{"id":"https://openalex.org/W2603044798","doi":"https://doi.org/10.1145/3053331","title":"Guessing Attacks on User-Generated Gesture Passwords","display_name":"Guessing Attacks on User-Generated Gesture Passwords","publication_year":2017,"publication_date":"2017-03-30","ids":{"openalex":"https://openalex.org/W2603044798","doi":"https://doi.org/10.1145/3053331","mag":"2603044798"},"language":"en","primary_location":{"id":"doi:10.1145/3053331","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3053331","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3053331&type=pdf","source":{"id":"https://openalex.org/S4210219751","display_name":"Proceedings of the ACM on Interactive Mobile Wearable and Ubiquitous Technologies","issn_l":"2474-9567","issn":["2474-9567"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"http://dl.acm.org/ft_gateway.cfm?id=3053331&type=pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101607191","display_name":"Can Liu","orcid":"https://orcid.org/0009-0006-8694-9322"},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Can Liu","raw_affiliation_strings":["Electrical 8 Computer Engineering Building, Rutgers University, Piscataway, New Jersey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical 8 Computer Engineering Building, Rutgers University, Piscataway, New Jersey","institution_ids":["https://openalex.org/I102322142"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081891701","display_name":"Gradeigh D. Clark","orcid":null},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gradeigh D. Clark","raw_affiliation_strings":["Electrical 8 Computer Engineering Building, Rutgers University, Piscataway, New Jersey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical 8 Computer Engineering Building, Rutgers University, Piscataway, New Jersey","institution_ids":["https://openalex.org/I102322142"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019562468","display_name":"Janne Lindqvist","orcid":null},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Janne Lindqvist","raw_affiliation_strings":["Electrical 8 Computer Engineering Building, Rutgers University, Piscataway, New Jersey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical 8 Computer Engineering Building, Rutgers University, Piscataway, New Jersey","institution_ids":["https://openalex.org/I102322142"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I102322142"],"apc_list":null,"apc_paid":null,"fwci":4.9602,"has_fulltext":true,"cited_by_count":19,"citation_normalized_percentile":{"value":0.95553893,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"1","issue":"1","first_page":"1","last_page":"24"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9861999750137329,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.9652000069618225,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.8654654622077942},{"id":"https://openalex.org/keywords/gesture","display_name":"Gesture","score":0.8159165382385254},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7507630586624146},{"id":"https://openalex.org/keywords/password-cracking","display_name":"Password cracking","score":0.715333878993988},{"id":"https://openalex.org/keywords/subspace-topology","display_name":"Subspace topology","score":0.5902789831161499},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.46250197291374207},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.43629786372184753},{"id":"https://openalex.org/keywords/brute-force-attack","display_name":"Brute-force attack","score":0.4197002053260803},{"id":"https://openalex.org/keywords/password-strength","display_name":"Password strength","score":0.3038213551044464},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2499028742313385},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.22424587607383728},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.18818172812461853}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.8654654622077942},{"id":"https://openalex.org/C207347870","wikidata":"https://www.wikidata.org/wiki/Q371174","display_name":"Gesture","level":2,"score":0.8159165382385254},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7507630586624146},{"id":"https://openalex.org/C3847113","wikidata":"https://www.wikidata.org/wiki/Q2746524","display_name":"Password cracking","level":5,"score":0.715333878993988},{"id":"https://openalex.org/C32834561","wikidata":"https://www.wikidata.org/wiki/Q660730","display_name":"Subspace topology","level":2,"score":0.5902789831161499},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.46250197291374207},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43629786372184753},{"id":"https://openalex.org/C207468940","wikidata":"https://www.wikidata.org/wiki/Q869370","display_name":"Brute-force attack","level":3,"score":0.4197002053260803},{"id":"https://openalex.org/C70530487","wikidata":"https://www.wikidata.org/wiki/Q1990841","display_name":"Password strength","level":4,"score":0.3038213551044464},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2499028742313385},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.22424587607383728},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.18818172812461853}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3053331","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3053331","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3053331&type=pdf","source":{"id":"https://openalex.org/S4210219751","display_name":"Proceedings of the ACM on Interactive Mobile Wearable and Ubiquitous Technologies","issn_l":"2474-9567","issn":["2474-9567"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3053331","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3053331","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3053331&type=pdf","source":{"id":"https://openalex.org/S4210219751","display_name":"Proceedings of the ACM on Interactive Mobile Wearable and Ubiquitous Technologies","issn_l":"2474-9567","issn":["2474-9567"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5099999904632568}],"awards":[{"id":"https://openalex.org/G6374568377","display_name":"TWC: Medium: Collaborative: Capturing People's Expectations of Privacy with Mobile Apps by Combining Automated Scanning and Crowdsourcing Techniques","funder_award_id":"1228777","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306078","display_name":"U.S. Department of Defense","ror":"https://ror.org/0447fe631"},{"id":"https://openalex.org/F4320333566","display_name":"National Defense Science and Engineering Graduate","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2603044798.pdf","grobid_xml":"https://content.openalex.org/works/W2603044798.grobid-xml"},"referenced_works_count":47,"referenced_works":["https://openalex.org/W32836389","https://openalex.org/W39942585","https://openalex.org/W128619364","https://openalex.org/W563958770","https://openalex.org/W1463944966","https://openalex.org/W1485033854","https://openalex.org/W1503108337","https://openalex.org/W1522940701","https://openalex.org/W1626992774","https://openalex.org/W1627695629","https://openalex.org/W1842813322","https://openalex.org/W1964160137","https://openalex.org/W1976081290","https://openalex.org/W1987971958","https://openalex.org/W1988463028","https://openalex.org/W2019066249","https://openalex.org/W2022008163","https://openalex.org/W2044798763","https://openalex.org/W2048755632","https://openalex.org/W2052525588","https://openalex.org/W2054626033","https://openalex.org/W2055389916","https://openalex.org/W2055910046","https://openalex.org/W2086660806","https://openalex.org/W2091921805","https://openalex.org/W2097248932","https://openalex.org/W2097267243","https://openalex.org/W2115218409","https://openalex.org/W2124945516","https://openalex.org/W2126453598","https://openalex.org/W2127218421","https://openalex.org/W2128160875","https://openalex.org/W2129088386","https://openalex.org/W2131800446","https://openalex.org/W2131840135","https://openalex.org/W2135359429","https://openalex.org/W2145925009","https://openalex.org/W2149929743","https://openalex.org/W2150593711","https://openalex.org/W2163582782","https://openalex.org/W2170568675","https://openalex.org/W2171920515","https://openalex.org/W2181155974","https://openalex.org/W2399430481","https://openalex.org/W2402746099","https://openalex.org/W2463456957","https://openalex.org/W2488850733"],"related_works":["https://openalex.org/W137322897","https://openalex.org/W2054626033","https://openalex.org/W1982158666","https://openalex.org/W3013108623","https://openalex.org/W2555472429","https://openalex.org/W1607548261","https://openalex.org/W2097945858","https://openalex.org/W4239831152","https://openalex.org/W3006470114","https://openalex.org/W4312630426"],"abstract_inverted_index":{"Touchscreens,":[0],"the":[1,40,45,66,77,80,108,111,147,152,164],"dominant":[2],"input":[3],"type":[4],"for":[5,43,69,75,106,180],"mobile":[6],"phones,":[7],"require":[8],"unique":[9],"authentication":[10,21],"solutions.":[11],"Gesture":[12],"passwords":[13,174],"have":[14],"been":[15],"proposed":[16],"as":[17,32],"an":[18],"alternative":[19],"ubiquitous":[20],"technique.":[22],"Prior":[23],"security":[24,46],"analysis":[25,64],"has":[26],"relied":[27],"on":[28,118,183],"inconsistent":[29],"measurements":[30],"such":[31],"mutual":[33],"information":[34],"or":[35],"shoulder":[36],"surfing":[37],"attacks.We":[38],"present":[39],"first":[41],"approach":[42],"measuring":[44],"of":[47,65,79,89,110,127,132,141,151,163],"gestures":[48,96],"with":[49],"guessing":[50,92,112],"attacks":[51],"that":[52],"model":[53],"real-world":[54],"attacker":[55],"behavior.":[56],"Our":[57,114],"major":[58],"contributions":[59],"are:":[60],"1)":[61],"a":[62,73,87,90,98,102,124,139],"comprehensive":[63],"weak":[67,176],"subspace":[68],"gesture":[70,83,173],"passwords,":[71],"2)":[72],"method":[74],"enumerating":[76],"size":[78],"full":[81,161],"theoretical":[82,166],"password":[84,167],"space,":[85],"3)":[86],"design":[88],"novel":[91],"attack":[93,104],"against":[94],"user-chosen":[95],"using":[97,134],"dictionary,":[99],"and":[100,169],"4)":[101],"brute-force":[103,153],"used":[105],"benchmarking":[107],"performance":[109],"attack.":[113,154],"dictionary":[115],"attack,":[116],"tested":[117],"newly":[119],"collected":[120],"user":[121],"data,":[122],"achieves":[123],"cracking":[125,149],"rate":[126,150],"47.71%":[128],"after":[129],"two":[130],"weeks":[131],"computation":[133],"109":[135],"guesses.":[136],"This":[137],"is":[138],"difference":[140],"35.78":[142],"percentage":[143],"points":[144],"compared":[145],"to":[146],"11.93%":[148],"In":[155],"conclusion,":[156],"users":[157],"are":[158],"not":[159],"taking":[160],"advantage":[162],"large":[165],"space":[168],"instead":[170],"choose":[171],"their":[172],"from":[175],"subspaces.":[177],"We":[178],"urge":[179],"further":[181],"work":[182],"addressing":[184],"this":[185],"challenge.":[186]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":4}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}