Touch gesture-based authentication: A security analysis of Pattern Unlock

Abstract

Pattern Unlock is one in a family of graphical passwords used on smart mobile devices. They were proposed as an alternative to PIN and Password, as a result of a study [2] that showed better human memorability of visuals words than textual. Researchers have made several attempts to analyse and quantify the security of Pattern Unlock. However, only a few studies have been done on human characteristics and the correlation to choice of patterns.In this paper, we investigated the Android Pattern Unlock authentication and presents a comprehensive analysis of user pattern characteristics and strength of patterns generated by users. We extended the analysis by looking in-depth into gender and also different Android operated devices were looked into to get the lock-out and wait time, to lay the foundations of a practical security framework.Our results (125 participants) indicated how users weakly choose their patterns by simply embedding and reusing patterns that are alphabetic or numeric-like, and having a strength score less than 27bits of entropy. The results highlighted the need to make users more aware and conscious when choosing their authentication patterns.

Security Evolution in Object-Oriented Software Systems: Shaping the Future Landscape through Innovative Patterns

“…Furthermore, the integration of security and safety patterns in safety-critical embedded systems underscores the interdisciplinary nature of secure object-oriented design. Practical applications are explored, ranging from the development of applications based on security patterns to the analysis of touch gesture-based authentication [9]. The research extends into frameworks for authentication and authorization patterns, elucidating the evolving methods to ensure information systems' security [6].…”

“…The paper explores the nuanced integration of security patterns within the OOP paradigm, emphasizing authentication, authorization, data protection, and communication security [6] [8]. Bridging a research gap, it delves into the intersection of security patterns and object-oriented programming, contributing valuable insights for secure software development [9]. The subsequent sections of the paper delve into specific security patterns, methodologies, case studies, and findings, catering to developers, researchers, and practitioners in the dynamic field of software security.…”