A non-transitory computer-readable storage medium for securing a computer resource against unauthorized access by authenticating a user device attempting to access the computer resource, the non-transitory computer-readable storage medium including instructions that, when executed by a processing device, cause the processing device to:
- determine a three-dimensional (3D) model of a virtual scene, wherein elements of the virtual scene are selected consistent with human expectations;
- generate a data record for the 3D model, wherein the data record includes references to a pre-determined set of human expectations about the virtual scene;
- generate a two-dimensional (2D) image of the virtual scene by a challenge generator,
- wherein the 2D image comprises a view of dice from a virtual camera position, and
- wherein the dice are oriented such that a sum of values represented on top faces of the dice equals to an input parameter selected by the challenge generator;
- send a challenge data structure to the user device, wherein the challenge data structure includes the 2D image;
- obtain a user response representing a user-provided set of expectations about the virtual scene;
- determine whether the user-provided set of expectations is consistent with the pre-determined set of human expectations;
- and
- provide access to the computer resource for the user device based on whether the user-provided set of expectations is consistent with the pre-determined set of human expectations and the user response is equal to the input parameter selected by the challenge generator.