refs.bib

@phdthesis{kuhn2002compromising,
  title={Compromising emanations: eavesdropping risks of computer displays},
  author={Kuhn, Markus Guenther},
  year={2002},
  school={University of Cambridge},
}

@inproceedings{hossein2015fortifying,
  title={Fortifying Android Patterns using Persuasive Security Framework},
  author={Siadati, Hossein and others},
  booktitle={UBICOMM 2015},
  year={2015},
}


@inproceedings{ye2017cracking,
  title={Cracking Android pattern lock in five attempts},
  author={Ye, Guixin and Tang, Zhanyong and Fang, Dingyi and Chen, Xiaojiang and Kim, Kwang In and Taylor, Ben and Wang, Zheng},
  year={2017},
  booktitle={The Network and Distributed System Security Symposium (NDSS)},
}

@article{Yang:2002:EMT:605089.605095,
  title={Extraction of 2D Motion Trajectories and Its Application to Hand Gesture Recognition},
  author={Yang, Ming Hsuan and others},
  publisher={IEEE Computer Society},
  pages={1061-1074},
  year={2002},
}

@article{Stenger:2006:MHT:1159166.1159342,
  title={Model-based hand tracking using a hierarchical Bayesian filter},
  author={Stenger, B and others},
  journal={IEEE PAMI},
  volume={28},
  number={9},
  pages={1372-84},
  year={2006},
}

@book{Beh2014Rule,
  title={Rule-based trajectory segmentation for modeling hand motion trajectory},
  author={Beh, Jounghoon and others},
  publisher={Elsevier Science Inc.},
  pages={1586–1601},
  year={2014},
}

@inproceedings{xu2013seeing,
  title={Seeing Double: Reconstructing Obscured Typed Input from Multiple Compromising Reflections, Around the Corner},
  author={Xu, Yi and others},
  booktitle={ACM CCS},
  pages={1063-1074},
  year={2013},
}

@inproceedings{raguram2011ispy,
  title={iSpy:automatic reconstruction of typed input from compromising reflections},
  author={Raguram, Rahul and others},
  booktitle={ACM CCS},
  pages={527-536},
  year={2011},
}

@mastersthesis{alpnorway,
  author       = {Marte Dybevik L{\o}ge},
  title        = {Tell Me Who You Are and I Will Tell You Your Unlock Pattern},
  school       = {Norwegian University of Science and Technology},
  year         = 2015,
}

@inproceedings{backes2009tempest,
  title={Tempest in a Teapot: Compromising Reflections Revisited},
  author={Backes, Michael and others},
  booktitle={Security \& Privacy, IEEE Symposium on},
  pages={315-327},
  year={2009},
}

@article{morris1979password,
  title={Password security: A case history},
  author={Morris, Robert and others},
  journal={Communications of the ACM},
  volume={22},
  number={11},
  pages={594--597},
  year={1979},
  publisher={ACM}
}

@phdthesis{androidstudy,
  author       = {Dirk Van Bruggen},
  title        = {Studying the Impact of Security Awareness Efforts on User Behavior},
  school       = {University of Notre Dame},
  year         = 2014,
}


 @inproceedings{narayanan2005fast,
  title={Fast dictionary attacks on passwords using time-space tradeoff},
  author={Narayanan, Arvind and others},
  booktitle={ACM CCS},
  pages={364--372},
  year={2005},
  organization={ACM}
}
@inproceedings{uellenbeck2013quantifying,
  title={Quantifying the security of graphical passwords:the case of android unlock patterns},
  author={Uellenbeck, Sebastian and others},
  booktitle={ACM Sigsac Conference on Computer \& Communications Security},
  pages={161-172},
  year={2013},
}
@article{zheng1999analysis,
  title={Analysis of gray level corner detection},
  author={Zheng, Zhiqiang and others},
  journal={Pattern Recognition Letters},
  year={1999},
}
@book{tomasi1991detection,
  title={Detection and tracking of point features},
  author={Tomasi, Carlo and others},
  year={1991},
  publisher={School of Computer Science, Carnegie Mellon Univ. Pittsburgh}
}
@inproceedings{shi1994good,
  title={Good features to track},
  author={Shi, Jianbo and others},
  booktitle={CVPR '94},
}
@article{standing1970perception,
  title={Perception and memory for pictures: Single-trial learning of 2500 visual stimuli},
  author={Standing, Lionel and others},
  journal={Psychonomic Science},
  volume={19},
  number={2},
  pages={73-74},
  year={1970},
}
@inproceedings{shukla2014beware,
  title={Beware, Your Hands Reveal Your Secrets!},
  author={Shukla, Diksha and others},
  booktitle={ACM CCS},
  pages={904-917},
  year={2014},
}
@article{yue2014blind,
  title={Blind Recognition of Touched Keys: Attack and Countermeasures},
  author={Yue, Qinggang and others},
  journal={Computer Science},
  year={2014},
}

inproceedings{uellenbeck2013quantifying,
  title={Quantifying the security of graphical passwords: The case of android unlock patterns},
  author={Uellenbeck, Sebastian and others},
  booktitle={CCS '13},
}

@inproceedings{felt2011android,
  title={Android permissions demystified},
  author={Felt, Adrienne Porter and others},
  booktitle={CCS '11},
}

@article{Torralba:2002:DEI:628330.628820,
  title={Depth Estimation from Image Structure},
  author={Torralba, Antonio and others},
  journal={IEEE PAMI},
  volume={24},
  number={9},
  pages={1226-1238},
  year={2002},
}

@inproceedings{Von2015Easy,
  title={Easy to Draw, but Hard to Trace?: On the Observability of Grid-based (Un)lock Patterns},
  author={Von Zezschwitz, Emanuel and others},
  booktitle={ACM Conference on Human Factors in Computing Systems},
  pages={2339-2342},
  year={2015},
}

@article{asonov2004keyboard,
 author = {Zhuang, Li and others},
 title = {Keyboard Acoustic Emanations Revisited},
 journal = {ACM Trans. Inf. Syst. Secur.},
 year = {2009},
}


@article{zhuang2009keyboard,
  title={Keyboard acoustic emanations revisited},
  author={Zhuang, Li and others},
  journal={ACM TISSEC},
  year={2009},
}
@inproceedings{berger2006dictionary,
  title={Dictionary attacks using keyboard acoustic emanations},
  author={Berger, Yigael and others},
  booktitle={CCS '06},
}
@article{highland1986electromagnetic,
  title={Electromagnetic radiation revisited},
  author={Highland, Harold Joseph},
  journal={Computers \& Security},
  year={1986},
}
@article{van1985electromagnetic,
  title={Electromagnetic radiation from video display units: An eavesdropping risk?},
  author={Van Eck, Wim},
  journal={Computers \& Security},
  year={1985},
}
@inproceedings{kuhn2002optical,
  title={Optical time-domain eavesdropping risks of CRT displays},
  author={Kuhn, Markus G},
  booktitle={IEEE S \& P ' 02},
}
@inproceedings{kuhn2004electromagnetic,
  title={Electromagnetic eavesdropping risks of flat-panel displays},
  author={Kuhn, Markus G},
  booktitle={Privacy Enhancing Technologies},
  year={2004},
}
@inproceedings{song2001timing,
  title={Timing Analysis of Keystrokes and Timing Attacks on SSH.},
  author={Song, Dawn Xiaodong and others},
  booktitle={USENIX Security Symposium},
  year={2001}
}
@inproceedings{foo2010timing,
  title={Timing attacks on pin input devices},
  author={Foo Kune, Denis and others},
  booktitle={CCS '10},
}
@article{cai2011touchlogger,
  title={TouchLogger: Inferring Keystrokes on Touch Screen from Smartphone Motion.},
  author={Cai, Liang and others},
  journal={HotSec},
  year={2011}
}
@inproceedings{maggi2011fast,
  title={A fast eavesdropping attack against touchscreens},
  author={Maggi, Fabrizio and others},
  booktitle={IAS '11},
  year={2011},
}
@inproceedings{balzarotti2008clearshot,
  title={ClearShot: Eavesdropping on Keyboard Input from Video},
  author={Balzarotti, Davide and others},
  booktitle={Security \& Privacy, IEEE Symposium on},
  pages={170-183},
  year={2008},
}
@inproceedings{backes2008compromising,
  title={Compromising reflections-or-how to read LCD monitors around the corner},
  author={Backes, Michael and others},
  booktitle={IEEE S \& P},
}
@article{biddle2012graphical,
  title={Graphical passwords: Learning from the first twelve years},
  author={Biddle, Robert and others},
  journal={ACM Computing Surveys (CSUR)},
  year={2012},
}
@misc{blonder1996graphical,
  title={Graphical password},
  author={Blonder, Greg E},
  year={1996},
  month=sep # "~24",
  publisher={Google Patents},
  note={US Patent 5,559,961}
}
@inproceedings{brostoff2010evaluating,
  title={Evaluating the usability and security of a graphical one-time PIN system},
  author={Brostoff, Sacha and others},
  booktitle={24th BCS Interaction Specialist Group Conference},
  year={2010},
}
@article{tao2008pass,
  title={Pass-Go: A Proposal to Improve the Usability of Graphical Passwords.},
  author={Tao, Hai and others},
  journal={IJ Network Security},
  volume={7},
  number={2},
  pages={273--292},
  year={2008}
}
@article{kalal2012tracking,
  title={Tracking-Learning-Detection.},
  author={Kalal Z and others},
  journal={IEEE Transactions on Pattern Analysis \& Machine Intelligence},
  volume={34},
  number={7},
  pages={1409-22},
  year={2011},
}
@inproceedings{tari2006comparison,
  title={A comparison of perceived and real shoulder-surfing risks between alphanumeric and graphical passwords},
  author={Tari, Furkan and others},
  booktitle={The second symposium on Usable privacy and security},
  year={2006},
}
@inproceedings{hoanca2005screen,
  title={Screen oriented technique for reducing the incidence of shoulder surfing.},
  author={Hoanca, Bogdan and others},
  booktitle={Security and Management},
  pages={334--340},
  year={2005}
}
@misc{shin2010device,
  title={Device and method for inputting password using random keypad},
  author={Shin, Hwa-Shik},
  year={2010},
  month=apr # "~13",
  publisher={Google Patents},
  note={US Patent 7,698,563}
}
@article{kim2012keypad,
  title={Keypad against brute force attacks on smartphones},
  author={Kim, Inna},
  journal={Information Security, IET},
  volume={6},
  number={2},
  pages={71--76},
  year={2012},
  publisher={IET}
}
@inproceedings{shahzad2013secure,
  title={Secure unlocking of mobile touch screen devices by simple gestures: you can see it but you can not do it},
  author={Shahzad, Muhammad and others},
  booktitle={ACM MobiCom'13},
  year={2013},
}
@inproceedings{serwadda2013kids,
  title={When kids' toys breach mobile phone security},
  author={Serwadda, Abdul and others},
  booktitle={ACM Sigsac Conference on Computer \& Communications Security},
  pages={599-610},
  year={2013},
}
@article{trewin2004abstract,
  title={Abstract representations as a basis for usable user interfaces},
  author={Trewin, Shari and others},
  journal={Interacting with Computers},
  volume={16},
  number={3},
  pages={477--506},
  year={2004},
  publisher={Oxford University Press}
}
@article{wright2012symantec,
  title={The symantec smartphone honey stick project},
  author={Wright, Scott},
  journal={Symantec Corporation, Mar},
  year={2012}
}
@misc{TLD-toolbox-web,
  author={Zdenek Kalal},
  title={{TLD}: Tracking-Learning-Detection},
  howpublished={Available: \url{http://kahlan.eps.surrey.ac.uk/featurespace/tld/}}
}

@article{hastie1996discriminant,
  title={Discriminant Adaptive Nearest Neighbor Classification},
  author={Hastie, Trevor and others},
  journal={IEEE PAMI},
  volume={18},
  number={6},
  pages={607-616},
  year={2002},
}

@inproceedings{zhang2015kaleido,
  title={Kaleido: You Can Watch It But Cannot Record It},
  author={Zhang, Lan and others},
  booktitle={ACM MobiCom},
  pages={372-385},
  year={2015},
}

@inproceedings{aviv2010smudge,
  title={Smudge attacks on smartphone touch screens},
  author={Aviv, Adam J. and others},
  booktitle={USENIX conference on Offensive technologies},
  pages={1-7},
  year={2010},
}
@article{zhang2016privacy,
  title={Privacy Leakage in Mobile Sensing: Your Unlock Passwords Can Be Leaked through Wireless Hotspot Functionality},
  author={Zhang, Jie and others},
  journal={Mobile Information Systems},
  volume={2016},
  number={2},
  pages={1-14},
  year={2016},
}
@inproceedings{werner2011indoor,
  title={Indoor positioning using smartphone camera.},
  author={Werner, Martin and others},
  booktitle={IPIN},
  pages={1--6},
  year={2011}
}

@proceedings{DBLP:conf/soups/2014,
  editor    = {Lorrie Faith Cranor and others},
   title     = {It's a Hard Lock Life: {A} Field Study of Smartphone (Un)Locking Behavior
               and Risk Perception},
  booktitle     = {{USENIX SOUPS 2014}},
}

@inproceedings{Harbach2014It,
  title={It's a Hard Lock Life: A Field Study of Smartphone (Un)Locking Behavior and Risk Perception},
  author={Harbach, Marian and others},
  booktitle={Symposium on Usable Privacy and Security},
  year={2014},
}


@article{shin2009dictionary,
  title={Dictionary attack on functional transform-based cancelable fingerprint templates},
  author={Shin, Sang Wook and others},
  journal={ETRI journal},
  year={2009},
}
@inproceedings{egelman2014you,
  title={Are You Ready to Lock?},
  author={Egelman, Serge and Jain, Sakshi and Portnoff, Rebecca S and Liao, Kerwell and Consolvo, Sunny and Wagner, David},
  booktitle={ACM Sigsac Conference on Computer and Communications Security},
  pages={750-761},
  year={2014},
}

@article{DeAngeli:2005:PRW:1090412.1090419,
  title={Is a picture really worth a thousand words? Exploring the feasibility of graphical authentication systems},
  author={De Angeli, Antonella and others},
  journal={International Journal of Human-Computer Studies},
  volume={63},
  number={1–2},
  pages={128-152},
  year={2005},
}

@article{shoulder,
 author = {Rogers, J},
 journal = { Financial Services Technology},
 title = {Please enter your four-digit pin},
 year = {2007},
}
@article{ballard2007forgery,
  title={Forgery Quality and Its Implications for Behavioral Biometric Security},
  author={Ballard, Lucas and others},
  journal={IEEE Transactions on Systems Man \& Cybernetics Part B Cybernetics A Publication of the IEEE Systems Man \& Cybernetics Society},
  volume={37},
  number={5},
  pages={1107-1118},
  year={2007},
}
@inproceedings{de2012touch,
  title={Touch me once and i know it's you!: implicit authentication based on touch screen patterns},
  author={Luca, Alexander De and others},
  booktitle={Sigchi Conference on Human Factors in Computing Systems},
  pages={987-996},
  year={2012},
}
@inproceedings{de2009vibrapass,
  title={Vibrapass: secure authentication based on shared lies},
  author={De Luca, Alexander and others},
  booktitle={CHI '09},
}
@article{stefan2012robustness,
  title={Robustness of keystroke-dynamics based biometrics against synthetic forgeries},
  author={Stefan, Deian and others},
  journal={Computers \& Security},
  volume={31},
  number={1},
  pages={109-121},
  year={2012},
  }
@incollection{mannan2007using,
  title={Using a personal device to strengthen password authentication from an untrusted computer},
  author={Mannan, Mohammad and others},
  booktitle={Financial Cryptography and Data Security},
  pages={88--103},
  year={2007},
  publisher={Springer}
}
@inproceedings{lingsecure,
  title={Secure fingertip mouse for mobile devices},
  author={Ling, Zhen and others},
  booktitle={IEEE INFOCOM 2016},
  pages={1-9},
  year={2016},
}
@article{sun2014dissecting,
  title={Dissecting pattern unlock: The effect of pattern strength meter on pattern selection},
  author={Sun, Chen and others},
  journal={Journal of Information Security \& Applications},
  volume={19},
  number={4–5},
  pages={308-320},
  year={2014},
}
@article{grompone2010lsd,
  title={LSD: a fast line segment detector with a false detection control},
  author={Grompone, von Gioi R and others},
  journal={IEEE PAMI},
  volume={32},
  number={4},
  pages={722-32},
  year={2010},
}
@article{Kutner2004Applied,
  title={Applied Linear Regression Models (5th Ed.)},
  author={Kutner, Michael H. and others},
  journal={Technometrics},
  volume={26},
  number={4},
  year={2004},
}
@inproceedings{sanchez2001iris,
  title={Iris recognition with low template size},
  author={Sanchez-Reillo, Raul and others},
  booktitle={International Conference on Audio-and Video-Based Biometric Person Authentication},
  pages={324--329},
  year={2001},
  organization={Springer}
}
@inproceedings{turk1991face,
  title={Face recognition using eigenfaces},
  author={Turk, Matthew A and others},
  booktitle={IEEE CVPR'91},
  pages={586--591},
  year={1991},
  organization={IEEE}
}
@inproceedings{Weiss2008PassShapes,
  title={PassShapes: utilizing stroke based authentication to increase password memorability},
  author={Weiss, Roman and others},
  booktitle={Nordic Conference on Human-Computer Interaction: Building Bridges},
  pages={383-392},
  year={2008},
}
@inproceedings{Mazurek2013Measuring,
  title={Measuring Password Guessability for an Entire University},
  author={Mazurek, Michelle L. and others},
  booktitle={Proceedings of the 2013 ACM SIGSAC conference on Computer \& communications security},
  pages={173--186},
  year={2013},
  organization={ACM}
}
@misc{Nick_pin_analysis,
  author={Nick Berry},
  title={PIN analysis},
  howpublished={Available: \url{http://www.datagenetics.com/blog/september32012/index.html}},
  year={2012}
}
@inproceedings{Aviv2015Is,
  title={Is Bigger Better? Comparing User-Generated Passwords on 3x3 vs. 4x4 Grid Sizes for Android's Pattern Unlock},
  author={Aviv, Adam J. and Budzitowski, Devon and Kuber, Ravi},
  booktitle={Computer Security Applications Conference},
  pages={301-310},
  year={2015},
}
@inproceedings{Aviv2016Anlyzing,
  title={Analyzing the impact of collection methods and demographics for android’s pattern unlock},
  author={Aviv A J and others},
  booktitle={Workshop on Usable Security (USEC)},
  year={2016},
  organization={Internet Society}
}
@inproceedings{Heidt2016Refining,
  title={Refining Graphical Password Strength Meters for Android Phones},
  author={Heidt S, Aviv A J},
  booktitle={USENIX Twelfth Symposium on Usable Privacy and Security (SOUPS)},
  year={2016}
}
@book{Andriotis2014Complexity,
  title={Complexity Metrics and User Strength Perceptions of the Pattern-Lock Graphical Authentication Method},
  author={Andriotis, Panagiotis and others},
  pages={115-126},
  year={2014},
}
@inproceedings{Song2015On,
  title={On the Effectiveness of Pattern Lock Strength Meters:Measuring the Strength of Real World Pattern Locks},
  author={Song, Youngbae and others},
  booktitle={ACM Conference on Human Factors in Computing Systems},
  pages={2343-2352},
  year={2015},
}
@inproceedings{Abdullah2008Towards,
  title={Towards Identifying Usability and Security Features of Graphical Password in Knowledge Based Authentication Technique},
  author={Abdullah, Muhammad Daniel Hafiz and others},
  booktitle={Second Asia International Conference on Modelling \& Simulation},
  pages={396-403},
  year={2008},
}

@inproceedings{Aviv2014Understanding,
  title={Understanding visual perceptions of usability and security of Android's graphical password pattern},
  author={Aviv A J and others},
  booktitle={Computer Security Applications Conference},
  pages={286-295},
  year={2014},
}
@inproceedings{abdelrahman2017stay,
  title={Stay cool! understanding thermal attacks on mobile-based user authentication},
  author={Abdelrahman, Yomna and others},
  booktitle={CHI'17},
  pages={3751--3763},
  year={2017},
  organization={ACM}
}
@inproceedings{Kelley:2012:GAM:2310656.2310715,
 author = {Kelley, Patrick G. and others},
 title = {Guess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms},
 booktitle = {IEEE Security \& Privacy},
 year = {2012},
 isbn = {978-0-7695-4681-0},
 pages = {523--537},
}
@inproceedings{Bonneau:2012:SGA:2310656.2310721,
 author = {Bonneau, Joseph},
 title = {The Science of Guessing: Analyzing an Anonymized Corpus of 70 Million Passwords},
 booktitle = {IEEE Security \& Privacy},
 series = {SP '12},
 year = {2012},
 isbn = {978-0-7695-4681-0},
 pages = {538--552},
}