Screen-analysis based device security

A method comprising:

• determining that a mobile device is located at a trusted location;
• capturing information from a session, the information coming from content rendered by a mobile application running on the mobile device during the session;
• generating feature vectors for the session;
• repeating the capturing and determining until a training criteria is met;
• training a classification model using at least some of the feature vectors;
• and
• authenticating a user of the mobile device using the trained classification model.

A mobile device comprising:

• at least one processor;
• and
• memory storing instructions that, when executed by the at least one processor, cause the mobile device to:
• identify content rendered by a mobile application, the content being rendered during a session,
• generate feature vectors from the content,
• apply a classification model to the feature vectors,
• determine whether the feature vectors match a first user profile based on application of the classification model, the first user profile differing from a second user profile, the mobile device being currently associated with the second user profile, and
• initiate a profile switch responsive to determining that the feature vectors match the first user profile.