Art der Publikation: Beitrag in Zeitschrift

An Investigation of Shoulder Surfing Attacks on Touch-Based Unlock Events

Autor(en):

Schneegass, Stefan; Saad, Alia; Heger, Roman; Delgado Rodriguez, Sarah; Poguntke, Romina; Alt, Florian

Titel der Zeitschrift:

Proc. ACM Hum.-Comput. Interact.

Jahrgang (Veröffentlichung):

6 (2022)

Ort(e):

New York, NY, USA

Schlagworte:

usable security and privacy, in-the-wild studies., shoulder surfing, user-centered attacks

Digital Object Identifier (DOI):

doi:10.1145/3546742

Zitation:

Download BibTeX

Kurzfassung

This paper contributes to our understanding of user-centered attacks on smartphones. In particular, we investigate the likelihood of so-called shoulder surfing attacks during touch-based unlock events and provide insights into users' views and perceptions. To do so, we ran a two-week in-the-wild study (N=12) in which we recorded images with a 180-degree field of view lens that was mounted on the smartphone's front-facing camera. In addition, we collected contextual information and allowed participants to assess the situation. We found that only a small fraction of shoulder surfing incidents that occur during authentication are actually perceived as threatening. Furthermore, our findings suggest that our notions of (un)safe places need to be rethought. Our work is complemented by a discussion of implications for future user-centered attack-aware systems. This work can serve as a basis for usable security researchers to better design systems against user-centered attacks.