{"id":"https://openalex.org/W4224981112","doi":"https://doi.org/10.1145/3491102.3517531","title":"\u201dYour Eyes Tell You Have Used This Password Before\u201d: Identifying Password Reuse from Gaze and Keystroke Dynamics","display_name":"\u201dYour Eyes Tell You Have Used This Password Before\u201d: Identifying Password Reuse from Gaze and Keystroke Dynamics","publication_year":2022,"publication_date":"2022-04-28","ids":{"openalex":"https://openalex.org/W4224981112","doi":"https://doi.org/10.1145/3491102.3517531"},"language":"en","primary_location":{"id":"doi:10.1145/3491102.3517531","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3491102.3517531","pdf_url":null,"source":{"id":"https://openalex.org/S4363607743","display_name":"CHI Conference on Human Factors in Computing Systems","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003816373","display_name":"Yasmeen Abdrabou","orcid":"https://orcid.org/0000-0002-8895-4997"},"institutions":[{"id":"https://openalex.org/I7882870","display_name":"University of Glasgow","ror":"https://ror.org/00vtgdb53","country_code":"GB","type":"education","lineage":["https://openalex.org/I7882870"]},{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE","GB"],"is_corresponding":true,"raw_author_name":"Yasmeen Abdrabou","raw_affiliation_strings":["Bundeswehr University Munich, Germany and University of Glasgow, United Kingdom"],"affiliations":[{"raw_affiliation_string":"Bundeswehr University Munich, Germany and University of Glasgow, United Kingdom","institution_ids":["https://openalex.org/I40527276","https://openalex.org/I7882870"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021313994","display_name":"Johannes Sch\u00fctte","orcid":null},"institutions":[{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Johannes Sch\u00fctte","raw_affiliation_strings":["Bundeswehr University Munich, Germany"],"affiliations":[{"raw_affiliation_string":"Bundeswehr University Munich, Germany","institution_ids":["https://openalex.org/I40527276"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066050150","display_name":"Ahmed Shams","orcid":"https://orcid.org/0000-0001-8507-2510"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ahmed Shams","raw_affiliation_strings":["Fatura LLC, Egypt"],"affiliations":[{"raw_affiliation_string":"Fatura LLC, Egypt","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089530440","display_name":"Ken Pfeuffer","orcid":"https://orcid.org/0000-0002-5870-1120"},"institutions":[{"id":"https://openalex.org/I204337017","display_name":"Aarhus University","ror":"https://ror.org/01aj84f44","country_code":"DK","type":"education","lineage":["https://openalex.org/I204337017"]},{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE","DK"],"is_corresponding":false,"raw_author_name":"Ken Pfeuffer","raw_affiliation_strings":["Department of Computer Science, Aarhus University, Denmark and Bundeswehr University Munich, Germany"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Aarhus University, Denmark and Bundeswehr University Munich, Germany","institution_ids":["https://openalex.org/I40527276","https://openalex.org/I204337017"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032594386","display_name":"Daniel Buschek","orcid":"https://orcid.org/0000-0002-0013-715X"},"institutions":[{"id":"https://openalex.org/I54009628","display_name":"University of Bayreuth","ror":"https://ror.org/0234wmv40","country_code":"DE","type":"education","lineage":["https://openalex.org/I54009628"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Daniel Buschek","raw_affiliation_strings":["Department of Computer Science, University of Bayreuth, Germany"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Bayreuth, Germany","institution_ids":["https://openalex.org/I54009628"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001935352","display_name":"Mohamed Khamis","orcid":"https://orcid.org/0000-0001-7051-5200"},"institutions":[{"id":"https://openalex.org/I7882870","display_name":"University of Glasgow","ror":"https://ror.org/00vtgdb53","country_code":"GB","type":"education","lineage":["https://openalex.org/I7882870"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mohamed Khamis","raw_affiliation_strings":["University of Glasgow, United Kingdom"],"affiliations":[{"raw_affiliation_string":"University of Glasgow, United Kingdom","institution_ids":["https://openalex.org/I7882870"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054117094","display_name":"Florian Alt","orcid":"https://orcid.org/0000-0001-8354-2195"},"institutions":[{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Florian Alt","raw_affiliation_strings":["Bundeswehr University Munich, Germany"],"affiliations":[{"raw_affiliation_string":"Bundeswehr University Munich, Germany","institution_ids":["https://openalex.org/I40527276"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5003816373"],"corresponding_institution_ids":["https://openalex.org/I40527276","https://openalex.org/I7882870"],"apc_list":null,"apc_paid":null,"fwci":2.0373,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.88863109,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"16"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.9713000059127808,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13155","display_name":"Digital Communication and Language","score":0.9661999940872192,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.9705930948257446},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.8015747666358948},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7777503728866577},{"id":"https://openalex.org/keywords/gaze","display_name":"Gaze","score":0.7266459465026855},{"id":"https://openalex.org/keywords/keystroke-logging","display_name":"Keystroke logging","score":0.651500403881073},{"id":"https://openalex.org/keywords/keystroke-dynamics","display_name":"Keystroke dynamics","score":0.6043207049369812},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.5086613297462463},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4731494188308716},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.4557203948497772},{"id":"https://openalex.org/keywords/password-strength","display_name":"Password strength","score":0.4196323752403259},{"id":"https://openalex.org/keywords/cognitive-password","display_name":"Cognitive password","score":0.4143146276473999},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3704691529273987},{"id":"https://openalex.org/keywords/s/key","display_name":"S/KEY","score":0.3541339635848999},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.2404705286026001},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09181562066078186}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.9705930948257446},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.8015747666358948},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7777503728866577},{"id":"https://openalex.org/C2779916870","wikidata":"https://www.wikidata.org/wiki/Q14467155","display_name":"Gaze","level":2,"score":0.7266459465026855},{"id":"https://openalex.org/C161615301","wikidata":"https://www.wikidata.org/wiki/Q309396","display_name":"Keystroke logging","level":2,"score":0.651500403881073},{"id":"https://openalex.org/C79540074","wikidata":"https://www.wikidata.org/wiki/Q3269465","display_name":"Keystroke dynamics","level":4,"score":0.6043207049369812},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.5086613297462463},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4731494188308716},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.4557203948497772},{"id":"https://openalex.org/C70530487","wikidata":"https://www.wikidata.org/wiki/Q1990841","display_name":"Password strength","level":4,"score":0.4196323752403259},{"id":"https://openalex.org/C23875713","wikidata":"https://www.wikidata.org/wiki/Q5141232","display_name":"Cognitive password","level":5,"score":0.4143146276473999},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3704691529273987},{"id":"https://openalex.org/C4957475","wikidata":"https://www.wikidata.org/wiki/Q242186","display_name":"S/KEY","level":3,"score":0.3541339635848999},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.2404705286026001},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09181562066078186},{"id":"https://openalex.org/C548081761","wikidata":"https://www.wikidata.org/wiki/Q180388","display_name":"Waste management","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3491102.3517531","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3491102.3517531","pdf_url":null,"source":{"id":"https://openalex.org/S4363607743","display_name":"CHI Conference on Human Factors in Computing Systems","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:eprints.gla.ac.uk:267383","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4210235606","display_name":"ENLIGHTEN (Jurnal Bimbingan dan Konseling Islam)","issn_l":"2622-8912","issn":["2622-8912","2622-8920"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"Conference Proceedings"},{"id":"pmh:oai:eref.uni-bayreuth.de:70106","is_oa":false,"landing_page_url":"https://eref.uni-bayreuth.de/70106/","pdf_url":null,"source":{"id":"https://openalex.org/S4377196442","display_name":"ERef Bayreuth (University of Bayreuth)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I54009628","host_organization_name":"University of Bayreuth","host_organization_lineage":["https://openalex.org/I54009628"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Aufsatz in einem Buch"},{"id":"pmh:oai:pure.atira.dk:publications/68c81588-d44f-4058-afa2-d4bed1d0ff08","is_oa":false,"landing_page_url":"http://www.scopus.com/inward/record.url?scp=85130573778&partnerID=8YFLogxK","pdf_url":null,"source":{"id":"https://openalex.org/S4306400063","display_name":"Scopus (Elsevier)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Abdrabou, Y, Sch\u00fctte, J, Shams, A, Pfeuffer, K, Buschek, D, Khamis, M & Alt, F 2022, \"Your Eyes Tell You Have Used This Password Before\" : Identifying Password Reuse from Gaze and Keystroke Dynamics. in CHI 2022 - Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems., 400, Association for Computing Machinery, 2022 CHI Conference on Human Factors in Computing Systems, CHI 2022, Virtual, Online, United States, 30/04/2022. https://doi.org/10.1145/3491102.3517531","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":{"id":"pmh:oai:eprints.gla.ac.uk:267383","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4210235606","display_name":"ENLIGHTEN (Jurnal Bimbingan dan Konseling Islam)","issn_l":"2622-8912","issn":["2622-8912","2622-8920"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"Conference Proceedings"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5816251574","display_name":null,"funder_award_id":"EP/V008870/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"},{"id":"https://openalex.org/F4320322572","display_name":"Studienstiftung des Deutschen Volkes","ror":"https://ror.org/05xwwfy96"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W59539042","https://openalex.org/W178850302","https://openalex.org/W1541263954","https://openalex.org/W1598230061","https://openalex.org/W1986293972","https://openalex.org/W1987516957","https://openalex.org/W2050399908","https://openalex.org/W2056988391","https://openalex.org/W2094539281","https://openalex.org/W2134080857","https://openalex.org/W2157337727","https://openalex.org/W2159759652","https://openalex.org/W2167841397","https://openalex.org/W2171920515","https://openalex.org/W2198591517","https://openalex.org/W2218132318","https://openalex.org/W2266948285","https://openalex.org/W2346878720","https://openalex.org/W2545457694","https://openalex.org/W2601467052","https://openalex.org/W2611508612","https://openalex.org/W2734275994","https://openalex.org/W2765667105","https://openalex.org/W2783257340","https://openalex.org/W2795386701","https://openalex.org/W2795675112","https://openalex.org/W2796203091","https://openalex.org/W2796991503","https://openalex.org/W2805552443","https://openalex.org/W2888656057","https://openalex.org/W2905880535","https://openalex.org/W2910924807","https://openalex.org/W2938065911","https://openalex.org/W2965442679","https://openalex.org/W2967441405","https://openalex.org/W3005837602","https://openalex.org/W3118436759","https://openalex.org/W3160667951","https://openalex.org/W3165518628","https://openalex.org/W4210774206","https://openalex.org/W4241699713","https://openalex.org/W4244097747"],"related_works":["https://openalex.org/W2969720675","https://openalex.org/W78975431","https://openalex.org/W4221040820","https://openalex.org/W1959666775","https://openalex.org/W2158072777","https://openalex.org/W2021087413","https://openalex.org/W2359085393","https://openalex.org/W1982158666","https://openalex.org/W2557836603","https://openalex.org/W2980143468"],"abstract_inverted_index":{"A":[0],"significant":[1],"drawback":[2],"of":[3,95,115],"text":[4],"passwords":[5],"for":[6,45,142],"end-user":[7],"authentication":[8],"is":[9],"password":[10,19,70,84,101,122,148],"reuse.":[11,149],"We":[12,33,76,117],"propose":[13],"a":[14,47,52,61],"novel":[15,144],"approach":[16],"to":[17,82,97,146],"detect":[18,83],"reuse":[20,85,102,123],"by":[21],"leveraging":[22],"gaze":[23,35],"as":[24,26],"well":[25],"typing":[27,37],"behavior":[28,38],"and":[29,36,50,109],"study":[30],"its":[31],"accuracy.":[32],"collected":[34,88],"from":[39,86,103,107],"49":[40],"users":[41,133],"while":[42],"creating":[43],"accounts":[44],"1)":[46],"webmail":[48],"client":[49],"2)":[51],"news":[53],"website.":[54],"While":[55],"most":[56],"participants":[57],"came":[58],"up":[59,73,96],"with":[60],"new":[62],"password,":[63],"32%":[64],"reported":[65],"having":[66],"reused":[67],"an":[68,93],"old":[69],"when":[71,111],"setting":[72],"their":[74,135],"accounts.":[75],"then":[77],"compared":[78],"different":[79],"ML":[80],"models":[81,91],"the":[87,129,140],"data.":[89],"Our":[90,137],"achieve":[92],"accuracy":[94,106],"87.7%":[98],"in":[99],"detecting":[100],"gaze,":[104,121],"75.8%":[105],"typing,":[108],"88.75%":[110],"considering":[112],"both":[113],"types":[114],"behavior.":[116],"demonstrate":[118],"that":[119],"using":[120],"can":[124],"already":[125],"be":[126],"detected":[127],"during":[128],"registration":[130],"process,":[131],"before":[132],"entered":[134],"password.":[136],"work":[138],"paves":[139],"road":[141],"developing":[143],"interventions":[145],"prevent":[147]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":8}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}