Easy to Draw, but Hard to Trace?: On the Observability of Grid-based (Un)lock Patterns
Shoulder Surfing Defence for Recall-based Graphical Passwords