Main content

Skimming Smartphone PINs Under Restrictive Conditions

Show full item record

Title: Skimming Smartphone PINs Under Restrictive Conditions
Author: Abulibdeh, Rawan
Department: School of Computer Science
Program: Computer Science
Advisor: Khan, Hassan
Abstract: Personal Identification Number (PIN) authentication is not only used to authenticate mobile devices but also used in bank security (e.g., ATM cards), and security of physical assets (e.g., homes). Attacks on PINs have become more widespread. Mobile phones store nearly every aspect of personal data on them. Therefore, securing the PIN entry is an important consideration in this technological era. The use of a mobile device in any public area opens up the possibility of an attack. In our work, we introduce a new video-based attack on a mobile device to decipher the PINs used for authentication on smartphones. Our approach varies from the previous works as it does not require any visibility of the device's screen or the hand of the person entering the PIN. By using just the tilt of the corners of the screen when a person enters their PIN, we identify the areas where the victim's hand touched the screen and as a result, predict the PIN entered. This strategy enables us to reduce the search space compared to an exhaustive search method by obtaining an average of 2-4 candidate keys for each key-press in a PIN. Our method resulted in a 75% accuracy rate of predicting which cluster group out of four cluster groups each key in the PIN belongs. Therefore, we are able to highlight the threat users face when entering their PIN in a public setting and show that hiding the screen during authentication provides no safety to the user.
URI: https://hdl.handle.net/10214/26322
Date: 2021-08
Terms of Use: All items in the Atrium are protected by copyright with all rights reserved unless otherwise indicated.


Files in this item

Files Size Format View
Abulibdeh_Rawan_202108_MSc.pdf 9.475Mb PDF View/Open

This item appears in the following Collection(s)

Show full item record