De-authentication using Ambient Light Sensor

arXiv:2309.12220v2 Announce Type: replace
Abstract: While user authentication happens before initiating or resuming a login session, de-authentication detects the absence of a previously-authenticated user to revoke her currently active login session. The absence of proper de-authentication can lead to well-known lunchtime attacks, where a nearby adversary takes over a carelessly departed user's running login session. The existing solutions for automatic de-authentication have distinct practical limitations, e.g., extraordinary deployment requirements or high initial cost of external equipment.
In this paper, we …

adversary ambient arxiv attacks authentication can cs.cr light sensor login nearby running sensor session well-known