1.INTRODUCTION1.1 Overview:
You're trying to sign up for a free emailservice offered by Gmail or Yahoo. Beforeyou can submit your application, you firsthave to pass a test. It's not a hard test -- infact, that's the point. For you, the test shouldbe simple and straightforward. But for acomputer, the test should be almostimpossible to solve.This sort of test is a
CAPTCHA
.They're also known as a type of
HumanInteraction Proof
(
HIP
). You've probablyseen CAPTCHA tests on lots of Web sites.The most common form of CAPTCHA is animage of several distorted letters. It's your job to type the correct series of letters into aform. If your letters match the ones in thedistorted image, you pass the test.CAPTCHAs are short for
C
ompletely
A
utomated
P
ublic
T
uring test totell
C
omputers and
H
umans
A
part. The term"CAPTCHA" was coined in 2000 by LuisVon Ahn, Manuel Blum, Nicholas J. Hopper (all of Carnegie Mellon University, and JohnLangford (then of IBM). They are challenge-response tests to ensure that the users areindeed human. The purpose of a CAPTCHAis to block form submissions from spam bots– automated scripts that harvest emailaddresses from publicly available webforms. A common kind of CAPTCHA usedon most websites requires the users to enter the string of characters that appear in adistorted form on the screen.CAPTCHAs are used because of thefact that it is difficult for the computers toextract the text from such a distorted image,whereas it is relatively easy for a human tounderstand the text hidden behind thedistortions. Therefore, the correct responseto a CAPTCHA challenge is assumed tocome from a human and the user is permittedinto the website.Why would anyone need to create atest that can tell humans and computersapart? It's because of people tryingto
game
the system -- they want to exploitweaknesses in the computers running thesite. While these individuals probably makeup a minority of all the people onthe Internet, their actions can affect millionsof users and Web sites. For example, afree e-mail service might find itself bombarded by account requests from anautomated program. That automatedprogram could be part of a larger attempt tosend out spam mail to millions of people.The CAPTCHA test helps identify which
3