{'fraction_non_alphanumeric': 0.02096177558569667, 'fraction_numerical': 0.0, 'mean_word_length': 5.059701492537314, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
The Case for Replacing Passwords with Biometrics

The threat of malware and phishing is engulfing the web. It is expected to be an even greater threat in the mobile context, as battery power limitations and the lack of screen real estate of handsets tie the hands of anti-virus methods and user messaging methods, and people’s continuous handset connectivity makes them more vulnerable to abuse. This paper argues that biometric methods, such as fingerprinting methods, could address a large part of this towering threat but only if properly architected. We describe an architecture that is practically attainable and which would address the problem in a meaningful way, and argue that this is a promising direction – both in terms of security and usability. Keywords-authentication; biometrics; fraud; malware.