This paper studies the security and memorability of free-form multitouch gestures for mobile authentication. Towards this end, we collected a dataset with a generate-test-retest paradigm where participants (N=63) generated free-form gestures, repeated them, and were later retested for memory. Half of the participants decided to generate one-finger gestures, and the other half generated multifinger gestures. Although there has been recent work on templatebased gestures, there are yet no metrics to analyze security of either template or free-form gestures. For example, entropy-based metrics used for text-based passwords are not suitable for capturing the security and memorability of free-form gestures. Hence, we modify a recently proposed metric for analyzing information capacity of continuous full-body movements for this purpose. Our metric computed estimated mutual information in repeated sets of gestures. Surprisingly, one-finger gestures had higher average mutual information. Gestures with many hard angles and turns had the highest mutual information. The best-remembered gestures included signatures and simple angular shapes. We also implemented a multitouch recognizer to evaluate the practicality of free-form gestures in a real authentication system and how they perform against shoulder surfing attacks. We discuss strategies for generating secure and memorable free-form gestures. We conclude that free-form gestures present a robust method for mobile authentication.

No abstract

No abstract

Ecological momentary assessment (EMA) methodology was used to examine the emotional context of nonsuicidal self-injury (NSSI). Forty-seven adolescents and young adults used a novel smartphone app to monitor their emotional experiences, NSSI thoughts, and NSSI behaviors for 2 weeks. Momentary changes in both negative and positive emotions predicted greater intensity of NSSI thoughts at the subsequent assessment, while only increases in negative emotion predicted NSSI behaviors. Immediately following NSSI behaviors participants reported reduced high-arousal negative emotions and increased low-arousal positive emotions, suggesting that NSSI may be an efficient and effective method of regulating emotion. Findings highlight the importance of addressing emotion regulation in NSSI interventions.

Free-form gesture passwords have been introduced as an alternative mobile authentication method. Text passwords are not very suitable for mobile interaction, and methods such as PINs and grid patterns sacrifice security over usability. However, little is known about how free-form gestures perform in the wild. We present the first field study (N=91) of mobile authentication using free-form gestures, with text passwords as a baseline. Our study leveraged Experience Sampling Methodology to increase ecological validity while maintaining control of the experiment. We found that, with gesture passwords, participants generated new passwords and authenticated faster with comparable memorability while being more willing to retry. Our analysis of the gesture password dataset indicated biases in user-chosen distribution tending towards common shapes. Our findings provide useful insights towards understanding mobile device authentication and gesture-based authentication.