Shoulder Surfing Protection
Introduction¶
Shoulder Surfing Protection in Guacamole detects when unauthorized individuals are viewing your screen over your shoulder. When enabled, the system can automatically block the screen or alert you to protect sensitive information from prying eyes.
Understanding Shoulder Surfing¶
What is Shoulder Surfing?¶
Shoulder surfing occurs when someone views your screen without authorization:
- Physical Proximity: Someone standing behind you
- Peripheral Viewing: Co-worker glancing at your screen
- Intentional Spying: Deliberate attempt to view sensitive data
- Casual Observation: Unintentional viewing in public spaces
Why Protection Matters¶
Shoulder surfing can expose:
- Confidential business data
- Personal information
- Login credentials
- Financial information
- Private communications
How It Works¶
Detection Technology¶
Guacamole uses facial recognition to detect multiple faces:
- Continuous Monitoring: Camera scans for faces
- Face Counting: Detects when more than one face is visible
- User Identification: Distinguishes authorized users from others
- Position Analysis: Determines if faces are viewing the screen
Detection Scenarios¶
| Scenario | Action |
|---|---|
| Only authorized user visible | Normal operation |
| Unknown face detected behind user | Trigger protection |
| Multiple authorized users | Configurable response |
| User looks away but others present | Trigger protection |
Enabling Shoulder Surfing Protection¶
Basic Setup¶
- Open Guacamole Quick Menu
- Toggle Shoulder Surfing Button
- Configure response action by clicking the button
- Save settings
Protection Modes¶
Notify Me¶
Notifies you without blocking the screen.
Configuration:
- Display warning icon in system tray
- Optional audible alert
- Log the event
Best For:
- Open office environments
- Training and awareness
- Low-security situations
Lock Screen¶
Activates full block screen when detected.
Configuration:
- Full screen overlay
- Requires authentication to clear
- Logs security event
Best For:
- High-security environments
- Sensitive data handling
- Compliance requirements
Use Cases¶
Open Office Environment¶
Challenge: Colleagues frequently walk by.
Configuration:
- Mode: Notify Me
Working with Sensitive Data¶
Challenge: Handling confidential information.
Configuration:
- Mode: Lock Screen
Public Spaces (Cafes, Airports)¶
Challenge: Unknown people constantly nearby.
Configuration:
- Mode: Lock Screen
Integration with Block Screen¶
Combined Protection¶
Shoulder surfing protection works with the block screen:
- Same block screen appearance
- Same unlock methods
- Unified security logging
- Consistent user experience
Priority Handling¶
When multiple triggers occur:
- User absence always blocks
- Shoulder surfing blocks if user present but others detected
- Screen unblocks only when authorized user alone
Best Practices¶
Workspace Setup¶
- Camera Position: Face camera toward entry points
- Desk Location: Back to wall if possible
- Monitor Angle: Reduce viewing angles for others
- Privacy Screens: Combine with physical privacy filters
Security Recommendations¶
- Use Lock Screen mode for sensitive work
- Review logs regularly
- Train users on the feature
- Test detection periodically
Troubleshooting¶
Too Many False Alarms¶
Symptoms: Protection triggers frequently without actual threats.
Solutions:
1. Adjust camera angle
2. Use Alert mode instead of Block
Not Detecting Threats¶
Symptoms: People can view screen without triggering protection.
Solutions:
1. Verify feature is enabled
2. Check camera is working
3. Ensure adequate lighting
Privacy Considerations¶
What Data is Collected¶
Shoulder surfing protection:
- Analyzes camera feed in real-time
- Does not store images of non-authorized faces
- Logs detection events (time, response)
- Does not identify unknown individuals
Compliance Notes¶
For organizations:
- Inform users of monitoring
- Include in privacy policy
- Consider local regulations
- Document security measures