1. 1. J. Thorpe. On the Predictability and Security of User Choice in Passwords. PhD thesis, Carleton University, 2008
   2. S. Chiasson, A. Forget, R. Biddle and P.C. van Oorschot. Influencing Users Towards Better Passwords: Persuasive Cued Click-Points. In Proceedings of HCI, British Computer Society, 2008.
   3. S. Chiasson, A. Forget, R. Biddle and P.C. van Oorschot. User Interface Design Affects Security: Patterns in Click-Based Graphical Passwords. International Journal of Information Security, 8(5), 2009.
   4. S. Chiasson, A. Forget, E. Stobert, P.C. van Oorschot and R. Biddle. Multiple Password Interference in Text Passwords and Click-Based Graphical Passwords. In 16th ACM Conference on Computer and Communications Security (CCS), 2009.
   5. P.C. van Oorschot and J. Thorpe. On Predicting and Exploiting Hot-Spots in Click-Based Graphical Passwords, 2008.
   6. K. Renaud. Guidelines for designing graphical authentication mechanism interfaces . International Journal of Information and Computer Security, 3(1):60– 85, 2009
   7. A. Salehi-Abari, J. Thorpe and P.C. van Oorschot. On Purely Automated Attacks and Click- Based Graphical Passwords. In Proceedings of the 24th Annual Computer Security Applications Conference (ACSAC), 2008.
   8. Mun-Kyu Lee, ―Security Notions and Advanced Method for Human Shoulder-Surfing Resistant PINEntry‖ IEEE Transactions On Information Forensics And Security, Vol. 9, No. 4, April 2014
   9. B. B. Zhu et al., ―Attacks And Design Of Image Recognition CAPTCHAs,‖ in Proc. ACM CCS, 2010.
   10. E. Stobert, A. Forget, S. Chiasson, P. van Oorschot and R. Biddle, ―Exploring Usability Effects of Increasing Security in Click-Based Graphical Passwords,‖ Proc. Ann. Computer Security Applications Conf. (ACSAC), 2010.
   11. S. Chiasson, A. Forget, E. Stobert, P. van Oorschot and R. Biddle, ―Multiple Password Interference in Text and Click-Based Graphical Passwords,‖ Proc. ACM Conf. Computer and Comm. Security (CCS), Nov. 2009.
   12. Sonia Chiasson, Alain Forget, Robert Biddle and Paul C. van Oorschot, ―Persuasive Cued Click-Points.Design, Implementation and Evaluation of a KnowledgeBased Authentication Mechanism‖ IEEE Transactions On Dependable And Secure Computing, Vol. 9, No. 2, March/April 2012
   13. P.C. van Oorschot and J. Thorpe. On Predictive Models and User-Drawn Graphical Passwords. ACM Transactions on Information and System Security, 10(4):1–33, January 2008.