Typing patterns: A key to user identification

IEEE Security and Privacy

Volumn 2, Issue 5, 2004, Pages 40-47

  Peacock, Alen ^a,b   Ke, Xian ^a,c   Wilkerson, Matthew ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^b MIT LINCOLN LABORATORY   (United States)

^c Microsoft's Security Business Unit   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BIOMETRICS; PASSWORD-BASED ACCESS SYSTEMS; USER AUTHENTICATION; USER IDENTIFICATION;

COMPUTER HARDWARE; COMPUTER SOFTWARE; DATA PRIVACY; DATABASE SYSTEMS; DIGITAL COMPUTERS; HUMAN COMPUTER INTERACTION; INFORMATION MANAGEMENT; INFORMATION TECHNOLOGY; PATENTS AND INVENTIONS; PSYCHOLOGY COMPUTING; SECURITY SYSTEMS; USER INTERFACES;

SECURITY OF DATA;

EID: 12844274372     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2004.89     Document Type: Review

References (25)

1. M. Kotadia, "Gates Predicts Death of the Password," CNET News.com, Feb. 2004; http://msn-cnet.com/2100-1029_3-5164733.html.
2. A. Adams and M.A. Sasse, "Users Are Not the Enemy," Comm. ACM, vol. 42, Dec. 1999, pp. 40-46.
3. R. Spillane, "Keyboard Apparatus for Personal Identification," IBM Technical Disclosure Bulletin, vol. 17, no. 3346, 1975.
4. J. Leggett et al., "Dynamic Identity Verification via Keystroke Characteristics," Int'l J. Man-Machine Studies, vol. 35, no. 6, 1991, pp. 859-870.
5. R. Richmond, "Fed up with Fraud," The Wall Street J. Classroom Ed., Apr. 2003; www.wsjclassroomedition. com/archive/03apr/BIGB_retailer.htm/.
6. S. Cho et al., "Web-Based Keystroke Dynamics Identity Verification Using Neural Network," J. Organizational Computing and Electronic Commerce, vol. 10, Dec. 2000, pp. 295-307.
7. M. Tapiador and J.A. Sigüenza, Fuzzy Keystroke Biometrics on Web Security, tech. report, Escuela Técnica Superior de Informática, Univ. Autonoma de Madrid, Cantoblanco, Mar. 2000.
8. A. Peacock, "Learning User Keystroke Latency Patterns," Apr. 2000; http://pel.cs.byu.edu/~alen/personal/CourseWork/cs572/KeystrokePaper/.
9. X. Ke et al., "Keystroke Dynamics; A Software-Based Biometric," 2004; http://web.mit.edu/xke/Public/kd/.
10. D. Song, P. Venable, and A. Perrig, "User Recognition by Keystroke Latency Pattern Analysis," Apr. 1997; http://citeseer.nj.nec.com/ song97user.html.
11. F. Monrose and A.D. Rubin, "Keystroke Dynamics as a Biometric for Authentication," Future Generations Computing Systems, vol. 16, no. 4, 2000, pp. 351-359.
12. F. Monrose, M.K. Reiter, and S. Wetzel, "Password Hardening Based on Keystroke Dynamics," Proc. 6th ACM Conf. Computer and Comm. Security, ACM Press, 1999, pp. 73-82.
13. T. Ord and S.M. Furnell, "User Authentication for Key-pad-Based Devices Using Keystroke Analysis," Proc. 2nd Int'l Network Conf (INC 2000), Inst. of Electrical Eng., 2000, pp. 263-272.
14. N.L. Clarke et al., "Advanced Subscriber Authentication Approaches for Third Generation Mobile Systems," 3rd Int'l Conf. 3G Mobile Comm. Technologies, vol. 489, May 2002, pp. 319-323.
15. G. Forsen, M. Nelson, and R. Staron, Personal Attributes Authentication Techniques, tech. report RADC-TR-77-1033, Griffis Air Force Base, 1977.
16. R. Gaines et al., Authentication by Keystroke Timing: Some Preliminary Results, tech. report R-256-NSF, RAND, 1980.
17. R. Joyce and G. Gupta, "Identity Authentication Based on Keystroke Latencies," Comm. ACM, vol. 33, no. 2, 1990, pp. 168-176.
18. Biopassword Keystroke Dynamics, tech. rep., Net Nanny Software Int'l, 2001.
19. A.J. Mansfield and J.L. Wayman, Best Practices in Testing and Reporting Performance of Biometric Devices, tech. report version 2.0, UK Govt. Biometrics Working Group, Aug. 2002.
20. J. Garcia, Personal Identification Apparatus, US patent number 4,621,334, Washington, DC, 1986.
21. J. Young and R. Hammon, Method and Apparatus for Verifying an Individual's Identity, US patent number 4,805,222, Washington, DC, 1989.
22. Biopassword: Questions and Answers, tech. report, BioNet Systems, 2002; www.biopassword.com/home/FAQs/BP_General_FAQs_112502.pdf.
23. M. Brown and S. Rogers, Method and Apparatus for Ver-ification of a Computer User's Identification, Based on Keystroke Characteristics, US patent number 5,557,686, Washington, DC, 1996.
24. A.G. Zilberman, Security Method and Apparatus Employing Authentication by Keystroke Dynamics, US patent number 6,442,692, Washington, DC, 2002.
25. D.X. Song, D. Wagner, and X. Tian, "Timing Analysis of Keystrokes and Timing Attacks on SSH," 10th Usenix Security Symp., Usenix Assoc., 2001; www. usenix.org/events/sec01/song.html/.