@inproceedings{34bf1888964644dd81a40b1c2ab31b15,
title = "TMGuard: A touch movement-based security mechanism for screen unlock patterns on smartphones",
abstract = "Secure user authentication is a big challenge for smartphone security. To overcome the drawbacks of knowledge-based method, various graphical passwords have been proposed to enhance user authentication on smartphones. Android unlock patterns are one of the Android OS features aiming to authenticate users based on graphical patterns. However, recent studies have shown that attackers can easily compromise this unlock mechanism (i.e., by means of smudge attacks). We advocate that some additional mechanisms should be added to improve the security of unlock patterns. In this paper, we first show that users would perform a touch movement differently when interacting with the touchscreen and that users would perform somewhat stably for the same pattern after several trials. We then develop a touch movement-based security mechanism, called TMGuard, to enhance the authentication security of Android unlock patterns by verifying users{\textquoteright} touch movement during pattern input. In the evaluation, our user study with 75 participants demonstrate that TMGuard can positively improve the security of Android unlock patterns without compromising its usability.",
keywords = "Android unlock patterns, Behavioral biometric, Mobile security, Touch gestures, Usability, User authentication",
author = "Weizhi Meng and Wenjuan Li and Wong, {Duncan S.} and Jianying Zhou",
note = "Publisher Copyright: {\textcopyright} Springer International Publishing Switzerland 2016.; 14th International Conference on Applied Cryptography and Network Security, ACNS 2016 ; Conference date: 19-06-2016 Through 22-06-2016",
year = "2016",
doi = "10.1007/978-3-319-39555-5_34",
language = "English",
isbn = "9783319395548",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "629--647",
editor = "Mark Manulis and Steve Schneider and Ahmad-Reza Sadeghi",
booktitle = "Applied Cryptography and Network Security - 14th International Conference, ACNS 2016, Proceedings",
address = "Germany",
}