.png){kind=icon}
返回
A Video-based Attack for Android Pattern Lock
.png){kind=icon}
OA
AI
DOI：10.1145/3230740.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Pattern lock is widely used for identification and authentication on Android devices. This article presents a novel video-based side channel attack that can reconstruct Android locking patterns from video footage filmed using a smartphone. As a departure from previous attacks on pattern lock, this new attack does not require the camera to capture any content displayed on the screen. Instead, it employs a computer vision algorithm to track the fingertip movement trajectory to infer the pattern. Using the geometry information extracted from the tracked fingertip motions, the method can accurately infer a small number of (often one) candidate patterns to be tested by an attacker. We conduct extensive experiments to evaluate our approach using 120 unique patterns collected from 215 independent users. Experimental results show that the proposed attack can reconstruct over 95% of the patterns in five attempts. We discovered that, in contrast to most people's belief, complex patterns do not offer stronger protection under our attacking scenarios. This is demonstrated by the fact that we are able to break all but one complex patterns (with a 97.5% success rate) as opposed to 60% of the simple patterns in the first attempt. We demonstrate that this video-side channel is a serious concern for not only graphical locking patterns but also PIN-based passwords, as algorithms and analysis developed from the attack can be easily adapted to target PIN-based passwords. As a countermeasure, we propose to change the way the Android locking pattern is constructed and used. We show that our proposal can successfully defeat this video-based attack. We hope the results of this article can encourage the community to revisit the design and practical use of Android pattern lock.
Keyword:
Pattern lock
fingertip movement
video-based attack
sensitive information
object tracking
authentication mechanism
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
A
IF:
2.8
论文数:
293
被引数:
770
机构
引用论文
分享收藏Simultaneous determination of cobalt and nickel in sea water by adsorptive cathodic stripping square-wave voltammetry.png)
The Analyst
The AnalystIF0
PREAI
分享收藏Real-World Outcome for Newly Diagnosed Patients with Functional High-Risk Myeloma - a Myeloma and Related Diseases Registry AnalysisBlood
OAAI
BloodIF0
OAAI分享收藏分享收藏
查看更多内容