{"id":"https://openalex.org/W3015019937","doi":"https://doi.org/10.1109/sp40000.2020.00100","title":"This PIN Can Be Easily Guessed: Analyzing the Security of Smartphone Unlock PINs","display_name":"This PIN Can Be Easily Guessed: Analyzing the Security of Smartphone Unlock PINs","publication_year":2020,"publication_date":"2020-05-01","ids":{"openalex":"https://openalex.org/W3015019937","doi":"https://doi.org/10.1109/sp40000.2020.00100","mag":"3015019937"},"language":"en","primary_location":{"id":"doi:10.1109/sp40000.2020.00100","doi":"https://doi.org/10.1109/sp40000.2020.00100","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp40000.2020.00100","pdf_url":null,"source":{"id":"https://openalex.org/S4210233669","display_name":"IEEE Symposium on Security and Privacy (S&P)","issn_l":"1081-6011","issn":["1081-6011","2375-1207"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2003.04868","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065482265","display_name":"Philipp Markert","orcid":"https://orcid.org/0000-0002-9232-4496","observed_orcids":["https://orcid.org/0000-0002-9232-4496"]},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Philipp Markert","raw_affiliation_strings":["Ruhr University Bochum","Ruhr-Univ. Bochum"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr University Bochum","institution_ids":["https://openalex.org/I904495901"]},{"raw_affiliation_string":"Ruhr-Univ. Bochum","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024197927","display_name":"Daniel V. Bailey","orcid":"https://orcid.org/0009-0002-4749-6448","observed_orcids":["https://orcid.org/0009-0002-4749-6448"]},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Daniel V. Bailey","raw_affiliation_strings":["Ruhr University Bochum","Ruhr-Univ. Bochum"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr University Bochum","institution_ids":["https://openalex.org/I904495901"]},{"raw_affiliation_string":"Ruhr-Univ. Bochum","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069307193","display_name":"Maximilian Golla","orcid":"https://orcid.org/0000-0003-2204-2132","observed_orcids":["https://orcid.org/0000-0003-2204-2132"]},"institutions":[{"id":"https://openalex.org/I149899117","display_name":"Max Planck Society","ror":"https://ror.org/01hhn8329","country_code":"DE","type":"nonprofit","lineage":["https://openalex.org/I149899117"]},{"id":"https://openalex.org/I4210096592","display_name":"Max Planck Institute for Security and Privacy","ror":"https://ror.org/00bj0r217","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210096592"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Maximilian Golla","raw_affiliation_strings":["Max Planck Institute for Security and Privacy","Max-Planck-Society"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Security and Privacy","institution_ids":["https://openalex.org/I4210096592"]},{"raw_affiliation_string":"Max-Planck-Society","institution_ids":["https://openalex.org/I149899117"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110236021","display_name":"Markus D\u00fcrmuth","orcid":"https://orcid.org/0000-0001-5048-3723","observed_orcids":["https://orcid.org/0000-0001-5048-3723"]},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Markus Durmuth","raw_affiliation_strings":["Ruhr University Bochum","Ruhr-Univ. Bochum"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr University Bochum","institution_ids":["https://openalex.org/I904495901"]},{"raw_affiliation_string":"Ruhr-Univ. Bochum","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5009788320","display_name":"Adam J. Aviv","orcid":"https://orcid.org/0000-0002-3792-2485","observed_orcids":["https://orcid.org/0000-0002-3792-2485"]},"institutions":[{"id":"https://openalex.org/I193531525","display_name":"George Washington University","ror":"https://ror.org/00y4zzh67","country_code":"US","type":"education","lineage":["https://openalex.org/I193531525"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Adam J. Aviv","raw_affiliation_strings":["The George Washington University","(George Washington University)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The George Washington University","institution_ids":["https://openalex.org/I193531525"]},{"raw_affiliation_string":"(George Washington University)","institution_ids":["https://openalex.org/I193531525"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.4301,"has_fulltext":true,"cited_by_count":51,"citation_normalized_percentile":{"value":0.96862138,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"286","last_page":"303"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/pin-security","display_name":"PIN security","score":0.7940000295639038},{"id":"https://openalex.org/keywords/smartphone-unlocking","display_name":"smartphone unlocking","score":0.7749999761581421},{"id":"https://openalex.org/keywords/ios","display_name":"iOS","score":0.6370000243186951},{"id":"https://openalex.org/keywords/user-frustration","display_name":"user frustration","score":0.6299999952316284}],"concepts":[{"id":"https://openalex.org/C2781345505","wikidata":"https://www.wikidata.org/wiki/Q2535979","display_name":"Blacklist","level":2,"score":0.825763463973999},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5814012885093689},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5704087018966675},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.5191987752914429},{"id":"https://openalex.org/C94957134","wikidata":"https://www.wikidata.org/wiki/Q82990","display_name":"Numerical digit","level":2,"score":0.47693437337875366},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.44668564200401306},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.2505623698234558},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.24430790543556213},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2001931071281433},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/sp40000.2020.00100","doi":"https://doi.org/10.1109/sp40000.2020.00100","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp40000.2020.00100","pdf_url":null,"source":{"id":"https://openalex.org/S4210233669","display_name":"IEEE Symposium on Security and Privacy (S&P)","issn_l":"1081-6011","issn":["1081-6011","2375-1207"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2003.04868","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2003.04868","pdf_url":"https://arxiv.org/pdf/2003.04868","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2003.04868","doi":"https://doi.org/10.48550/arxiv.2003.04868","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2003.04868","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2003.04868","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2003.04868","pdf_url":"https://arxiv.org/pdf/2003.04868","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G18682879","display_name":"EXC 2092: CyberSicherheit im Zeitalter gro\u00dfskaliger Angreifer (CASA)","funder_award_id":"390781972","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"},{"id":"https://openalex.org/G4038457429","display_name":"CAREER: Enhancing Mobile Authentication by Measuring the Authentication Life-Cycle","funder_award_id":"1845300","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"},{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3015019937.pdf","grobid_xml":"https://content.openalex.org/works/W3015019937.grobid-xml"},"referenced_works_count":39,"referenced_works":["https://openalex.org/W81679603","https://openalex.org/W170161968","https://openalex.org/W1463944966","https://openalex.org/W1466389411","https://openalex.org/W1526940914","https://openalex.org/W1550000763","https://openalex.org/W1626992774","https://openalex.org/W1980235022","https://openalex.org/W1982227292","https://openalex.org/W2020582876","https://openalex.org/W2039031286","https://openalex.org/W2040467972","https://openalex.org/W2044798763","https://openalex.org/W2048755632","https://openalex.org/W2054626033","https://openalex.org/W2077816420","https://openalex.org/W2128551894","https://openalex.org/W2139179587","https://openalex.org/W2155873597","https://openalex.org/W2181155974","https://openalex.org/W2254621492","https://openalex.org/W2290073962","https://openalex.org/W2292723020","https://openalex.org/W2404167293","https://openalex.org/W2574685397","https://openalex.org/W2598853221","https://openalex.org/W2610414453","https://openalex.org/W2621107674","https://openalex.org/W2752830978","https://openalex.org/W2756320651","https://openalex.org/W2888093607","https://openalex.org/W2891114826","https://openalex.org/W2891820333","https://openalex.org/W2942451627","https://openalex.org/W3106195390","https://openalex.org/W4238709738","https://openalex.org/W4247857566","https://openalex.org/W6632930104","https://openalex.org/W6949758113"],"related_works":["https://openalex.org/W3204765815","https://openalex.org/W4387628495","https://openalex.org/W6996678416","https://openalex.org/W2598853221","https://openalex.org/W2020582876","https://openalex.org/W7203984736","https://openalex.org/W4246488341","https://openalex.org/W2886017169","https://openalex.org/W2803549391","https://openalex.org/W2315247372"],"abstract_inverted_index":{"We":[0,26,64,102,138],"provide":[1,196],"the":[2,40,67,135,165,175,192,197],"first":[3],"comprehensive":[4],"study":[5,66],"of":[6,48,69,74,177,191],"user-chosen":[7],"4-":[8,128],"and":[9,58,123,129,202],"6-digit":[10,45,130],"PINs":[11,46,50,78,131],"(n":[12],"=":[13],"1220)":[14],"collected":[15],"on":[16],"smartphones":[17],"with":[18,108],"participants":[19],"being":[20],"explicitly":[21],"primed":[22],"for":[23,92,127],"device":[24],"unlocking.":[25],"find":[27,139],"that":[28,132,140,184],"against":[29,154],"a":[30,72,113,118,155,185],"throttled":[31,156],"attacker":[32],"(with":[33],"10,":[34],"30,":[35],"or":[36,151],"100":[37],"guesses,":[38],"matching":[39],"smartphone":[41],"unlock":[42],"setting),":[43],"using":[44],"instead":[47],"4-digit":[49,115,120],"provides":[51],"little":[52,150],"to":[53,76],"no":[54,152],"increase":[55],"in":[56,87,144,171],"security,":[57],"surprisingly":[59],"may":[60,195],"even":[61],"decrease":[62],"security.":[63,203],"also":[65],"effects":[68],"blacklists,":[70,111],"where":[71],"set":[73],"\"easy":[75],"guess\"":[77],"is":[79],"disallowed":[80],"during":[81],"selection.":[82],"Two":[83],"such":[84],"blacklists":[85,105,126,143,166],"are":[86,161,167],"use":[88,145],"today":[89,146],"by":[90,147],"iOS,":[91],"4-digits":[93],"(274":[94],"PINs)":[95],"as":[96,98],"well":[97],"6-digits":[99],"(2910":[100],"PINs).":[101],"extracted":[103],"both":[104],"compared":[106],"them":[107],"four":[109],"other":[110],"including":[112],"small":[114,142],"(27":[116],"PINs),":[117,122],"large":[119],"(2740":[121],"two":[124],"placebo":[125],"always":[133],"excluded":[134],"first-choice":[136],"PIN.":[137],"relatively":[141],"iOS":[148],"offer":[149],"benefit":[153],"guessing":[157],"attack.":[158],"Security":[159],"gains":[160],"only":[162],"observed":[163],"when":[164],"much":[168],"larger,":[169],"which":[170],"turn":[172],"comes":[173],"at":[174,187],"cost":[176],"increased":[178],"user":[179],"frustration.":[180],"Our":[181],"analysis":[182],"suggests":[183],"blacklist":[186],"about":[188],"10":[189],"%":[190],"PIN":[193],"space":[194],"best":[198],"balance":[199],"between":[200],"usability":[201]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":5}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2020-04-10T00:00:00"}