Using fake cursors to secure on-screen password entry

Authors:
Alexander De Luca;Emanuel von Zezschwitz;Laurent Pichler;Heinrich Hussmann
Affiliations:
University of Munich, Munich, Bavaria, Germany;University of Munich, Munich, Bavaria, Germany;University of Munich, Munich, Bavaria, Germany;University of Munich, Munich, Bavaria, Germany
Venue:
Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Year:
2013

Citing 7
Cited 0

Spy-resistant keyboard: more secure password entry on public touch screen displays

OZCHI '05 Proceedings of the 17th Australia conference on Computer-Human Interaction: Citizens Online: Considerations for Today and the Future
Design and evaluation of a shoulder-surfing resistant graphical password scheme

Proceedings of the working conference on Advanced visual interfaces
Undercover: authentication usable in front of prying eyes

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Ninja cursors: using multiple cursors to assist target acquisition on large screens

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Vibrapass: secure authentication based on shared lies

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Secure mobile computing via public terminals

PERVASIVE'06 Proceedings of the 4th international conference on Pervasive Computing
CursorCamouflage: multiple dummy cursors as a defense against shoulder surfing

SIGGRAPH Asia 2012 Emerging Technologies

Quantified Score

Hi-index	0.01

Visualization

Abstract

In this paper, we present a concept using fake cursors to disguise on-screen password entry. We performed two user studies with different amounts of dummy cursors and differently colored cursors. The results show that dummy cursors significantly improve security. At the same time, decrease in performance is kept within an acceptable range. Depending on the required degree of security, the studies favor 8 or 16 differently colored cursors as the best trade-off between security and usability.