Bayesian networks for knowledge-based authentication

IEEE Transactions on Knowledge and Data Engineering

Volumn 19, Issue 5, 2007, Pages 695-710

  Chen, Ye ^a   Liginlal, Divakaran ^a  

^a UNIVERSITY OF WISCONSIN MADISON   (United States)

Author keywords

Bayesian networks; Entropy; Information theory; Knowledge based authentication; Metrics; Security; Simulation

Indexed keywords

ELECTRONIC TRANSACTIONS; KNOWLEDGE-BASED AUTHENTICATION; PROBABILISTIC REASONING; USER AUTHENTICATION;

BAYESIAN NETWORKS; INFORMATION THEORY; KNOWLEDGE BASED SYSTEMS; MAXIMUM LIKELIHOOD ESTIMATION; PARAMETER ESTIMATION; SECURITY SYSTEMS;

AUTHENTICATION;

EID: 33947623081     PISSN: 10414347     EISSN: None     Source Type: Journal    
DOI: 10.1109/TKDE.2007.1024     Document Type: Article

References (58)

1. Who Goes There? Authentcation through the Lens of Privacy, S.T. Kent and L.I. Millett, eds. Nat'l Academies Press, 2003.
2. N.E. Hastings and D.F. Dodson, "Quantifying Assurance of Knowledge Based Authentication," Proc. Third European Conf. Information Warfare and Security (ECIW '04), 2004.
3. K. Cartwright, "Information Sources and Metrics," Proc. KBA Symp. - Knowledge Based Authentication: Is It Quantifiable? 2004.
4. Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (USA PATRIOT) Act of 2001, 107th US Congress, First Session, HR 3162 Public Law 107-45, Oct. 2001.
5. S. Howard, "Knowledge Based Authentication and Privacy: Can Standards Help," Proc. KBA Symp. - Knowledge Based Authentication: Is It Quantifiable? 2004.
6. W.E. Burr, D.F. Dodson, and W.T. Polk, "Electronic Authentication Guideline: Recommendations of the National Institute of Standards and Technology," Nat'l Inst. of Standards and Technology (NIST), NIST Special Publication 800-63, version 1.0.2, 2006.
7. S. Chokhani, "Knowledge Based Authentication (KBA) Metrics," Proc. KBA Symp. - Knowledge Based Authentication: Is It Quantifiable? 2004.
8. B. Lawler, "Models of Knowledge Based Authentication (KBA)," Proc. KBA Symp. - Knowledge Based Authentication: Is It Quantifiable? 2004.
9. A. Adams and M.A. Sasse, "Users Are Not the Enemy," Comm. ACM, vol. 42, no. 12, pp. 40-46, 1999.
10. K. Trilli and B. Andrews, "KBA Challenge Response System," Proc. KBA Symp. - Knowledge Based Authentication: Is It Quantifiable? 2004.
11. "Entrust IdentityGuard - User Authentication Methods," Entrust, May 2006, http://www.entrust.com/strong-authentication/user-authentication/ methods.htm.
12. "Identity Verification and Authentication Solutions," Verid®, May 2006, http://www.verid.com/authentication.html.
13. "VerifyU™," UW Credit Union, May 2006, http://www.uwcu.org/products/webbranch/VerifyU.asp.
14. B. Kaliski, "Future Directions in User Authentication," Proc. IT-DEFENSE '05, 2005.
15. N.A. Willox and T.M. Regan, "Identity Fraud: Providing a Solution," white paper, LexisNexis, 2002, http://www.lexisnexis.com/about/ whitepaper/IdentityFraud.pdf.
16. W. Burr, "NIST E-Authentication Guidance: Can We Add KBA," Proc. KBA Symp. - Knowledge Based Authentication: Is It Quantifiable? 2004.
17. C.E. Shannon, "A Mathematical Theory of Communication," Bell System Technical J., vol. 27, pp. 379-423, July 1948, http://cm.bell-labs. com/cm/ms/what/shannonday/paper.html.
18. C. Cachin, "Entropy Measures and Unconditional Security in Cryptography," ETH Series in Information Security and Cryptography, U. Maurer, ed., vol. 1, Hartung-Gorre Verlag, 1997, http://www.zurich.ibm.com/ ~cca/papers/diss.ps.gz.
19. C.E. Shannon, "Prediction and Entropy of Printed English," Bell System Technical J., vol. 30, no. 1, pp. 50-64, 1951.
20. "The Authentication Scorecard," white paper, RSA Security, 2004, http://www.rsasecurity.com/products/securid/whitepapers/ASC_WP_0904.pdf.
21. K. Murphy, "Are You Sharing Too Much?" Vantage Magazine, voL 2, no. 2, 2005.
22. "Safety and Security Tips: Buying and Selling on Amazon.com," http://www.amazon.com/exec/obidos/tg/browse/-/10412241/ref=br_bx_c_1_2/ 104-9237732-6319118. May 2006.
23. "Managing Your eBay Member Account If You Forgot Your Password," http://pages.ebay.com/help/account/password.html, May 2006.
24. J. Pearl, Probabilistic Reasoning in Intelligent Systems: Networks of Plausible Inference. Morgan Kaufmann, 1988.
25. F.V. Jensen, Bayesian Networks and Decision Graphs. Springer, 2001.
26. D. Heckerman, A. Mamdani, and M.P. Wellman, "Real-World Applications of Bayesian Networks," Comm. ACM, vol. 38, no. 3, pp. 24-26, 1995.
27. M.J. Druzdzel and L.C. van der Gaag, "Building Probabilistic Networks: Where Do the Numbers Come From? Guest Editors' Introduction," IEEE Trans. Knowledge and Data Eng., vol. 12, no. 4, pp. 481-486, July/Aug. 2000.
28. D. Nikovski, "Constructing Bayesian Networks for Medical Diagnosis from Incomplete and Partially Correct Statistics," IEEE Trans. Knowledge and Data Eng., vol. 12, no. 4, pp. 509-516, July/Aug. 2000.
29. S. Viaene, R.A. Derrig, and G. Dedene, "A Case Study of Applying Boosting Naïve Bayes to Claim Fraud Diagnosis," IEEE Trans. and Knowledge Data Eng., vol. 16, no. 5, pp. 612-620, May 2004.
30. D.J. Burroughs, L.F. Wilson, and G.V. Cybenko, "Analysis of Distributed Intrusion Detection Systems Using Bayesian Methods," Proc. 21st IEEE Int'l Performance, Computing, and Comm. Conf. (IPCCC '02), pp. 329-334, 2002.
31. J. Rennie, "iFfle: An Application of Machine Learning to E-Mail Filtering," Proc. Sixth ACM SIGKDD Intl Conf. Knowledge Discovery and Data Mining (KDD '00) Workshop Text Mining, 2000.
32. N. Friedman, D. Geiger, and M. Goldszmidt, "Bayesian Network Classifiers," Machine Learning, vol. 29, no. 2, pp. 131-163, 1997.
33. A. Berger, S.D. Pietra, and V.D. Pietra, "A Maximum Entropy Approach to Natural Language Processing," Computational Linguistics, vol. 22, no. 1, pp. 39-71, 1996.
34. R. Rosenfeld, "A Maximum Entropy Approach to Adaptive Statistical Language Modeling," Computer Speech and Language, vol. 10, no. 3, pp. 187-228, 1996.
35. J. Yan, A. Blackwell, R. Anderson, and A. Grant, "Password Memorability and Security: Empirical Results," IEEE Security and Privacy, vol. 2, no. 5, pp. 25-31, Sept./Oct. 2004.
36. M. Zviran and W.J. Haga, "A Comparison of Password Techniques for Multilevel Authentication Mechanisms," The Computer J., vol. 36, no. 3, pp. 227-237, 1993.
37. C.X. Ling and H. Zhang, "The Representational Power of Discrete Bayesian Networks," J. Machine Learning Research, vol. 3, pp. 709-721, 2003.
38. J. Cheng and R. Greiner, "Learning Bayesian Belief Network Classifiers: Algorithms and System," Proc. 14th Biennial Conf. Canadian Soc. Computational Studies of Intelligence, 2001.
39. J. Cerquides and R.L. de Mántaras, "Tractable Bayesian Learning of Tree Augmented Naïve Bayes Models," Proc. 20th Int'l Conf. Machine Learning (ICML '03), pp. 75-82, 2003.
40. S. Kullback and R.A. Leibler, "On Information and Sufficiency," The Annals of Math. Statistics, vol. 22, no. 1, pp. 79-86, 1951.
41. D.J.C. MacKay, Information Theory, Inference, and Learning Algorithms. Cambridge Univ. Press, 2003, http://www.inference.phy.cam.ac.uk/ mackay/itprnn/ps/.
42. J.L. Massey, "Guessing and Entropy," Proc. IEEE Int'l Symp. Information Theory, 1994.
43. D. Davis, F. Monrose, and M.K. Reiter, "On User Choice in Graphical Password Schemes," Proc. 13th USENIX Security Symp., 2004.
44. F. Monrose, M.K. Reiter, Q. Li, and S. Wetzel, "Using Voice to Generate Cryptographic Keys," Proc. Odyssey 2001, the Speaker Recognition Workshop, 2001.
45. F. Jelinek, R.L. Mercer, L.R. Bahl, and J.K. Baker, "Perplexity - A Measure of Difficulty of Speech Recognition Tasks," Proc. 94th Meeting of the Acoustic Soc. Am., Dec. 1977.
46. J. von Neumann and O. Morgenstern, Theory of Games and Economic Behavior, first ed. Princeton Univ. Press, 1944.
47. J. von Neumann, "Zur Theorie der Gesellschaftsspiele," Mathematische Annalen, vol. 100, no. 1, pp. 295-320, 1928.
48. J.F. Nash, "Equilibrium Points in N-Person Garnes," Proc. Nat'l Academy of Sciences of the USA, vol. 36, no. 1, pp. 48-19, 1950.
49. C. Zhai and J. Lafferty, "A Study of Smoothing Methods for Language Models Applied to Information Retrieval," ACM Trans. Information Systems (TOIS), vol. 22, no. 2, pp. 179-214, 2004
50. Markov Chain Monte Carlo in Practice, W.R. Gilks, S. Richardson, and D.J. Spiegelhalter, eds. Chapman & Hall/CRC, 1996.
51. S. Geman and D. Geman, "Stochastic Relaxation, Gibbs Distributions, and the Bayesian Restoration of Images," IEEE Trans. Pattern Analysis and Machine Intelligence, vol. 6, no. 6, pp. 721-741, 1984.
52. Biometrics: Personal Identification in Networked Society, A.K. Jain, R. Bolle, and S. Pankanti, eds. Kluwer Academic, 1999.
53. "SMILE (Structural Modeling, Inference, and Learning Engine)," Decision Systems Laboratory, Univ. of Pittsburgh, June 2006, http://genie.sis.pitt.edu.
54. E. Karni and P. Mongin, "On the Determination of Subjective Probability by Choices," Management Science, vol. 46, no. 2, pp. 233-248, 2000.
55. C.R. Fox and R.T. Clemen, "Subjective Probability Assessment in Decision Analysis: Partition Dependence and Bias toward the Ignorance Prior," Management Science, vol. 51, no. 9, pp. 1417-1432, 2005.
56. R.L. Winkler, "The Consensus of Subjective Probability Distributions," Management Science, vol. 15, no. 2, pp. 61-75, 1968.
57. J.B. Kadane and P.D. Larkey, "Subjective Probability and the Theory of Games," Management Science, vol. 28, no. 2, pp. 113-120, 1982.
58. J.C. Harsanyi, "Games with Incomplete Information Played by 'Bayesian' Players, III," Management Science, vol. 50, no. 12 supplement, pp. 1804-1817, 2004.