Touch and you’re trapp(ck)ed: quantifying the uniqueness of touch gestures for tracking

Rahat Masood, Benjamin Zi Hao Zhao, Hassan Jameel Asghar, Mohamed Ali Kaafar

Research output: Contribution to journalArticlepeer-review

91 Downloads (Pure)

Abstract

We argue that touch-based gestures on touchscreen devices enable the threat of a form of persistent and ubiquitous tracking which we call touch-based tracking. Touch-based tracking goes beyond the tracking of virtual identities and has the potential for cross-device tracking as well as identifying multiple users using the
same device. We demonstrate the likelihood of touch-based tracking by focusing on touch gestures widely used to interact with touch devices such as swipes and
taps.. Our objective is to quantify and measure the information carried by touch-based gestures which may lead to tracking users. For this purpose, we develop an information theoretic method that measures the amount of information about users leaked by gestures when modelled as feature vectors. Our methodology allows us to evaluate the information leaked by individual features of gestures, samples of gestures, as well as samples of combinations of gestures. Through our purposebuilt app, called TouchTrack, we gather gesture samples from 89 users, and demonstrate that touch gestures contain sufficient information to uniquely identify and track users. Our results show that writing samples (on a touch pad) can reveal 73.7% of information (when measured in bits), and left swipes can reveal up to 68.6% of information. Combining different combinations of gestures results in higher uniqueness, with the combination of keystrokes, swipes and writing revealing up to 98.5% of information about users. We further show that, through our methodology, we can correctly re-identify returning
users with a success rate of more than 90%.
Original languageEnglish
Pages (from-to)122–142
Number of pages21
JournalProceedings on Privacy Enhancing Technologies
Volume2018
Issue number2
DOIs
Publication statusPublished - 2018

Bibliographical note

Version archived for private and non-commercial use with the permission of the author/s and according to publisher conditions. For further rights please contact the publisher.

Keywords

  • implicit tracking
  • mobile privacy
  • touch gestures
  • user profiling
  • risk quantification

Fingerprint

Dive into the research topics of 'Touch and you’re trapp(ck)ed: quantifying the uniqueness of touch gestures for tracking'. Together they form a unique fingerprint.

Cite this