Hollow-Pass: A Dual-View Pattern Password Against Shoulder-Surfing Attacks

Jiyayi Tan; Dipti Kapoor Sarmah

doi:10.1007/978-3-031-34671-2_18

Hollow-Pass: A Dual-View Pattern Password Against Shoulder-Surfing Attacks

Jiyayi Tan
, Dipti Kapoor Sarmah^*

^*Corresponding author for this work

Semantics, Cybersecurity & Services

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

1 Citation (Scopus)

161 Downloads (Pure)

Abstract

This paper presents Hollow-Pass, a developed solution that strengthens the security of pattern passwords against shoulder-surfing attacks. It is a novel approach to graphical password (GP) schemes that utilize a dual-view technology known as the global precedence effect, which eliminates the need for external devices and makes the grid and pattern invisible to potential shoulder surfers. The usability of Hollow-Pass was evaluated through an online as well as an offline user test. We recruited 30 participants from varied backgrounds, ranging in age from 20 to 80 years, for the online user test. An offline small-scale sampling test was conducted among 19 undergraduates from the Universiteit of Twente. The developed solution successfully demonstrated its ability to effectively resist shoulder-surfing attacks for simple patterns at various viewing angles (front, left-front, and right-front) and different distances (1.0 m, 1.5 m, and 2.0 m).

Original language	English
Title of host publication	Cyber Security, Cryptology, and Machine Learning
Subtitle of host publication	7th International Symposium, CSCML 2023, Be'er Sheva, Israel, June 29–30, 2023, Proceedings
Editors	Shlomi Dolev, Ehud Gudes, Pascal Paillier
Publisher	Springer
Pages	251-272
Number of pages	22
Volume	13914
ISBN (Print)	9783031346705
DOIs	https://doi.org/10.1007/978-3-031-34671-2_18
Publication status	Published - 2023
Event	7th International Symposium on Cyber Security Cryptography and Machine Learning, CSCML 2023 - Be'er Sheva, Israel Duration: 29 Jun 2023 → 30 Jun 2023 Conference number: 7 https://www.cscml.org/

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	13914
ISSN (Print)	0302-9743

Conference

Conference	7th International Symposium on Cyber Security Cryptography and Machine Learning, CSCML 2023
Abbreviated title	CSCML 2023
Country/Territory	Israel
City	Be'er Sheva
Period	29/06/23 → 30/06/23
Internet address	https://www.cscml.org/

Keywords

Pattern password
Graphical password
Shoulder-surfing
Dual-View
Global precedence
2023 OA procedure

Access to Document

10.1007/978-3-031-34671-2_18

978-3-031-34671-2_18Final published version, 2.04 MBLicence: Taverne

Cite this

Tan, J., & Sarmah, D. K. (2023). Hollow-Pass: A Dual-View Pattern Password Against Shoulder-Surfing Attacks. In S. Dolev, E. Gudes, & P. Paillier (Eds.), Cyber Security, Cryptology, and Machine Learning: 7th International Symposium, CSCML 2023, Be'er Sheva, Israel, June 29–30, 2023, Proceedings (Vol. 13914, pp. 251-272). (Lecture Notes in Computer Science; Vol. 13914). Springer. https://doi.org/10.1007/978-3-031-34671-2_18

Tan, Jiyayi ; Sarmah, Dipti Kapoor. / Hollow-Pass: A Dual-View Pattern Password Against Shoulder-Surfing Attacks. Cyber Security, Cryptology, and Machine Learning: 7th International Symposium, CSCML 2023, Be'er Sheva, Israel, June 29–30, 2023, Proceedings. editor / Shlomi Dolev ; Ehud Gudes ; Pascal Paillier. Vol. 13914 Springer, 2023. pp. 251-272 (Lecture Notes in Computer Science).

@inproceedings{1498e1279ad14c32a3489a13a3b11f71,

title = "Hollow-Pass: A Dual-View Pattern Password Against Shoulder-Surfing Attacks",

abstract = "This paper presents Hollow-Pass, a developed solution that strengthens the security of pattern passwords against shoulder-surfing attacks. It is a novel approach to graphical password (GP) schemes that utilize a dual-view technology known as the global precedence effect, which eliminates the need for external devices and makes the grid and pattern invisible to potential shoulder surfers. The usability of Hollow-Pass was evaluated through an online as well as an offline user test. We recruited 30 participants from varied backgrounds, ranging in age from 20 to 80 years, for the online user test. An offline small-scale sampling test was conducted among 19 undergraduates from the Universiteit of Twente. The developed solution successfully demonstrated its ability to effectively resist shoulder-surfing attacks for simple patterns at various viewing angles (front, left-front, and right-front) and different distances (1.0 m, 1.5 m, and 2.0 m).",

keywords = "Pattern password, Graphical password, Shoulder-surfing, Dual-View, Global precedence, 2023 OA procedure",

author = "Jiyayi Tan and Sarmah, \{Dipti Kapoor\}",

year = "2023",

doi = "10.1007/978-3-031-34671-2\_18",

language = "English",

isbn = "9783031346705",

volume = "13914",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "251--272",

editor = "Shlomi Dolev and Ehud Gudes and Pascal Paillier",

booktitle = "Cyber Security, Cryptology, and Machine Learning",

address = "Germany",

note = "7th International Symposium on Cyber Security Cryptography and Machine Learning, CSCML 2023, CSCML 2023 ; Conference date: 29-06-2023 Through 30-06-2023",

url = "https://www.cscml.org/",

}

Tan, J & Sarmah, DK 2023, Hollow-Pass: A Dual-View Pattern Password Against Shoulder-Surfing Attacks. in S Dolev, E Gudes & P Paillier (eds), Cyber Security, Cryptology, and Machine Learning: 7th International Symposium, CSCML 2023, Be'er Sheva, Israel, June 29–30, 2023, Proceedings. vol. 13914, Lecture Notes in Computer Science, vol. 13914, Springer, pp. 251-272, 7th International Symposium on Cyber Security Cryptography and Machine Learning, CSCML 2023, Be'er Sheva, Israel, 29/06/23. https://doi.org/10.1007/978-3-031-34671-2_18

Hollow-Pass: A Dual-View Pattern Password Against Shoulder-Surfing Attacks. / Tan, Jiyayi; Sarmah, Dipti Kapoor.
Cyber Security, Cryptology, and Machine Learning: 7th International Symposium, CSCML 2023, Be'er Sheva, Israel, June 29–30, 2023, Proceedings. ed. / Shlomi Dolev; Ehud Gudes; Pascal Paillier. Vol. 13914 Springer, 2023. p. 251-272 (Lecture Notes in Computer Science; Vol. 13914).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Hollow-Pass: A Dual-View Pattern Password Against Shoulder-Surfing Attacks

AU - Tan, Jiyayi

AU - Sarmah, Dipti Kapoor

N1 - Conference code: 7

PY - 2023

Y1 - 2023

N2 - This paper presents Hollow-Pass, a developed solution that strengthens the security of pattern passwords against shoulder-surfing attacks. It is a novel approach to graphical password (GP) schemes that utilize a dual-view technology known as the global precedence effect, which eliminates the need for external devices and makes the grid and pattern invisible to potential shoulder surfers. The usability of Hollow-Pass was evaluated through an online as well as an offline user test. We recruited 30 participants from varied backgrounds, ranging in age from 20 to 80 years, for the online user test. An offline small-scale sampling test was conducted among 19 undergraduates from the Universiteit of Twente. The developed solution successfully demonstrated its ability to effectively resist shoulder-surfing attacks for simple patterns at various viewing angles (front, left-front, and right-front) and different distances (1.0 m, 1.5 m, and 2.0 m).

AB - This paper presents Hollow-Pass, a developed solution that strengthens the security of pattern passwords against shoulder-surfing attacks. It is a novel approach to graphical password (GP) schemes that utilize a dual-view technology known as the global precedence effect, which eliminates the need for external devices and makes the grid and pattern invisible to potential shoulder surfers. The usability of Hollow-Pass was evaluated through an online as well as an offline user test. We recruited 30 participants from varied backgrounds, ranging in age from 20 to 80 years, for the online user test. An offline small-scale sampling test was conducted among 19 undergraduates from the Universiteit of Twente. The developed solution successfully demonstrated its ability to effectively resist shoulder-surfing attacks for simple patterns at various viewing angles (front, left-front, and right-front) and different distances (1.0 m, 1.5 m, and 2.0 m).

KW - Pattern password

KW - Graphical password

KW - Shoulder-surfing

KW - Dual-View

KW - Global precedence

KW - 2023 OA procedure

U2 - 10.1007/978-3-031-34671-2_18

DO - 10.1007/978-3-031-34671-2_18

M3 - Conference contribution

SN - 9783031346705

VL - 13914

T3 - Lecture Notes in Computer Science

SP - 251

EP - 272

BT - Cyber Security, Cryptology, and Machine Learning

A2 - Dolev, Shlomi

A2 - Gudes, Ehud

A2 - Paillier, Pascal

PB - Springer

T2 - 7th International Symposium on Cyber Security Cryptography and Machine Learning, CSCML 2023

Y2 - 29 June 2023 through 30 June 2023

ER -

Tan J, Sarmah DK. Hollow-Pass: A Dual-View Pattern Password Against Shoulder-Surfing Attacks. In Dolev S, Gudes E, Paillier P, editors, Cyber Security, Cryptology, and Machine Learning: 7th International Symposium, CSCML 2023, Be'er Sheva, Israel, June 29–30, 2023, Proceedings. Vol. 13914. Springer. 2023. p. 251-272. (Lecture Notes in Computer Science). Epub 2023 Jun 21. doi: 10.1007/978-3-031-34671-2_18

Hollow-Pass: A Dual-View Pattern Password Against Shoulder-Surfing Attacks

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this