View in EDS HTML Full Text PDF Full Text

PassNum: A usable and secure method against repeated shoulder surfing.

Saved in:
Bibliographic Details
Title: PassNum: A usable and secure method against repeated shoulder surfing.
Authors: Ahmad, Awais (AUTHOR), Asif, Muhammad (AUTHOR), Hamid, Isma (AUTHOR), Aljuaid, Hanan (AUTHOR)
Source: Behaviour & Information Technology. Oct2025, Vol. 44 Issue 17, p4220-4246. 27p.
Subjects: Data security, Repeated measures design, Graphical user interfaces, T-test (Statistics), Data analysis, Research funding, Data security failures, Questionnaires, Systems development, Descriptive statistics, Computer graphics, System analysis, Thematic analysis, Analysis of variance, Statistics, Software architecture, Data analysis software, Cognition
Abstract: Conventional PIN and password methods failed to be resilient against observational attacks. In the wake of usable security, this gap is filled with enormous proposals of graphical passwords that claim to be resistant but sacrifice the usability concerns in the shape of other afflictions (second device 'phone/PC', headset, vibration motor, weird hand motions). In comparison, we propose PassNum, a grid-based usable, deployable, and secure graphical PIN authentication method (GPA) in the replacement (for every device) of conventional PIN. It is low-cost, user-friendly (child vs. old), secure (high entropy), and has a compatible design for low-sensitive (social sites) to more sensitive (banking apps). Through extensive experiments with 32 participants, PassNum achieved 98% accuracy with 10 s login time (average scores) and 100% memorability (cumulative scores). Furthermore, the 4th variation of PassNum proves to be 100% resilient against even recurring (3 repeated login sessions) recorded shoulder surfing attacks. Our qualitative survey revealed that PassNum might be the prime replacement for conventional PIN and password methods. [ABSTRACT FROM AUTHOR]
Copyright of Behaviour & Information Technology is the property of Taylor & Francis Ltd and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database: Psychology and Behavioral Sciences Collection
Full text is not displayed to guests.
FullText Links:
  – Type: pdflink
Text:
  Availability: 1
Header DbId: pbh
DbLabel: Psychology and Behavioral Sciences Collection
An: 189082130
AccessLevel: 6
PubType: Academic Journal
PubTypeId: academicJournal
PreciseRelevancyScore: 0
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: PassNum: A usable and secure method against repeated shoulder surfing.
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22Ahmad%2C+Awais%22">Ahmad, Awais</searchLink> (AUTHOR)<br /><searchLink fieldCode="AR" term="%22Asif%2C+Muhammad%22">Asif, Muhammad</searchLink> (AUTHOR)<br /><searchLink fieldCode="AR" term="%22Hamid%2C+Isma%22">Hamid, Isma</searchLink> (AUTHOR)<br /><searchLink fieldCode="AR" term="%22Aljuaid%2C+Hanan%22">Aljuaid, Hanan</searchLink> (AUTHOR)
– Name: TitleSource
  Label: Source
  Group: Src
  Data: <searchLink fieldCode="JN" term="%22Behaviour+%26+Information+Technology%22">Behaviour & Information Technology</searchLink>. Oct2025, Vol. 44 Issue 17, p4220-4246. 27p.
– Name: Subject
  Label: Subjects
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Data+security%22">Data security</searchLink><br /><searchLink fieldCode="DE" term="%22Repeated+measures+design%22">Repeated measures design</searchLink><br /><searchLink fieldCode="DE" term="%22Graphical+user+interfaces%22">Graphical user interfaces</searchLink><br /><searchLink fieldCode="DE" term="%22T-test+%28Statistics%29%22">T-test (Statistics)</searchLink><br /><searchLink fieldCode="DE" term="%22Data+analysis%22">Data analysis</searchLink><br /><searchLink fieldCode="DE" term="%22Research+funding%22">Research funding</searchLink><br /><searchLink fieldCode="DE" term="%22Data+security+failures%22">Data security failures</searchLink><br /><searchLink fieldCode="DE" term="%22Questionnaires%22">Questionnaires</searchLink><br /><searchLink fieldCode="DE" term="%22Systems+development%22">Systems development</searchLink><br /><searchLink fieldCode="DE" term="%22Descriptive+statistics%22">Descriptive statistics</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+graphics%22">Computer graphics</searchLink><br /><searchLink fieldCode="DE" term="%22System+analysis%22">System analysis</searchLink><br /><searchLink fieldCode="DE" term="%22Thematic+analysis%22">Thematic analysis</searchLink><br /><searchLink fieldCode="DE" term="%22Analysis+of+variance%22">Analysis of variance</searchLink><br /><searchLink fieldCode="DE" term="%22Statistics%22">Statistics</searchLink><br /><searchLink fieldCode="DE" term="%22Software+architecture%22">Software architecture</searchLink><br /><searchLink fieldCode="DE" term="%22Data+analysis+software%22">Data analysis software</searchLink><br /><searchLink fieldCode="DE" term="%22Cognition%22">Cognition</searchLink>
– Name: Abstract
  Label: Abstract
  Group: Ab
  Data: Conventional PIN and password methods failed to be resilient against observational attacks. In the wake of usable security, this gap is filled with enormous proposals of graphical passwords that claim to be resistant but sacrifice the usability concerns in the shape of other afflictions (second device 'phone/PC', headset, vibration motor, weird hand motions). In comparison, we propose PassNum, a grid-based usable, deployable, and secure graphical PIN authentication method (GPA) in the replacement (for every device) of conventional PIN. It is low-cost, user-friendly (child vs. old), secure (high entropy), and has a compatible design for low-sensitive (social sites) to more sensitive (banking apps). Through extensive experiments with 32 participants, PassNum achieved 98% accuracy with 10 s login time (average scores) and 100% memorability (cumulative scores). Furthermore, the 4th variation of PassNum proves to be 100% resilient against even recurring (3 repeated login sessions) recorded shoulder surfing attacks. Our qualitative survey revealed that PassNum might be the prime replacement for conventional PIN and password methods. [ABSTRACT FROM AUTHOR]
– Name: AbstractSuppliedCopyright
  Label:
  Group: Ab
  Data: <i>Copyright of Behaviour & Information Technology is the property of Taylor & Francis Ltd and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.)
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=pbh&AN=189082130
RecordInfo BibRecord:
  BibEntity:
    Identifiers:
      – Type: doi
        Value: 10.1080/0144929X.2025.2469665
    Languages:
      – Code: eng
        Text: English
    PhysicalDescription:
      Pagination:
        PageCount: 27
        StartPage: 4220
    Subjects:
      – SubjectFull: Data security
        Type: general
      – SubjectFull: Repeated measures design
        Type: general
      – SubjectFull: Graphical user interfaces
        Type: general
      – SubjectFull: T-test (Statistics)
        Type: general
      – SubjectFull: Data analysis
        Type: general
      – SubjectFull: Research funding
        Type: general
      – SubjectFull: Data security failures
        Type: general
      – SubjectFull: Questionnaires
        Type: general
      – SubjectFull: Systems development
        Type: general
      – SubjectFull: Descriptive statistics
        Type: general
      – SubjectFull: Computer graphics
        Type: general
      – SubjectFull: System analysis
        Type: general
      – SubjectFull: Thematic analysis
        Type: general
      – SubjectFull: Analysis of variance
        Type: general
      – SubjectFull: Statistics
        Type: general
      – SubjectFull: Software architecture
        Type: general
      – SubjectFull: Data analysis software
        Type: general
      – SubjectFull: Cognition
        Type: general
    Titles:
      – TitleFull: PassNum: A usable and secure method against repeated shoulder surfing.
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: Ahmad, Awais
      – PersonEntity:
          Name:
            NameFull: Asif, Muhammad
      – PersonEntity:
          Name:
            NameFull: Hamid, Isma
      – PersonEntity:
          Name:
            NameFull: Aljuaid, Hanan
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 15
              M: 10
              Text: Oct2025
              Type: published
              Y: 2025
          Identifiers:
            – Type: issn-print
              Value: 0144929X
          Numbering:
            – Type: volume
              Value: 44
            – Type: issue
              Value: 17
          Titles:
            – TitleFull: Behaviour & Information Technology
              Type: main
ResultId 1