Abstract
A Completely Automated Public Turing Test to Tell Computers and Humans Apart (CAPTCHA) is one
of the primary barriers between notorious bots and legitimate human users. However, advancements in
Artificial Intelligence (AI) have enabled malicious bots to circumvent CAPTCHA challenges effectively.
As a result, several types of CAPTCHA have been rendered ineffective.
In this work, we introduce Swiss Cheese CAPTCHA, a novel sensor-based solution designed to be
easily solvable by humans while presenting multiple obstructions for bots (similar to the Swiss Cheese
Model) even when the sensor outputs can be predicted and interfered with. We leverage a range of
human cognitive abilities and Generic Sensor API in modern devices to provide robust protection against
automated attacks by making it more computationally expensive for bots to produce a valid answer within
a stipulated time.
We conducted two user studies to assess our proposal’s effectiveness: one involving 116 participants
to assess the likability and improvise the design, and the other, with 107 participants, to investigate the
impact of improvised design changes on cognitive abilities. Our results from these studies show an
average completion time of 4.76 seconds and 6.12 seconds, with a success rate of 90.3% and 83.25%,
respectively. By analyzing the 2141 resultant trajectories from both user studies, we assess the learnability,
error recovery rate, efficiency, and satisfaction of users using the scheme. Finally, we devise an automated
attack against our proposal to analyze its security in the real world; we find the probability of attack
success is low. We also make our dataset available for further research.