Gaze-contingent passwords at the ATM
Paul Dunphy, Andrew L. Fitch, Patrick L. Olivier · 2008
Knowledge-based authentication (e.g. passwords) has long been associated with a vulnerability to shoulder surfing; being stolen by attackers overlooking the interaction. In order to combat such threats, steps can be taken to either alter the form of the challenge made to the user, or make use of an interaction technique that is resistant to information leakage. We consider the latter, and empirically evaluate the