Get 20M+ Full-Text Papers For Less Than $1.50/day. Start a 14-Day Trial for You or Your Team.

Learn More →

Touch and You’re Trapp(ck)ed: Quantifying the Uniqueness of Touch Gestures for Tracking

Touch and You’re Trapp(ck)ed: Quantifying the Uniqueness of Touch Gestures for Tracking AbstractWe argue that touch-based gestures on touch-screen devices enable the threat of a form of persistent and ubiquitous tracking which we call touch-based tracking. Touch-based tracking goes beyond the tracking of virtual identities and has the potential for cross-device tracking as well as identifying multiple users using the same device. We demonstrate the likelihood of touch-based tracking by focusing on touch gestures widely used to interact with touch devices such as swipes and taps.. Our objective is to quantify and measure the information carried by touch-based gestures which may lead to tracking users. For this purpose, we develop an information theoretic method that measures the amount of information about users leaked by gestures when modelled as feature vectors. Our methodology allows us to evaluate the information leaked by individual features of gestures, samples of gestures, as well as samples of combinations of gestures. Through our purpose-built app, called TouchTrack, we gather gesture samples from 89 users, and demonstrate that touch gestures contain sufficient information to uniquely identify and track users. Our results show that writing samples (on a touch pad) can reveal 73.7% of information (when measured in bits), and left swipes can reveal up to 68.6% of information. Combining different combinations of gestures results in higher uniqueness, with the combination of keystrokes, swipes and writing revealing up to 98.5% of information about users. We further show that, through our methodology, we can correctly re-identify returning users with a success rate of more than 90%. http://www.deepdyve.com/assets/images/DeepDyve-Logo-lg.png Proceedings on Privacy Enhancing Technologies de Gruyter

Touch and You’re Trapp(ck)ed: Quantifying the Uniqueness of Touch Gestures for Tracking

Download PDF
21 pages

Loading next page...
 
/lp/de-gruyter/touch-and-you-re-trapp-ck-ed-quantifying-the-uniqueness-of-touch-UiGYpRISWF
Publisher
de Gruyter
Copyright
© 2018 Rahat Masood et al., published by De Gruyter Open
ISSN
2299-0984
eISSN
2299-0984
DOI
10.1515/popets-2018-0016
Publisher site
See Article on Publisher Site

Abstract

AbstractWe argue that touch-based gestures on touch-screen devices enable the threat of a form of persistent and ubiquitous tracking which we call touch-based tracking. Touch-based tracking goes beyond the tracking of virtual identities and has the potential for cross-device tracking as well as identifying multiple users using the same device. We demonstrate the likelihood of touch-based tracking by focusing on touch gestures widely used to interact with touch devices such as swipes and taps.. Our objective is to quantify and measure the information carried by touch-based gestures which may lead to tracking users. For this purpose, we develop an information theoretic method that measures the amount of information about users leaked by gestures when modelled as feature vectors. Our methodology allows us to evaluate the information leaked by individual features of gestures, samples of gestures, as well as samples of combinations of gestures. Through our purpose-built app, called TouchTrack, we gather gesture samples from 89 users, and demonstrate that touch gestures contain sufficient information to uniquely identify and track users. Our results show that writing samples (on a touch pad) can reveal 73.7% of information (when measured in bits), and left swipes can reveal up to 68.6% of information. Combining different combinations of gestures results in higher uniqueness, with the combination of keystrokes, swipes and writing revealing up to 98.5% of information about users. We further show that, through our methodology, we can correctly re-identify returning users with a success rate of more than 90%.

Journal

Proceedings on Privacy Enhancing Technologies – de Gruyter

Published: Apr 1, 2018

References

  • Keystroke dynamics - based user authentication using long and free text strings from various input devices
    Kang
  • Keystroke - based User Identification on Smart Phones pdf pages
    Zahid
  • On the applicability of touchscreen input as a behavioral biometric for continuous authentication on and
    Frank
  • How Unique Is Your Browser of the PETS pages
    Eckersley
  • sensed it was you : Authenticating mobile users with sensor - enhanced keystroke dynamics in including subseries in and in
    Giuffrida
  • Implicit authentication through learning user behavior in including subseries in and in
    Shi
  • Fingerprinting Mobile Devices Using Personalized Proceedings on
    Kurtz
  • On optimal data based histograms
    Scott
  • Why Johnny Can t Browse in On the Uniqueness of Web Browsing Patterns th Workshop on Hot Topics in Privacy pages
    Olejnik
  • Keystroke dynamics - based user authentication using long and free text strings from various input devices
    Kang
  • Source smartphone identification using sensor pattern noise and wavelet transform th International Conference on Imaging for Crime Detection and Prevention
    Corripio
  • Mobile Device Identification via Sensor Fingerprinting arXiv preprint arXiv
    Bojinov
  • Simple demographics often identify people uniquely University Data Privacy Working Paper Pittsburgh pages
    Sweeney
  • Beauty and the Beast : Diverting Modern Web Browsers to Build Unique Browser Fingerprints on and pages
    Laperdrix
  • Secure Unlocking of Mobile Touch Screen Devices by Simple Gestures You can see it but you can not do it of page
    Shahzad
  • Beauty and the Beast : Diverting Modern Web Browsers to Build Unique Browser Fingerprints on and pages
    Laperdrix
  • User - generated free - form gestures for authentication memorability InProceedings of the th annual international conference on Mobile systems applications and services pages
    Sherman
  • sensed it was you : Authenticating mobile users with sensor - enhanced keystroke dynamics in including subseries in and in
    Giuffrida
  • On optimal data based histograms
    Scott
  • On the applicability of touchscreen input as a behavioral biometric for continuous authentication on and
    Frank
  • can be You : Questioning the use of Keystroke Dynamics as th Annual Network and Distributed System Security pages
    Gupta
  • Fingerprinting and Tracking on the Web Privacy Implications Network and Distributed System pages
    Yen
  • How Unique Is Your Browser of the PETS pages
    Eckersley
  • Implicit authentication through learning user behavior in including subseries in and in
    Shi
  • Unobtrusive user - authentication on mobile phones using biometric gait recognition Proceedings th International Conference on Intelligent Information and Processing pages
    Derawi
  • Why Johnny Can t Browse in On the Uniqueness of Web Browsing Patterns th Workshop on Hot Topics in Privacy pages
    Olejnik
  • Keystroke dynamics authentication for mobile phones Proceedings of the on SAC pages
    Maiorana
  • Imperfections of Accelerometers Make Smartphones Network and Distributed System
    Dey
  • Simple demographics often identify people uniquely University Data Privacy Working Paper Pittsburgh pages
    Sweeney
  • You are how you touch : User verification on smartphones via tapping behaviors Proceedings - International Conference on Network Protocols pages
    Zheng
  • Touch gestures based biometric authentication scheme for touchscreen mobile phones in including subseries in and in
    Meng
  • Source smartphone identification using sensor pattern noise and wavelet transform th International Conference on Imaging for Crime Detection and Prevention
    Corripio
  • Continuous mobile authentication using a novel Graphic Touch Feature th International Conference on Theory Applications Systems
    Zhao
  • Towards Continuous and Passive Authentication via Touch An Experimental Study on Smartphones SOUPS Proceedings of the Tenth Symposium On Usable Privacy and pages
    Xu
  • how you answer me transparently authenticating the user of a smartphone when answering or placing a call Proceedings of the th on Communications pages
    Conti
  • You are how you touch : User verification on smartphones via tapping behaviors Proceedings - International Conference on Network Protocols pages
    Zheng
  • Continuous mobile authentication using a novel Graphic Touch Feature th International Conference on Theory Applications Systems
    Zhao
  • Silent User Identification via Dynamics of Touch and Movement Behavioral page
    Bo
  • User - generated free - form gestures for authentication memorability InProceedings of the th annual international conference on Mobile systems applications and services pages
    Sherman
  • Unobtrusive user - authentication on mobile phones using biometric gait recognition Proceedings th International Conference on Intelligent Information and Processing pages
    Derawi
  • how you answer me transparently authenticating the user of a smartphone when answering or placing a call Proceedings of the th on Communications pages
    Conti
  • How much is too much ? leveraging ads audience estimation to evaluate public profile uniqueness on pages
    Chen
  • Keystroke dynamics authentication for mobile phones Proceedings of the on SAC pages
    Maiorana
  • Remote physical device fingerprinting on and
    Kohno
  • Acoustic Fingerprinting Revisited : Generate Stable Device ID Stealthily with Inaudible Sound Proceedings of the Conference on Computer and Communications pages
    Zhou
  • can be You : Questioning the use of Keystroke Dynamics as th Annual Network and Distributed System Security pages
    Gupta
  • Secure Unlocking of Mobile Touch Screen Devices by Simple Gestures You can see it but you can not do it of page
    Shahzad
  • Chaffey How many connected devices do consumers use today http www smartinsights com traffic buildingstrategy integrated marketing communications many connected devices use today chartoftheday
  • Das Poster Fingerprinting Smartphones Through Speaker th on pages
    Borisov
  • bae - Based Authentication can the system accurately distinguish between
    Sae
  • bae - Based Authentication can the system accurately distinguish between
    Sae
  • Predicting user traits from a snapshot of apps installed on a smartphone Mobile Communications
    Seneviratne
  • The leaking battery privacy analysis of the HTML battery status API in including subseries in and in
    Olejnik
  • How unique and traceable are usernames on pages
    Perito
  • Das Poster Fingerprinting Smartphones Through Speaker th on pages
    Borisov
  • Tracking Mobile Web Users Through Motion Attacks Defenses
    Das
  • The leaking battery privacy analysis of the HTML battery status API in including subseries in and in
    Olejnik
  • Touch gestures based biometric authentication scheme for touchscreen mobile phones in including subseries in and in
    Meng
  • Acoustic Fingerprinting Revisited : Generate Stable Device ID Stealthily with Inaudible Sound Proceedings of the Conference on Computer and Communications pages
    Zhou
  • Silent User Identification via Dynamics of Touch and Movement Behavioral page
    Bo
  • Chaffey How many connected devices do consumers use today http www smartinsights com traffic buildingstrategy integrated marketing communications many connected devices use today chartoftheday
  • Towards Continuous and Passive Authentication via Touch An Experimental Study on Smartphones SOUPS Proceedings of the Tenth Symposium On Usable Privacy and pages
    Xu
  • How much is too much ? leveraging ads audience estimation to evaluate public profile uniqueness on pages
    Chen
  • How unique and traceable are usernames on pages
    Perito
  • Imperfections of Accelerometers Make Smartphones Network and Distributed System
    Dey
  • Predicting user traits from a snapshot of apps installed on a smartphone Mobile Communications
    Seneviratne
  • Tracking Mobile Web Users Through Motion Attacks Defenses
    Das
  • Fingerprinting and Tracking on the Web Privacy Implications Network and Distributed System pages
    Yen
  • Remote physical device fingerprinting on and
    Kohno
  • Fingerprinting Mobile Devices Using Personalized Proceedings on
    Kurtz
  • Keystroke - based User Identification on Smart Phones pdf pages
    Zahid
  • Mobile Device Identification via Sensor Fingerprinting arXiv preprint arXiv
    Bojinov