In this work we present Picasso: a lightweight device class fingerprinting protocol that allows
a server to verify the software and hardware stack of a mobile or desktop client. As an …

This paper shows that the location of screen taps on modern smartphones and tablets can
be identified from accelerometer and gyroscope readings. Our findings have serious …

Passwords remain the primary way to authenticate users online. Yet little is known about the
characteristics of login requests submitted to login systems due to the sensitivity of …

We present a new Personal Identification Number (PIN) entry method for smartphones that
can be used in security-critical applications, such as smartphone banking. The proposed …

As mobile begins to overtake the fixed Internet access, ad networks have aggressively
sought methods to track users on their mobile devices. While existing countermeasures and …

Touch-enabled user interfaces have become ubiquitous, such as on ATMs or portable
devices. At the same time, authentication using touch input is problematic, since finger …

The continued growth of the cyber-physical system (CPS) and Internet of Things
technologies raises device security and monitoring concerns. For device identification …

Password-based authentication is the dominant form of access control in web services.
Unfortunately, it proves to be more and more inadequate every year. Even if users choose …

User authentication systems are at an impasse. The most ubiquitous method--the password--
has numerous problems, including susceptibility to unintentional exposure via phishing and …

This work enhances traditional authentication systems based on Personal Identification
Numbers (PIN) and One-Time Passwords (OTP) through the incorporation of biometric …