Publikations-Information

Download

Jasmin Schwab, Alexander Nussbaum, Anastasia Sergeeva, Florian Alt, Verena Distler
What Makes Phishing Simulation Campaigns (Un)Acceptable? A Vignette Experiment
In USEC'25: Proceedings of the Usable Security Mini Conference 2025. February 26, 2025. Internet Society, San Diego, CA, USA. (bib)

Existing gaze-based methods for user identification either require special-purpose visual stimuli or artificial gaze behavior. Here, we explore how users can be differentiated by analyzing natural gaze behavior while freely looking at images. Our approach is based on the observation that looking at different images, for example, a picture from your last holiday, induces stronger emotional responses that are reflected in gaze behavior and, hence, are unique to the person having experienced that situation. We collected gaze data in a remote study ($N=39$) where participants looked at three image categories: personal images, other people's images, and random images from the Internet. We demonstrate the potential of identifying different people using machine learning with an accuracy of 85\%. The results pave the way for a new class of authentication methods solely based on natural human gaze behavior.