2014/09/13 by Stefan Schneegaß, Frank Steimle, Andreas Bulling +2 · 3 citations
Computer Science · #User Authentication and Security Systems #Advanced Malware Detection Techniques #Biometric Identification and Security
paper · doi:10.1145/2632048.2636090
openalex publication_date 2014/09/13 · openalex created_date 2016/06/24 · openalex updated_date 2026/07/29
Touch-enabled user interfaces have become ubiquitous, such as on ATMs or portable devices. At the same time, authentication using touch input is problematic, since finger smudge traces may allow attackers to reconstruct passwords. We present SmudgeSafe, an authentication system that uses random geometric image transformations, such as translation, rotation, scaling, shearing, and flipping, to increase the security of cued-recall graphical passwords. We describe the design space of these transformations and report on two user studies: A lab-based security study involving 20 participants in attacking user-defined passwords, using high quality pictures of real smudge traces captured on a mobile phone display; and an in-the-field usability study with 374 participants who generated more than 130,000 logins on a mobile phone implementation of SmudgeSafe. Results show that SmudgeSafe significantly increases security compared to authentication schemes based on PINs and lock patterns, and exhibits very high learnability, efficiency, and memorability.