Towards Baselines for Shoulder Surfing on Mobile Authentication
Now you see me, now you don't: protecting smartphone authentication from shoulder surfers