Understanding Shoulder Surfer Behavior and Attack Patterns Using Virtual Reality

Abdrabou, Y. et al. (2022) Understanding Shoulder Surfer Behavior and Attack Patterns Using Virtual Reality. In: 2022 International Conference on Advanced Visual Interfaces (AVI 2022), Frascati, Rome, Italy, 6-10 Jun 2022, p. 15. ISBN 9781450397193 (doi: 10.1145/3531073.3531106)

Abstract

In this work, we explore attacker behavior during shoulder surfing. As such behavior is often opportunistic and difficult to observe in real world settings, we leverage the capabilities of virtual reality (VR). We recruited 24 participants and observed their behavior in two virtual waiting scenarios: at a bus stop and in an open office space. In both scenarios, participants shoulder surfed private screens displaying different types of content. From the results we derive an understanding of factors influencing shoulder surfing behavior, reveal common attack patterns, and sketch a behavioral shoulder surfing model. Our work suggests directions for future research on shoulder surfing and can serve as a basis for creating novel approaches to mitigate shoulder surfing.

• Item Type: Conference Proceedings
• Additional Information: This work was supported by the Royal Society of Edinburgh (RSE award no. 1931), the PETRAS National Centre of Excellence for IoT Systems Cybersecurity, which has been funded by the UK EPSRC under grant number EP/S035362/1, EPSRC New Investigator Award (EP/V008870/1), DFG grant no. 425869382, dtec.bw-Digitalization and Technology Research Center of the Bundeswehr (Voice of Wisdom), and the Studienstiftung des deutschen Volkes.
• Status: Published
• Refereed: Yes
• Glasgow Author(s) Enlighten ID: Khamis, Dr Mohamed
• Authors: Abdrabou, Y., Rivu, R., Ammar, T., Liebers, J., Saad, A., Liebers, C., Gruenefeld, U., Knierim, P., Khamis, M., Mäkelä, V., Schneegass, S., and Alt, F.
• College/School: College of Science and Engineering > School of Computing Science
• ISBN: 9781450397193
• Copyright Holders: Copyright © 2022 ACM
• First Published: First published in AVI 2022: Proceedings of the 2022 International Conference on Advanced Visual Interfaces, article no.: 15:1–9
• Publisher Policy: Reproduced in accordance with the publisher copyright policy

Related URLs

• Organisation

Project Code	Award No	Project Name	Principal Investigator	Funder's Name	Funder Ref	Lead Dept
315843		EyeSec: Eye Tracking in Security Applications	Mohamed Khamis	The Royal Society of Edinburgh (ROYSOCED)	1931	Computing Science
310627		TAPS: Assessing, Mitigating and Raising Awareness of the Security and Privacy Risks of Thermal Imaging	Mohamed Khamis	Engineering and Physical Sciences Research Council (EPSRC)	EP/V008870/1	Computing Science
313490		Preventing THErmal ATtacks using AI-driven Approaches	Mohamed Khamis	Engineering and Physical Sciences Research Council (EPSRC)	5676417 -PETRAS	Computing Science