Ausgewählte Publikationen

Hier finden Sie ausgewählte Publikationen aus den letzten Jahren. Eine ausführliche Liste der Publikationen finden Sie auf der Google Scholar oder DBLP Seite von Stefan Schneegaß.

An Investigation of Shoulder Surfing Attacks on Touch-Based Unlock Events

Art der Publikation: Beitrag in Zeitschrift

An Investigation of Shoulder Surfing Attacks on Touch-Based Unlock Events

Schneegass, Stefan; Saad, Alia; Heger, Roman; Delgado Rodriguez, Sarah; Poguntke, Romina; Alt, Florian
Titel der Zeitschrift:
Proc. ACM Hum.-Comput. Interact.
Jahrgang (Veröffentlichung):
6 (2022)
New York, NY, USA
usable security and privacy, in-the-wild studies., shoulder surfing, user-centered attacks
Digital Object Identifier (DOI):
Download BibTeX


This paper contributes to our understanding of user-centered attacks on smartphones. In particular, we investigate the likelihood of so-called shoulder surfing attacks during touch-based unlock events and provide insights into users' views and perceptions. To do so, we ran a two-week in-the-wild study (N=12) in which we recorded images with a 180-degree field of view lens that was mounted on the smartphone's front-facing camera. In addition, we collected contextual information and allowed participants to assess the situation. We found that only a small fraction of shoulder surfing incidents that occur during authentication are actually perceived as threatening. Furthermore, our findings suggest that our notions of (un)safe places need to be rethought. Our work is complemented by a discussion of implications for future user-centered attack-aware systems. This work can serve as a basis for usable security researchers to better design systems against user-centered attacks.