TY - GEN
T1 - On the effectiveness of pattern lock strength meters- Measuring the strength of real world pattern locks
AU - Song, Youngbae
AU - Cho, Geumhwan
AU - Oh, Seongyeol
AU - Kim, Hyoungshick
AU - Huh, Jun Ho
N1 - Publisher Copyright:
© Copyright 2015 ACM.
PY - 2015/4/18
Y1 - 2015/4/18
N2 - We propose an effective pattern lock strength meter to help users choose stronger pattern locks on Android devices. To evaluate the effectiveness of the proposed meter with a real world dataset (i.e., with complete ecological validity), we created an Android application called EnCloud that allows users to encrypt their Dropbox files. 101 pattern locks generated by real EnCloud users were collected and analyzed, where some portion of the users were provided with the meter support. Our statistical analysis indicates that about 10% of the pattern locks that were generated without the meter support could be compromised through just 16 guessing attempts. As for the pattern locks that were generated with the meter support, that number goes up to 48 guessing attempts, showing significant improvement in security. Our recommendation is to implement a strength meter in the next version of Android.
AB - We propose an effective pattern lock strength meter to help users choose stronger pattern locks on Android devices. To evaluate the effectiveness of the proposed meter with a real world dataset (i.e., with complete ecological validity), we created an Android application called EnCloud that allows users to encrypt their Dropbox files. 101 pattern locks generated by real EnCloud users were collected and analyzed, where some portion of the users were provided with the meter support. Our statistical analysis indicates that about 10% of the pattern locks that were generated without the meter support could be compromised through just 16 guessing attempts. As for the pattern locks that were generated with the meter support, that number goes up to 48 guessing attempts, showing significant improvement in security. Our recommendation is to implement a strength meter in the next version of Android.
KW - Password
KW - Password strength meter
KW - Pattern lock
KW - Security
UR - https://www.scopus.com/pages/publications/84951079981
U2 - 10.1145/2702123.2702365
DO - 10.1145/2702123.2702365
M3 - Conference contribution
AN - SCOPUS:84951079981
T3 - Conference on Human Factors in Computing Systems - Proceedings
SP - 2343
EP - 2352
BT - CHI 2015 - Proceedings of the 33rd Annual CHI Conference on Human Factors in Computing Systems
PB - Association for Computing Machinery
T2 - 33rd Annual CHI Conference on Human Factors in Computing Systems, CHI 2015
Y2 - 18 April 2015 through 23 April 2015
ER -