Selected Publications

This page shows selected publications from the last years. For a detailed list please refer to the Google Scholar or DBLP page of Stefan Schneegass.

An Investigation of Shoulder Surfing Attacks on Touch-Based Unlock Events

Type of Publication: Article in Journal

An Investigation of Shoulder Surfing Attacks on Touch-Based Unlock Events

Schneegass, Stefan; Saad, Alia; Heger, Roman; Delgado Rodriguez, Sarah; Poguntke, Romina; Alt, Florian
Title of Journal:
Proc. ACM Hum.-Comput. Interact.
Volume (Publication Date):
6 (2022)
New York, NY, USA
usable security and privacy, in-the-wild studies., shoulder surfing, user-centered attacks
Digital Object Identifier (DOI):
Download BibTeX


This paper contributes to our understanding of user-centered attacks on smartphones. In particular, we investigate the likelihood of so-called shoulder surfing attacks during touch-based unlock events and provide insights into users' views and perceptions. To do so, we ran a two-week in-the-wild study (N=12) in which we recorded images with a 180-degree field of view lens that was mounted on the smartphone's front-facing camera. In addition, we collected contextual information and allowed participants to assess the situation. We found that only a small fraction of shoulder surfing incidents that occur during authentication are actually perceived as threatening. Furthermore, our findings suggest that our notions of (un)safe places need to be rethought. Our work is complemented by a discussion of implications for future user-centered attack-aware systems. This work can serve as a basis for usable security researchers to better design systems against user-centered attacks.