{"id":"https://openalex.org/W2776772138","doi":"https://doi.org/10.1109/cns.2017.8228644","title":"Composition policies for gesture passwords: User choice, security, usability and memorability","display_name":"Composition policies for gesture passwords: User choice, security, usability and memorability","publication_year":2017,"publication_date":"2017-10-01","ids":{"openalex":"https://openalex.org/W2776772138","doi":"https://doi.org/10.1109/cns.2017.8228644","mag":"2776772138"},"language":"en","primary_location":{"id":"doi:10.1109/cns.2017.8228644","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2017.8228644","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://research.aalto.fi/en/publications/0b2356c6-c181-4f34-8eb3-7ad35101f8d1","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5081891701","display_name":"Gradeigh D. Clark","orcid":null},"institutions":[{"id":"https://openalex.org/I4210096112","display_name":"Rutgers Sexual and Reproductive Health and Rights","ror":"https://ror.org/00rcvgx40","country_code":"NL","type":"other","lineage":["https://openalex.org/I4210096112"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Gradeigh D. Clark","raw_affiliation_strings":["Rutgers University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Rutgers University","institution_ids":["https://openalex.org/I4210096112"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019562468","display_name":"Janne Lindqvist","orcid":null},"institutions":[{"id":"https://openalex.org/I4210096112","display_name":"Rutgers Sexual and Reproductive Health and Rights","ror":"https://ror.org/00rcvgx40","country_code":"NL","type":"other","lineage":["https://openalex.org/I4210096112"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Janne Lindqvist","raw_affiliation_strings":["Rutgers University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Rutgers University","institution_ids":["https://openalex.org/I4210096112"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003084232","display_name":"Antti Oulasvirta","orcid":"https://orcid.org/0000-0002-2498-7837"},"institutions":[{"id":"https://openalex.org/I9927081","display_name":"Aalto University","ror":"https://ror.org/020hwjq30","country_code":"FI","type":"education","lineage":["https://openalex.org/I9927081"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Antti Oulasvirta","raw_affiliation_strings":["Aalto University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Aalto University","institution_ids":["https://openalex.org/I9927081"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10789","display_name":"Interactive and Immersive Displays","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.980400025844574,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/gesture","display_name":"Gesture","score":0.919408917427063},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.9072403907775879},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.8238236904144287},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7484310865402222},{"id":"https://openalex.org/keywords/usable","display_name":"USable","score":0.6612994074821472},{"id":"https://openalex.org/keywords/cognitive-password","display_name":"Cognitive password","score":0.6459537148475647},{"id":"https://openalex.org/keywords/touchscreen","display_name":"Touchscreen","score":0.6372151374816895},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.560158908367157},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.48284727334976196},{"id":"https://openalex.org/keywords/gesture-recognition","display_name":"Gesture recognition","score":0.4683465361595154},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4270067811012268},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.41355812549591064},{"id":"https://openalex.org/keywords/password-policy","display_name":"Password policy","score":0.4103657901287079},{"id":"https://openalex.org/keywords/multimedia","display_name":"Multimedia","score":0.2579866647720337},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.21549341082572937},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.11467447876930237}],"concepts":[{"id":"https://openalex.org/C207347870","wikidata":"https://www.wikidata.org/wiki/Q371174","display_name":"Gesture","level":2,"score":0.919408917427063},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.9072403907775879},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.8238236904144287},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7484310865402222},{"id":"https://openalex.org/C2780615836","wikidata":"https://www.wikidata.org/wiki/Q2471869","display_name":"USable","level":2,"score":0.6612994074821472},{"id":"https://openalex.org/C23875713","wikidata":"https://www.wikidata.org/wiki/Q5141232","display_name":"Cognitive password","level":5,"score":0.6459537148475647},{"id":"https://openalex.org/C2778539339","wikidata":"https://www.wikidata.org/wiki/Q165970","display_name":"Touchscreen","level":2,"score":0.6372151374816895},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.560158908367157},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.48284727334976196},{"id":"https://openalex.org/C159437735","wikidata":"https://www.wikidata.org/wiki/Q1519524","display_name":"Gesture recognition","level":3,"score":0.4683465361595154},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4270067811012268},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.41355812549591064},{"id":"https://openalex.org/C98705547","wikidata":"https://www.wikidata.org/wiki/Q3394687","display_name":"Password policy","level":4,"score":0.4103657901287079},{"id":"https://openalex.org/C49774154","wikidata":"https://www.wikidata.org/wiki/Q131765","display_name":"Multimedia","level":1,"score":0.2579866647720337},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.21549341082572937},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.11467447876930237}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/cns.2017.8228644","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2017.8228644","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},{"id":"pmh:oai:aaltodoc.aalto.fi:123456789/30245","is_oa":true,"landing_page_url":"https://research.aalto.fi/en/publications/0b2356c6-c181-4f34-8eb3-7ad35101f8d1","pdf_url":null,"source":{"id":"https://openalex.org/S4306401663","display_name":"Aaltodoc (Aalto University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I9927081","host_organization_name":"Aalto University","host_organization_lineage":["https://openalex.org/I9927081"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:aaltodoc.aalto.fi:123456789/30245","is_oa":true,"landing_page_url":"https://research.aalto.fi/en/publications/0b2356c6-c181-4f34-8eb3-7ad35101f8d1","pdf_url":null,"source":{"id":"https://openalex.org/S4306401663","display_name":"Aaltodoc (Aalto University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I9927081","host_organization_name":"Aalto University","host_organization_lineage":["https://openalex.org/I9927081"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W1842813322","https://openalex.org/W1969657452","https://openalex.org/W1988889188","https://openalex.org/W2017658349","https://openalex.org/W2019066249","https://openalex.org/W2030112111","https://openalex.org/W2035487231","https://openalex.org/W2038790378","https://openalex.org/W2044798763","https://openalex.org/W2052525588","https://openalex.org/W2055389916","https://openalex.org/W2074551623","https://openalex.org/W2076868093","https://openalex.org/W2097267243","https://openalex.org/W2099372034","https://openalex.org/W2106247215","https://openalex.org/W2113925088","https://openalex.org/W2131254288","https://openalex.org/W2131800446","https://openalex.org/W2145925009","https://openalex.org/W2146532796","https://openalex.org/W2151854612","https://openalex.org/W2157771033","https://openalex.org/W2161304134","https://openalex.org/W2163006719","https://openalex.org/W2163582782","https://openalex.org/W2399430481","https://openalex.org/W2402746099","https://openalex.org/W2603044798","https://openalex.org/W2610433660","https://openalex.org/W6676036601","https://openalex.org/W6679737157","https://openalex.org/W6713355746"],"related_works":["https://openalex.org/W2183044514","https://openalex.org/W2596869006","https://openalex.org/W2115218409","https://openalex.org/W2969720675","https://openalex.org/W2048203748","https://openalex.org/W1987516957","https://openalex.org/W2977599313","https://openalex.org/W2181505828","https://openalex.org/W911505456","https://openalex.org/W165936246"],"abstract_inverted_index":{"Research":[0],"on":[1,44,48,124],"gesture":[2,30,45,55,82,94,146],"passwords":[3,31,56],"suggest":[4],"they":[5],"are":[6,32],"highly":[7],"usable":[8],"and":[9,109,116,144],"secure,":[10],"leading":[11],"them":[12],"to":[13,112,141],"be":[14],"proposed":[15],"as":[16],"a":[17,102,113],"strong":[18],"alternative":[19],"authentication":[20],"method":[21],"for":[22,81],"touchscreen":[23],"devices.":[24],"However,":[25],"studies":[26],"demonstrate":[27],"that":[28,100,117,136],"user-chosen":[29],"biased":[33],"towards":[34],"familiar":[35],"symbols,":[36],"increasing":[37],"the":[38,69,72,118,125,131],"risk":[39],"of":[40,71,78,93,120],"guessing.":[41],"Prior":[42],"work":[43],"elicitation":[46],"focuses":[47],"creating":[49],"sets":[50],"with":[51],"high":[52],"overlap,":[53],"but":[54],"require":[57],"solving":[58],"an":[59],"inverse":[60],"problem:":[61],"minimal":[62],"overlap":[63],"between":[64],"different":[65],"users.":[66],"We":[67,127],"present":[68],"results":[70],"first":[73],"study":[74],"(N":[75],"=":[76],"128)":[77],"composition":[79],"policies":[80,88,133,138],"passwords,":[83],"wherein":[84],"we":[85],"compare":[86],"four":[87],"derived":[89],"from":[90],"unique":[91],"properties":[92],"passwords.":[95,147],"Our":[96],"main":[97],"result":[98],"is":[99],"implementing":[101],"policy":[103],"changes":[104,122],"user":[105],"choice,":[106],"security,":[107],"usability,":[108],"memorability":[110],"compared":[111],"control":[114],"group":[115],"strength":[119],"those":[121],"depend":[123],"policies.":[126],"report":[128],"trade-offs":[129],"among":[130],"instruction":[132],"while":[134],"showing":[135],"simple":[137],"cause":[139],"users":[140],"choose":[142],"stronger":[143],"diverse":[145]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}