Towards Baselines for Shoulder Surfing on Mobile Authentication
Quantifying the security of graphical passwords: the case of android unlock patterns