Comparative Analysis of Usability and Security Performance of Android Graphical Authentication Mechanisms

References

[1] Alsuhibany, S. A. (2021). A Camouflage Text-Based Password Approach for Mobile Devices against Shoulder-Surfing Attack. Security and Communication Networks, 2021. https://doi.org/10.1155/2021/6653076

[2] Alqahtani, F., & Mohammad, R. (2020). Usability and security evaluation of graphical password authentication methods. International Journal of Advanced Computer Science and Applications, 11(6), 451–460. https://doi.org/10.14569/IJACSA.2020.0110657

[3] Andriotis, P., Oikonomou, G., Mylonas, A., & Tryfonas, T. (2016). A study on usability and security features of the Android pattern lock screen. Information and Computer Security, 24(1), 53–72. https://doi.org/10.1108/ICS-01-2015-0001

[4] Aviv, A. J., Gibson, K., Mossop, E., Blaze, M., & Smith, J. M. (2010). Smudge attacks on smartphone touch screens. Proceedings of the 4th USENIX Workshop on Offensive Technologies, 1–7.

[5] Bryant, K., & Campbell, J. (2006). User Behaviours Associated with Password Security and Management. Australasian Journal of Information Systems, 14(1). https://doi.org/10.3127/ajis.v14i1.9

[6] Card, S. K., Moran, T. P., & Newell, A. (1983). The psychology of human-computer interaction. Lawrence Erlbaum Associates.

[7] Coventry, L., De Angeli, A., & Johnson, G. (2003). Usability and biometric verification at the ATM interface. Conference on Human Factors in Computing Systems - Proceedings, 153–160. https://doi.org/10.1145/642611.642639

[8] Creswell, J. W., & Creswell, J. D. (2022). Research Design: Qualitative, Quantitative, and Mixed Methods Approaches (6th ed.). Sage Publications.

[9] Devika, S., & Backiyalakshmi, R. (2014). Design and Analysis of User Identification for Graphical Password System. 5(1), 486–489.

[10] Dunphy, P., & Yan, J. (2007). Do background images improve “draw a secret” graphical passwords? Proceedings of the ACM Conference on Computer and Communications Security, 36–47. https://doi.org/10.1145/1315245.1315252

[11] Findling, R. D., & Mayrhofer, R. (2013). Towards secure personal device unlock using stereo camera pan shots. Lecture Notes in Computer Science (Including Subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 8112 LNCS (PART 2), 417–425. https://doi.org/10.1007/978-3-642-53862-9_53

[12] Golla, M., Dürmuth, M., & Karame, G. (2017). On the security of smartphone unlock patterns. Proceedings of the ACM SIGSAC Conference on Computer and Communications Security, 37–52. https://doi.org/10.1145/3133956.3133982

[13] Harbach, M., De Luca, A., & Egelman, S. (2016). The anatomy of smartphone unlocking a field study of android lock screens. Conference on Human Factors in Computing Systems - Proceedings, 4806–4817. https://doi.org/10.1145/2858036.2858267

[14] Nielsen, J. (1993). Usability engineering. Academic Press

[15] Preußner, J., Rudnik, Y., Brehm, H., Völkl, R., & Glatzel, U. (2009). Original Research Article. International Journal of Plasticity, 25(5), 973–994. http://www.sciencedirect.com/science/article/pii/S074964190800065X

[16] Real User Corporation, Passfaces TM http://www.realuser.com, Accessed on January 2007.

[17] Robert, B., Chiasson, S., & Van Oorschot, P. C. (2012). Graphical passwords: Learning from the first twelve years. ACM Computing Surveys, 44(4). https://doi.org/10.1145/2333112.2333114

[18] Shammee, T. I., Akter, T., Mou, M., Chowdhury, F., & Ferdous, M. S. (2020). A Systematic Literature Review of Graphical Password Schemes. Journal of Computing Science and Engineering, 16(4), 163–185. https://doi.org/10.5626/JCSE.2020.14.4.163

[19] Syukri, A. F., Okamoto, E., & Mambo, M. (1998). A user identification system using signature written with mouse. Lecture Notes in Computer Science (Including Subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 1438(January 1998), 403–414. https://doi.org/10.1007/bfb0053751

[20] Uellenbeck, S., Dürmuth, M., Wolf, C., & Holz, T. (2013). Quantifying the security of graphical passwords: The case of Android unlocks patterns. Proceedings of the ACM Conference on Computer and Communications Security, 161–172. https://doi.org/10.1145/2508859.2516700

[21] Umar Suru, H., & Murano, P. (2019). Security and User Interface Usability of Graphical Authentication Systems – A Review. International Journal of Computer Trends and Technology, 67(2), 17–36. https://doi.org/10.14445/22312803/ijctt-v67i2p104

[22] Yahia, H. S., Zeebaree, S. R. M., Sadeeq, M. A. M., Salim, N. O. M., Kak, S. F., AL-Zebari, A., Salih, A. A., & Hussein, H. A. (2021). Comprehensive Survey for Cloud Computing Based Nature-Inspired Algorithms Optimization Scheduling. Asian Journal of Research in Computer Science, 8(2), 1–16. https://doi.org/10.9734/ajrcos/2021/v8i230195

[23] Zhang, Z., Wu, D., Li, L., & Gao, D. (2022). On the Usability (In)Security of In-App Browsing Interfaces in Mobile Apps. arXiv. https://arxiv.org/abs/2209.01568

@article{1718702,
      author = {Umar Isah, Hassan Umar Suru, Hussani Umar Suru},
      title = {Comparative Analysis of Usability and Security Performance of Android Graphical Authentication Mechanisms},
      journal = {Iconic Research And Engineering Journals},
      year = {2026},
      volume = {9},
      number = {12},
      pages = {717-731},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1718702.pdf},
      abstract = {Mobile authentication systems play a critical role in protecting sensitive information stored on smartphones and other portable devices. Among graphical authentication methods, Android Pattern Lock has gained widespread adoption because of its simplicity and ease of use. However, concerns regarding usability, predictability, and vulnerability to observation attacks continue to raise questions about its effectiveness. This study presents a comparative usability and security analysis of Android Pattern Lock and the Draw-A-Secret (DAS) graphical password scheme based on human characteristics. The study also evaluates the impact of visible and invisible joining node configurations on authentication performance. A mixed-method approach involving questionnaire-based evaluation and experimental analysis was adopted. Data were collected from 60 participants using usability metrics such as authentication time, login success rate, error rate, and perceived ease of use, alongside security metrics including password space, resistance to shoulder surfing, and observability. The results indicate that Android Pattern Lock provides superior usability performance, while DAS demonstrates stronger theoretical security. Visible joining nodes significantly improved usability, whereas invisible joining nodes enhanced perceived security by reducing observation-based vulnerabilities. The findings confirm the existence of a usability and security trade-off in graphical authentication systems and highlight the importance of human-centered considerations in authentication design. The study recommends that mobile authentication mechanisms should balance usability and security to improve both user experience and protection.},
      keywords = {Android Pattern Lock, Draw-A-Secret, Graphical Passwords, Usability, Security, Human Characteristics, Mobile Authentication},
      month = {June},
      doi = {https://doi.org/10.64388/IREV9I12-1718702}
  }