Stay Cool! Understanding Thermal Attacks on Mobile-based User Authentication
summary
A user-study (N=18) demonstrates thermal cameras and a custom OpenCV C++ analyzer recover PINs and Android lock patterns from a single thermal frame; PINs show >72% success and PINs with two duplicate digits hit 100% recovery, while overlapping patterns drop success from 100% → 16.67%. Attacks remain effective up to 30 seconds after entry. Hardware: a consumer thermal camera (Optris) and open dataset/code on GitHub. Defenses: longer PINs, at least one pattern overlap, random swipes or heating the device.
AI-written summary · about
chapters (7)
- 0:00Introduction and motivation
- 3:39How thermal attacks work
- 7:08User study methodology
- 10:22Findings on PINs and patterns
- 13:16Protection recommendations
- 14:20Summary and open source
- 14:41Q&A session
related talks
25mThermanator and the Thermal Residue Attack
24mMy Google Glass Sees Your Passwords!
06mListen to Your Fingers: User Authentication based on Geometry Biometrics of Touch Gesture
06mTouchID: User Authentication on Mobile Devices via Inertial-Touch Gesture Analysis
25mBiometric Authentication Under Threat: Liveness Detection Hacking
20mInjection Attacks in Biometric
06mTowards Usable and Secure Location-based Smartphone Authentication
05mFine-Grained and Context-Aware Behavioral Biometrics for Pattern Lock on Smartphones