A Shoulder-Surfing Resistant Scheme Embedded in Traditional Passwords

Simple item page
dc.contributor.authorLai, Jianwei
dc.contributor.authorArko, Ernest
dc.date.accessioned2020-12-24T20:29:30Z
dc.date.available2020-12-24T20:29:30Z
dc.date.issued2021-01-05
dc.description.abstractTyping passwords is vulnerable to shoulder-surfing attacks. We proposed a shoulder-surfing resistant scheme embedded in traditional textual passwords in this study. With the proposed scheme, when the password field is on focus, a pattern appears in it as a hint to tell the user how to enter a password. Following the hint, the user needs to skip some characters while typing the password. The characters to be skipped are randomly selected so that an observer will not be able to see the whole password even if the authentication procedure was recorded. We evaluated the proposed scheme in a usability study. Compared to traditional passwords, our scheme achieved a similar level of accuracy while only required marginal additional time to authenticate users. Participants also expressed significantly higher acceptance of the new technique for security-sensitive applications and gave it significantly higher ratings in perceived security, shoulders-surfing resistance, camera-recording resistance, and guess-attack resistance.
dc.format.extent9 pages
dc.identifier.doi10.24251/HICSS.2021.860
dc.identifier.isbn978-0-9981331-4-0
dc.identifier.urihttp://hdl.handle.net/10125/71481
dc.language.isoEnglish
dc.relation.ispartofProceedings of the 54th Hawaii International Conference on System Sciences
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subjectSecurity and Privacy Aspects of Human-Computer-Interactions
dc.subjectshoulder-surfing resistant
dc.subjectpassword
dc.subjectmobile phone
dc.subjectpartial password
dc.titleA Shoulder-Surfing Resistant Scheme Embedded in Traditional Passwords
prism.startingpage7144

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
0698.pdf
Size:
713.58 KB
Format:
Adobe Portable Document Format
Download

Collections

Security and Privacy Aspects of Human-Computer-Interactions