A comparison of perceived and real shoulder-surfing risks between alphanumeric and graphical passwords

摘要: Previous research has found graphical passwords to be more memorable than non-dictionary or "strong" alphanumeric passwords. Participants in a prior study expressed concerns that this increase memorability could also lead an increased susceptibility of shoulder-surfing. This appears yet another example the classic trade-off between usability and security for authentication systems. paper explores whether passwords' necessarily leads risks To date, there are no studies examining vulnerability versus shoulder-surfing.This examines real perceived shoulder-surfing two configurations password, Passfaces™[30], compared dictionary A laboratory experiment with 20 participants asked them try shoulder surf Passfaces™ (mouse keyboard data entry) strong weak Data gathered included four system participants' perceptions concerning same vulnerability. An analysis these relative each success configurations. Further examined relationship determined were significant differences shoulder-surfing.Findings indicate configuring entry through is most effective deterrent setting consistent result. While believed mouse would vulnerable attacks, empirical results actually vulnerable.