Towards a Secured Authentication Based on an Online Double Serial Adaptive Mechanism of Users' Keystroke Dynamics

Password based applications are commonly used in our daily lives such as the social networks, e-mails, e-commerce, and e-banking. Given the increasing number of hacker attacks, the only use of passwords is not enough to protect personal data and does not meet usability requirements. Keystroke dynamics is a promising solution that decreases the vulnerability of passwords to guessing attacks by analyzing the typing manner of the user. Despite its efficiency in the discrimination between users, it remains non-industrialized essentially due to the tedious learning phase and the intra-class variation of the users' characteristics. In this paper, we propose a double serial mechanism to adapt the user's model over time. An important property of the proposed solution relies in its usability as we only use a single sample as user's reference during the account creation. We demonstrate that the proposed method offers competitive performances while keeping a high usability.

[1]  Blase Ur,et al.  Measuring Real-World Accuracies and Biases in Modeling Password Guessability , 2015, USENIX Security Symposium.

[2]  Roy A. Maxion,et al.  Comparing anomaly-detection algorithms for keystroke dynamics , 2009, 2009 IEEE/IFIP International Conference on Dependable Systems & Networks.

[3]  Sungzoon Cho,et al.  Keystroke dynamics identity verification - its problems and practical solutions , 2004, Comput. Secur..

[4]  Baptiste Hemery,et al.  Unconstrained keystroke dynamics authentication with shared secret , 2011, Comput. Secur..

[5]  Alice F. Healy,et al.  A cognitive modeling account of simultaneous learning and fatigue effects , 2011, Cognitive Systems Research.

[6]  André Carlos Ponce de Leon Ferreira de Carvalho,et al.  Adaptive approaches for keystroke dynamics , 2015, 2015 International Joint Conference on Neural Networks (IJCNN).

[7]  Christophe Rosenberger,et al.  Hybrid template update system for unimodal biometric systems , 2012, 2012 IEEE Fifth International Conference on Biometrics: Theory, Applications and Systems (BTAS).

[8]  Andrey Makrushin,et al.  Automatic Template Update Strategies for Biometrics , 2007 .

[9]  Christophe Rosenberger,et al.  Keystroke template update with adapted thresholds , 2016, 2016 2nd International Conference on Advanced Technologies for Signal and Image Processing (ATSIP).

[10]  Gian Luca Marcialis,et al.  Template Update Methods in Adaptive Biometric Systems: A Critical Review , 2009, ICB.

[11]  Gian Luca Marcialis,et al.  Capturing large intra-class variations of biometric data by template co-updating , 2008, 2008 IEEE Computer Society Conference on Computer Vision and Pattern Recognition Workshops.

[12]  Ana Carolina Lorena,et al.  A systematic review on keystroke dynamics , 2013, Journal of the Brazilian Computer Society.

[13]  Christophe Rosenberger,et al.  GREYC keystroke: A benchmark for keystroke dynamics biometric systems , 2009, 2009 IEEE 3rd International Conference on Biometrics: Theory, Applications, and Systems.

[14]  Clayton Charles Epp,et al.  Identifying emotional states through keystroke dynamics , 2010 .

[15]  Vir V. Phoha,et al.  Scan-Based Evaluation of Continuous Keystroke Authentication Systems , 2013, IT Professional.

[16]  Mohammad S. Obaidat,et al.  Verification of computer users using keystroke dynamics , 1997, IEEE Trans. Syst. Man Cybern. Part B.

[17]  Blase Ur,et al.  Measuring password guessability for an entire university , 2013, CCS.

[18]  Christophe Rosenberger,et al.  Web-Based Benchmark for Keystroke Dynamics Biometric Systems: A Statistical Analysis , 2012, 2012 Eighth International Conference on Intelligent Information Hiding and Multimedia Signal Processing.

[19]  Gian Luca Marcialis,et al.  Replacement Algorithms for Fingerprint Template Update , 2008, ICIAR.

[20]  Gian Luca Marcialis,et al.  Biometric system adaptation by self-update and graph-based techniques , 2013, J. Vis. Lang. Comput..

[21]  Josef Kittler,et al.  Model and Score Adaptation for Biometric Systems: Coping With Device Interoperability and Changing Acquisition Conditions , 2010, 2010 20th International Conference on Pattern Recognition.

[22]  Upadhyaya Shambhu,et al.  Adaptive techniques for intra-user variability in keystroke dynamics , 2016 .

[23]  Blase Ur,et al.  Can long passwords be secure and usable? , 2014, CHI.

[24]  Jean-Yves Ramel,et al.  User Classification for Keystroke Dynamics Authentication , 2007, ICB.

[25]  Gian Luca Marcialis,et al.  Template Co-update in Multimodal Biometric Systems , 2007, ICB.

[26]  Sungzoon Cho,et al.  Continual Retraining of Keystroke Dynamics Based Authenticator , 2007, ICB.

[27]  Md. Kamrul Hasan,et al.  Identifying emotion by keystroke dynamics and text pattern analysis , 2014, Behav. Inf. Technol..

[28]  Robert Sabourin,et al.  Context-Sensitive Self-Updating for Adaptive Face Recognition , 2015 .

[29]  André Carlos Ponce de Leon Ferreira de Carvalho,et al.  Enhanced template update: Application to keystroke dynamics , 2016, Comput. Secur..

[30]  Roy A. Maxion,et al.  Why Did My Detector Do That?! - Predicting Keystroke-Dynamics Error Rates , 2010, RAID.

[31]  Gian Luca Foresti,et al.  Biometric template update under facial aging , 2014, 2014 IEEE Symposium on Computational Intelligence in Biometrics and Identity Management (CIBIM).

[32]  Gian Luca Marcialis,et al.  Analysis of unsupervised template update in biometric recognition systems , 2014, Pattern Recognit. Lett..

[33]  Fabio Roli,et al.  Critical analysis of adaptive biometric systems , 2012, IET Biom..