Protecting the login session from camera based shoulder surfing attacks

...................................................................................................................................................... viii 1. Chapter 1 Problem Statement................................................................................................................1 2. Chapter 2 Background and Related Work.............................................................................................3 2.1 Traditional Passwords ..................................................................................................................3 2.2 Graphical Passwords ....................................................................................................................6 2.3 Graphical Password Examples .....................................................................................................9 2.3.1 Pure recall systems .................................................................................................................9 2.3.2 Cued recall systems...............................................................................................................13 2.3.3 Recognition based systems....................................................................................................18 2.3.4 Graphical Password Classifications.......................................................................................24 2.3.5 Biometrics .............................................................................................................................25 3. Chapter 3 Establishing the Security Context for Graphical Passwords...............................................27 3.1 Graphical Password Attack Vectors – Establishing the Shoulder Surfing Threat......................27 3.2 Defense Mechanisms – Shoulder Surfing ..................................................................................30 3.3 Goals for Login Mechanisms – Ideal vs. Practical .....................................................................37 3.4 Establishing Metrics – Quantifying the Shoulder Surfing Defense............................................39 4. Chapter 4 Initial Project ......................................................................................................................40 4.1 Design ........................................................................................................................................40 4.2 Implementation ..........................................................................................................................41 4.3 Results & Analysis .....................................................................................................................42 5. Chapter 5 Research Project .................................................................................................................44 5.1 Design and Incorporation of Contrast Inversion Approach........................................................44 5.1 Design Goals and Context..........................................................................................................47 6. Chapter 6 Experiment Methodology...................................................................................................49 6.1 Technology Study ......................................................................................................................50 6.1.1 Objective ...............................................................................................................................50 6.1.2 Format ...................................................................................................................................50 6.2 User Study..................................................................................................................................52 6.2.1 Objective ...............................................................................................................................52 6.2.2 Format ...................................................................................................................................52 7. Chapter 7 Results ................................................................................................................................53 7.1 Technology Study ......................................................................................................................53 7.1.1 Mobile Phone: Sony Ericsson Z525a ....................................................................................53 7.1.2 Mobile Phone: Sony Ericsson W580i....................................................................................55 7.1.3 Point and Shoot Camera: Canon A610..................................................................................56 7.1.4 ‘Prosumer’ Point and Shoot Camera: Kodak Z812IS............................................................58