Just Gaze and Wave: Exploring the Use of Gaze and Gestures for Shoulder-surfing Resilient Authentication

Abdrabou, Y., Khamis, M. , Eisa, R. M., Ismail, S. and Elmougy, A. (2019) Just Gaze and Wave: Exploring the Use of Gaze and Gestures for Shoulder-surfing Resilient Authentication. In: 11th ACM Symposium on Eye Tracking Research and Applications, Denver, CO, USA, 25-28 June 2019, p. 29. ISBN 9781450367097 (doi:10.1145/3314111.3319837)

[img]
Preview
Text
181989.pdf - Accepted Version

2MB

Abstract

Eye-gaze and mid-air gestures are promising for resisting various types of side-channel attacks during authentication. However, to date, a comparison of the different authentication modalities is missing. We investigate multiple authentication mechanisms that leverage gestures, eye gaze, and a multimodal combination of them and study their resilience to shoulder surfing. To this end, we report on our implementation of three schemes and results from usability and security evaluations where we also experimented with fixed and randomized layouts. We found that the gaze-based approach outperforms the other schemes in terms of input time, error rate, perceived workload, and resistance to observation attacks, and that randomizing the layout does not improve observation resistance enough to warrant the reduced usability. Our work further underlines the significance of replicating previous eye tracking studies using today's sensors as we show significant improvement over similar previously introduced gaze-based authentication systems.

Item Type:Conference Proceedings
Status:Published
Refereed:Yes
Glasgow Author(s) Enlighten ID:Khamis, Dr Mohamed
Authors: Abdrabou, Y., Khamis, M., Eisa, R. M., Ismail, S., and Elmougy, A.
College/School:College of Science and Engineering > School of Computing Science
ISBN:9781450367097
Copyright Holders:Copyright © 2019 The Authors
Publisher Policy:Reproduced in accordance with the copyright policy of the publisher
Related URLs:

University Staff: Request a correction | Enlighten Editors: Update this record