We propose a multimodal scheme, GazeTouchPass, that combines gaze and touch for
shoulder-surfing resistant user authentication on mobile devices. GazeTouchPass allows …

Although mobile devices provide access to a plethora of sensitive data, most users still only
protect them with PINs or patterns, which are vulnerable to side-channel attacks (eg …

In this paper, we present XSide, an authentication mechanism that uses the front and the
back of smartphones to enter stroke-based passwords. Users can switch sides during input …

As public displays continue to deliver increasingly private and personalized content, there is
a need to ensure that only the legitimate users can access private information in sensitive …

Shoulder-surfing is the act of spying on an authorized user of a computer system with the
malicious intent of gaining unauthorized access. Current solutions to address shoulder …

We present PathWord (PATH passWORD), a multimodal digit entry method for ad-hoc
authentication based on known digits shape and user relative eye movements. PathWord is …

Authentication based on passwords is used largely in applications for computer security and
privacy. However, human actions such as choosing bad passwords and inputting passwords …

Eye-gaze and mid-air gestures are promising for resisting various types of side-channel
attacks during authentication. However, to date, a comparison of the different authentication …

Given the nature of mobile devices and unlock procedures, unlock authentication is a prime
target for credential leaking via shoulder surfing, a form of an observation attack. While the …

Previous research has found graphical passwords to be more memorable than non-
dictionary or" strong" alphanumeric passwords. Participants in a prior study expressed …