UCL logo

UCL Discovery

UCL home » Library Services » Electronic resources » UCL Discovery

A study on usability and security features of the Android pattern lock screen

Andriotis, P; Oikonomou, G; Mylonas, A; Tryfonas, T; (2016) A study on usability and security features of the Android pattern lock screen. Information and Computer Security , 24 (1) pp. 53-72. 10.1108/ICS-01-2015-0001. Green open access

[img]
Preview
Text
Andriotis et al 2015 A study on usability and security features of the Android pattern lock screen AAM.pdf

Download (2MB) | Preview

Abstract

PURPOSE: The Android pattern lock screen (or graphical password) is a popular user authentication method that relies on the advantages provided by the visual representation of a password, which enhance its memorability. Graphical passwords are vulnerable to attacks (e.g. shoulder surfing); thus, the need for more complex passwords becomes apparent. This paper aims to focus on the features that constitute a usable and secure pattern and investigate the existence of heuristic and physical rules that possibly dictate the formation of a pattern. DESIGN/METHODOLOGY/APPROACH: The authors conducted a survey to study the users' understanding of the security and usability of the pattern lock screen. The authors developed an Android application that collects graphical passwords, by simulating user authentication in a mobile device. This avoids any potential bias that is introduced when the survey participants are not interacting with a mobile device while forming graphical passwords (e.g. in Web or hard-copy surveys). FINDINGS: The findings verify and enrich previous knowledge for graphical passwords, namely, that users mostly prefer usability than security. Using the survey results, the authors demonstrate how biased input impairs security by shrinking the available password space. RESEARCH LIMITATIONS/IMPLICATIONS: The sample's demographics may affect our findings. Therefore, future work can focus on the replication of our work in a sample with different demographics. ORIGINALITY/VALUE: The authors define metrics that measure the usability of a pattern (handedness, directionality and symmetry) and investigate their impact to its formation. The authors propose a security assessment scheme using features in a pattern (e.g. the existence of knight moves or overlapping nodes) to evaluate its security strengths.

Type: Article
Title: A study on usability and security features of the Android pattern lock screen
Open access status: An open access version is available from UCL Discovery
DOI: 10.1108/ICS-01-2015-0001
Publisher version: http://dx.doi.org/10.1108/ICS-01-2015-0001
Language: English
Additional information: Copyright © Emerald Group Publishing Limited.
Keywords: Vulnerability, Authentication, User, Pattern, Graphical password
UCL classification: UCL > Provost and Vice Provost Offices
UCL > Provost and Vice Provost Offices > UCL BEAMS
UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science
UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science
URI: http://discovery.ucl.ac.uk/id/eprint/1479403
Downloads since deposit
237Downloads
Download activity - last month
Download activity - last 12 months
Downloads by country - last 12 months

Archive Staff Only

View Item View Item