Comparing Video Based Shoulder Surfing with Live Simulation

Simple item page
dc.contributor.authorAviv, Adam J.
dc.contributor.authorWolf, Flynn
dc.contributor.authorKuber, Ravi
dc.date.accessioned2020-10-13T17:51:18Z
dc.date.available2020-10-13T17:51:18Z
dc.date.issued2018-12
dc.descriptionACSAC ’18, December 3–7, 2018, San Juan, PR, USAen_US
dc.description.abstractWe analyze the claims that video recreations of shoulder surfing attacks offer a suitable alternative and a baseline, as compared to evaluation in a live setting. We recreated a subset of the factors of a prior video-simulation experiment conducted by Aviv et al. (ACSAC 2017), and model the same scenario using live participants (n = 36) instead (i.e., the victim and attacker were both present). The live experiment confirmed that for Android's graphical patterns video simulation is consistent with the live setting for attacker success rates. However, both 4- and 6-digit PINs demonstrate statistically significant differences in attacker performance, with live attackers performing as much 1.9x better than in the video simulation. The security benefits gained from removing feedback lines in Android's graphical patterns are also greatly diminished in the live setting, particularly under multiple attacker observations, but overall, the data suggests that video recreations can provide a suitable baseline measure for attacker success rate. However, we caution that researchers should consider that these baselines may greatly underestimate the threat of an attacker in live settings.en_US
dc.description.sponsorshipThis work was supported by the O$ce of Naval Research. The authors wish to thank Chukwuemeka KC Marume and John T. Davin for their assistance conducting the study.en_US
dc.description.urihttps://dl.acm.org/doi/10.1145/3274694.3274702en_US
dc.format.extent14 pagesen_US
dc.genreconference papers and proceedingsen_US
dc.identifierdoi:10.13016/m22zen-hbea
dc.identifier.citationAviv, Adam J.; Wolf, Flynn; Kuber, Ravi; Comparing Video Based Shoulder Surfing with Live Simulation; ACSAC '18: Proceedings of the 34th Annual Computer Security Applications Conference, December 2018, Pages 453–466; https://dl.acm.org/doi/10.1145/3274694.3274702en_US
dc.identifier.urihttps://doi.org/10.1145/3274694.3274702
dc.identifier.urihttp://hdl.handle.net/11603/19829
dc.language.isoen_USen_US
dc.publisherAssociation for Computing Machineryen_US
dc.relation.isAvailableAtThe University of Maryland, Baltimore County (UMBC)
dc.relation.ispartofUMBC Information Systems Department Collection
dc.relation.ispartofUMBC Student Collection
dc.relation.ispartofUMBC Faculty Collection
dc.rightsThis item is likely protected under Title 17 of the U.S. Copyright Law. Unless on a Creative Commons license, for uses protected by Copyright Law, contact the copyright holder or the author.
dc.rightsPublic Domain Mark 1.0*
dc.rightsThis work was written as part of one of the author's official duties as an Employee of the United States Government and is therefore a work of the United States Government. In accordance with 17 U.S.C. 105, no copyright protection is available for such works under U.S. Law.
dc.rights.urihttp://creativecommons.org/publicdomain/mark/1.0/*
dc.titleComparing Video Based Shoulder Surfing with Live Simulationen_US
dc.title.alternativeReplicating Video Based Shoulder Surfing for Mobile Unlock Authentication with Live Simulation
dc.typeTexten_US

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
3274694.3274702.pdf
Size:
2.28 MB
Format:
Adobe Portable Document Format
Description:
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
2.56 KB
Format:
Item-specific license agreed upon to submission
Description:
Download

Collections

UMBC Information Systems Department
UMBC Faculty Collection
UMBC Student Collection