@InProceedings{schwab2025usec, author = {Jasmin Schwab AND Alexander Nussbaum AND Anastasia Sergeeva AND Florian Alt AND Verena Distler}, booktitle = {{Proceedings of the Usable Security Mini Conference 2025}}, title = {{What Makes Phishing Simulation Campaigns (Un)Acceptable? A Vignette Experiment}}, year = {2025}, address = {San Diego, CA, USA}, note = {schwab2025usec}, publisher = {Internet Society}, series = {USEC'25}, abstract = {Existing gaze-based methods for user identification either require special-purpose visual stimuli or artificial gaze behavior. Here, we explore how users can be differentiated by analyzing natural gaze behavior while freely looking at images. Our approach is based on the observation that looking at different images, for example, a picture from your last holiday, induces stronger emotional responses that are reflected in gaze behavior and, hence, are unique to the person having experienced that situation. We collected gaze data in a remote study ($N=39$) where participants looked at three image categories: personal images, other people's images, and random images from the Internet. We demonstrate the potential of identifying different people using machine learning with an accuracy of 85\%. The results pave the way for a new class of authentication methods solely based on natural human gaze behavior.}, doi = {https://dx.doi.org/10.14722/usec.2025.23010}, isbn = {79-8-9894372-5-2}, owner = {florian}, timestamp = {2025.02.26}, url = {http://www.florian-alt.org/unibw/wp-content/publications/schwab2025usec.pdf}, }