Non-intrusive continuous user behaviour analysis using computerized systems


Autoria(s): Messerman, Arik; Mustafic, Tarik; Camtepe, Seyit A.; Albayrak, Sahin
Data(s)

2010

Resumo

There are different ways to authenticate humans, which is an essential prerequisite for access control. The authentication process can be subdivided into three categories that rely on something someone i) knows (e.g. password), and/or ii) has (e.g. smart card), and/or iii) is (biometric features). Besides classical attacks on password solutions and the risk that identity-related objects can be stolen, traditional biometric solutions have their own disadvantages such as the requirement of expensive devices, risk of stolen bio-templates etc. Moreover, existing approaches provide the authentication process usually performed only once initially. Non-intrusive and continuous monitoring of user activities emerges as promising solution in hardening authentication process: iii-2) how so. behaves. In recent years various keystroke dynamic behavior-based approaches were published that are able to authenticate humans based on their typing behavior. The majority focuses on so-called static text approaches, where users are requested to type a previously defined text. Relatively few techniques are based on free text approaches that allow a transparent monitoring of user activities and provide continuous verification. Unfortunately only few solutions are deployable in application environments under realistic conditions. Unsolved problems are for instance scalability problems, high response times and error rates. The aim of this work is the development of behavioral-based verification solutions. Our main requirement is to deploy these solutions under realistic conditions within existing environments in order to enable a transparent and free text based continuous verification of active users with low error rates and response times.

Identificador

http://eprints.qut.edu.au/58476/

Relação

http://www.dai-labor.de/fileadmin/Files/Publikationen/Buchdatei/Arik_Messerman_Future_Security_2010.pdf

Messerman, Arik, Mustafic, Tarik, Camtepe, Seyit A., & Albayrak, Sahin (2010) Non-intrusive continuous user behaviour analysis using computerized systems. In 5th Security Research Conference (Future Security 2010), September 2010, Berlin.

Fonte

School of Electrical Engineering & Computer Science; Information Security Institute; Science & Engineering Faculty

Palavras-Chave #080303 Computer System Security #non-intrusive authentication #behavior biometrics
Tipo

Conference Item