TOKEN: Trustable keystroke-based authentication for web-based applications on smartphones

Communications in Computer and Information Science

Volumn 76 CCIS, Issue , 2010, Pages 286-297

  Nauman, Mohammad ^a   Ali, Tamleek ^b  

^a UNIVERSITY OF PESHAWAR   (Pakistan)

^b Institute of Management Sciences   (Pakistan)

Author keywords

keystroke based identification; privacy; Remote attestation; security

Indexed keywords

COMPUTATIONAL CAPABILITY; KEYSTROKE ANALYSIS; KEYSTROKE DYNAMICS; KEYSTROKE-BASED IDENTIFICATION; PERSONAL INFORMATION; PRIVACY; REMOTE ATTESTATION; SECURE SYSTEM; SECURITY; SENSITIVE DATAS; SMART-PHONES; USER IDENTIFICATION; USER PROFILING; WEB-BASED APPLICATIONS; WEB-BASED SERVICE;

AUTHENTICATION; INTERNET PROTOCOLS; MOBILE DEVICES; PORTABLE EQUIPMENT; WEB SERVICES;

SECURITY OF DATA;

EID: 77957963111     PISSN: 18650929     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-13365-7_28     Document Type: Conference Paper

References (27)

1. Card, S., Moran, T., Newell, A.: Computer text-editing: An information-processing analysis of a routine cognitive skill. Morgan Kaufmann Publishers Inc., San Francisco (1987)
2. Joyce, R., Gupta, G.: Identity authentication based on keystroke latencies (1990)
3. Clarke, N., Furnell, S.: Authenticating mobile phone users using keystroke analysis. International Journal of Information Security 6(1), 1-14 (2007)
4. Karatzouni, S., Clarke, N.: Keystroke Analysis for Thumb-based Keyboards on Mobile Devices. In: International Federation for Information Processing Publications IFIP, vol. 232, p. 253 (2007)
5. Zahid, S., Shahzad, M., Khayam, S., Farooq, M.: Keystroke-based User Identification on Smart Phones. In: 12th International Symposium on Recent Advances in Intrusion Detection (RAID), Symposium on Recent Advances in Intrusion Detection, RAID (September 2009)
6. Cubrilovic, N.: The Anatomy of The Twitter Attack, http://www.techcrunch. com/2009/07/19/the-anatomy-of-the-twitter-attack/
7. Joyce, R., Gupta, G.: Identity authentication based on keystroke latencies. Commun. ACM 33(2), 168-176 (1990)
8. Clarke, N., Furnell, S.: Authenticating mobile phone users using keystroke analysis. International Journal of Information Security 6(1), 1-14 (2007)
9. Karatzouni, S., Clarke, N.: Keystroke Analysis for Thumb-based Keyboards on Mobile Devices. International Federation For Information Processing- Publications-IFIP, vol. 232, p. 253 (2007)
10. Kennedy, J., Eberhart, R.: Particle swarm optimization. In: Proceedings of IEEE International Conference on Neural Networks, vol. 4 (1995)
11. Goldberg, D.: Genetic algorithms in search, optimization and machine learning. Addison-Wesley Longman Publishing Co., Inc., Boston (1989)
12. AdMob Mobile Metrics: January 2010, Mobile Metrics Report (2010), http://metrics.admob.com/wp-content/uploads/2010/02/AdMob-Mobile-Metrics-Jan-10. pdf
13. Freier, A., Karlton, P., Kocher, P.: Secure socket layer 3.0. IETF draft (November 1996)
14. Internet2: Shibboleth: A Project of Internet2 Middleware Initiative (2010), http://shibboleth.internet2.edu/
15. TCG: TCG Specification Architecture Overview v1.2. Technical report, Trusted Computing Group, pp. 11-12 (April 2004)
16. TCG: Trusted Computing Group (2010), http://www.trustedcomputinggroup. org/
17. Pearson, S.: Trusted Computing Platforms: TCPA Technology in Context. Prentice Hall PTR, Upper Saddle River (2002)
18. Challener, D., Yoder, K., Catherman, R., Safford, D., Van Doorn, L.: A Practical Guide to Trusted Computing (2008)
19. Sailer, R., Zhang, X., Jaeger, T., van Doorn, L.: Design and Implementation of a TCG-based Integrity Measurement Architecture. In: SSYM 2004: Proceedings of the 13th conference on USENIX Security Symposium, Berkeley, CA, USA. USENIX Association (2004)
20. Shacham, H.: The Geometry of Innocent Flesh on the Bone: Return-into-libc without Function Calls (on the x86). In: Proceedings of the 14th ACM conference on Computer and Communications Security (CCS 2008), pp. 552-561. ACM, New York (2007)
21. Buchanan, E., Roemer, R., Shacham, H., Savage, S.: When Good Instructions Go Bad: Generalizing Return-oriented Programming to RISC. In: Proceedings of the 15th ACM conference on Computer and Communications Security (CCS 2008), pp. 27-38. ACM, New York (2008)
22. Sadeghi, A.R., Stüble, C.: Property-based Attestation for Computing Platforms: Caring about Properties, not Mechanisms. In: NSPW 2004: Proceedings of the 2004 Workshop on New Security Paradigms, pp. 67-77. ACM Press, New York (2004)
23. Lyle, J.: Trustable Remote Verification of Web Services. In: Chen, L., Mitchell, C.J., Martin, A. (eds.) Trust 2009. LNCS, vol. 5471, p. 153. Springer, Heidelberg (2009)
24. Nauman, M., Alam, M., Ali, T., Zhang, X.: Remote Attestation of Attribute Updates and Information Flows in a UCON System. In: Chen, L., Mitchell, C.J., Martin, A. (eds.) Trust 2009. LNCS, vol. 5471, pp. 63-80. Springer, Heidelberg (2009)
25. Mobile Phone Work Group Mobile Trusted Module Overview Document, http://www.trustedcomputinggroup.org/resources/mobile-phone-work-group-mobile- trusted-module-overview-document
26. IAIK: About IAIK/OpenTC PrivacyCA (2010), http://trustedjava.sourceforge. net/index.php?item=pca/about
27. Google: Android - An Open Handset Alliance Project (2009), http://code.google.com/android/