RepliCueAuth: Validating the Use of a lab-based Virtual Reality Setup for Evaluating Authentication Systems

Mathis, F., Vaniea, K. and Khamis, M. (2021) RepliCueAuth: Validating the Use of a lab-based Virtual Reality Setup for Evaluating Authentication Systems. In: 2021 ACM Conference on Human Factors in Computing Systems (CHI 2021), 8-13 May 2021, p. 534. ISBN 9781450380966 (doi: 10.1145/3411764.3445478)

[img] Text
234315.pdf - Accepted Version

3MB

Abstract

Evaluating novel authentication systems is often costly and time-consuming. In this work, we assess the suitability of using Virtual Reality (VR) to evaluate the usability and security of real-world authentication systems. To this end, we conducted a replication study and built a virtual replica of CueAuth [52], a recently introduced authentication scheme, and report on results from: (1) a lab-based in-VR usability study (N=20) evaluating user performance; (2) an online security study (N=22) evaluating system’s observation resistance through virtual avatars; and (3) a comparison between our results and those previously reported in the real-world evaluation. Our analysis indicates that VR can serve as a suitable test-bed for human-centred evaluations of real-world authentication schemes, but the used VR technology can have an impact on the evaluation. Our work is a first step towards augmenting the design and evaluation spectrum of authentication systems and offers ground work for more research to follow.

Item Type:Conference Proceedings
Status:Published
Refereed:Yes
Glasgow Author(s) Enlighten ID:Mathis, Mr Florian and Khamis, Dr Mohamed
Authors: Mathis, F., Vaniea, K., and Khamis, M.
College/School:College of Science and Engineering > School of Computing Science
ISBN:9781450380966
Copyright Holders:Copyright © 2021 The Authors
First Published:First published in 2021 ACM Conference on Human Factors in Computing Systems (CHI 2021): 534
Publisher Policy:Reproduced in accordance with the publisher copyright policy
Related URLs:

University Staff: Request a correction | Enlighten Editors: Update this record

Project CodeAward NoProject NamePrincipal InvestigatorFunder's NameFunder RefLead Dept
310627TAPS: Assessing, Mitigating and Raising Awareness of the Security and Privacy Risks of Thermal ImagingMohamed KhamisEngineering and Physical Sciences Research Council (EPSRC)EP/V008870/1Computing Science