For the past 20 years, researchers have investigated the use of eye tracking in security
applications. We present a holistic view on gaze-based security applications. In particular …

In search of the silver bullet to solve the password problem, the field of knowledge-based
authentication has become bloated with novel proposals aiming to replace textual …

There is a growing need for usable and secure authentication in immersive virtual reality
(VR). Established concepts (eg, 2D authentication schemes) are vulnerable to observation …

Evaluating novel authentication systems is often costly and time-consuming. In this work, we
assess the suitability of using Virtual Reality (VR) to evaluate the usability and security of …

Gaze is promising for hands-free interaction on mobile devices. However, it is not clear how
gaze interaction methods compare to each other in mobile settings. This paper presents the …

There is a growing need for usable and secure authentication in virtual reality (VR).
Established concepts (eg, 2D graphical PINs) are vulnerable to observation attacks, and …

Several decades of eye related research has shown how valuable eye gaze data are for
applications that are essential to human daily life. Eye gaze data in a broad sense has been …

Iterative design, implementation, and evaluation of prototype systems is a common
approach in Human-Computer Interaction (HCI) and Usable Privacy and Security (USEC); …

Shoulder surfing attacks (SSAs) are a type of observation attack designed to illicitly gather
sensitive data from" over the shoulder" of victims. This attack can be directed at mobile …

Given the difficulties of studying the shoulder surfing resistance of authentication systems in
a live setting, researchers often ask study participants to shoulder surf authentications by …