An Investigation of Shoulder Surfing Attacks on Touch-Based Unlock Events-Reference-Cited by-同舟云学术

An Investigation of Shoulder Surfing Attacks on Touch-Based Unlock Events

Published:2022-09-19 Issue:MHCI Volume:6 Page:1-14
ISSN:2573-0142
Container-title:Proceedings of the ACM on Human-Computer Interaction
language:en
Short-container-title:Proc. ACM Hum.-Comput. Interact.

Author:

Schneegass Stefan¹,Saad Alia¹,Heger Roman¹,Delgado Rodriguez Sarah²,Poguntke Romina³,Alt Florian⁴

Affiliation:

1. University of Duisburg-Essen, Essen, Germany

2. University of the Bundeswehr, München, Germany

3. KUKA Deutschland GmbH, Augsburg, Germany

4. University of the Bundeswehr, Munich, Germany

Abstract

This paper contributes to our understanding of user-centered attacks on smartphones. In particular, we investigate the likelihood of so-called shoulder surfing attacks during touch-based unlock events and provide insights into users' views and perceptions. To do so, we ran a two-week in-the-wild study (N=12) in which we recorded images with a 180-degree field of view lens that was mounted on the smartphone's front-facing camera. In addition, we collected contextual information and allowed participants to assess the situation. We found that only a small fraction of shoulder surfing incidents that occur during authentication are actually perceived as threatening. Furthermore, our findings suggest that our notions of (un)safe places need to be rethought. Our work is complemented by a discussion of implications for future user-centered attack-aware systems. This work can serve as a basis for usable security researchers to better design systems against user-centered attacks.

Funder

Deutsche Forschungsgemeinschaft

Publisher

Association for Computing Machinery (ACM)

Subject

Computer Networks and Communications,Human-Computer Interaction,Social Sciences (miscellaneous)

Link

https://dl.acm.org/doi/pdf/10.1145/3546742

Reference29 articles.

1. Yasmeen Abdrabou , Radiah Rivu , Tarek Ammar , Jonathan Liebers , Alia Saad , Carina Liebers , Uwe Gruenefeld , Pascal Knierim , Mohamed Khamis , Ville Mäkelä , Stefan Schneegass , and Florian Alt . 2022 . Understanding Shoulder Surfer Behavior Using Virtual Reality. In 2022 IEEE Conference on Virtual Reality and 3D User Interfaces Abstracts and Workshops (VRW). 576--577 . https://doi.org/10.1109/VRW55335.2022.00139 10.1109/VRW55335.2022.00139 Yasmeen Abdrabou, Radiah Rivu, Tarek Ammar, Jonathan Liebers, Alia Saad, Carina Liebers, Uwe Gruenefeld, Pascal Knierim, Mohamed Khamis, Ville Mäkelä, Stefan Schneegass, and Florian Alt. 2022. Understanding Shoulder Surfer Behavior Using Virtual Reality. In 2022 IEEE Conference on Virtual Reality and 3D User Interfaces Abstracts and Workshops (VRW). 576--577. https://doi.org/10.1109/VRW55335.2022.00139

2. Understanding Shoulder Surfer Behavior and Attack Patterns Using Virtual Reality

3. Milad Taleby Ahvanooey , Qianmu Li , Mahdi Rabbani , and Ahmed Raza Rajput . 2020. A Survey on Smartphones Security: Software Vulnerabilities, Malware, and Attacks. CoRR abs/2001.09406 ( 2020 ). arXiv:2001.09406 https: //arxiv.org/abs/2001.09406 Milad Taleby Ahvanooey, Qianmu Li, Mahdi Rabbani, and Ahmed Raza Rajput. 2020. A Survey on Smartphones Security: Software Vulnerabilities, Malware, and Attacks. CoRR abs/2001.09406 (2020). arXiv:2001.09406 https: //arxiv.org/abs/2001.09406

4. PrivacyScout: Assessing Vulnerability to Shoulder Surfing on Mobile Devices;Bace Mihai;Proceedings on Privacy Enhancing Technologies,2022

5. VA Brennen. 2005. Cryptography Dictionary. VA Brennen. 2005. Cryptography Dictionary.

Cited by 6 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Social Engineering Shoulder Surfing Attacks (SSAs): A Literature Review. Lessons, Challenges, and Future Directions;Communications in Computer and Information Science;2024

2. Pattern unlocking guided multi‐modal continuous authentication for smartphone with multi‐branch context‐aware representation learning and auto encoder;Transactions on Emerging Telecommunications Technologies;2023-12

3. Better the Devil You Know: Using Lost-Smartphone Scenarios to Explore user Perceptions of Unauthorised Access;Proceedings of the 2023 European Symposium on Usable Security;2023-10-16

4. Shoulder Surfing on Mobile Authentication: Perception vis-a-vis Performance from the Attacker's Perspective;2023 IEEE International Conference on Intelligence and Security Informatics (ISI);2023-10-02

5. Two-way Robust Authentication Method to Prevent Shoulder Surfing Attack;2023 Second International Conference on Augmented Intelligence and Sustainable Systems (ICAISS);2023-08-23