the familiarity value based on a frequency of the set of terms in the pool of terms during a predetermined period of time.
7. The method of claim 1 , the method further comprising:
generating a preliminary CAPTCHA of the selected set of terms; and
adjusting the level of graphic noise of the generated preliminary CAPTCHA based on the determined familiarity value to generate the CAPTCHA of the selected set of terms having the level of graphic noise corresponding to the familiarity value.