Hassan Khan

Evaluating Attack and Defense Strategies for Smartphone PIN Shoulder Surfing

We evaluate the efficacy of shoulder surfing defenses for PIN-based authentication systems. We find tilting the device away from the observer, a widely adopted defense strategy, provides limited protection. We also evaluate a recently proposed defense incorporating an "invisible pressure component" into PIN entry. Con…