Touchalytics: On the applicability of touchscreen input as a behavioral biometric for continuous authentication

IEEE Transactions on Information Forensics and Security

Volumn 8, Issue 1, 2013, Pages 136-148

  Frank, Mario ^a   Biedert, Ralf ^b   Ma, Eugene ^a   Martinovic, Ivan ^c   Song, Dawn ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b GERMAN RESEARCH CENTER FOR ARTIFICIAL INTELLIGENCE DFKI   (Germany)

^c UNIVERSITY OF OXFORD   (United Kingdom)

Author keywords

Authentication; biometrics; intrusion detection

Indexed keywords

AUTHENTICATION MECHANISMS; AUTHENTICATION TESTS; BEHAVIORAL PATTERNS; CLASSIFICATION FRAMEWORK; CONTINUOUS AUTHENTICATIONS; EQUAL ERROR RATE; FEATURE SPACE; MULTI-MODAL BIOMETRICS; SYSTEMATIC EXPERIMENT;

BEHAVIORAL RESEARCH; BIOMETRICS; INTRUSION DETECTION; SMARTPHONES; TOUCH SCREENS;

AUTHENTICATION;

EID: 84872116385     PISSN: 15566013     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIFS.2012.2225048     Document Type: Article

References (34)

1. Norton Survey Reveals One in Three Experience Cell Phone Loss, Theft, Norton, Feb. 8, 2011 [Online]. Available: http://www.symantec. com/about/news/release/article.jsp?prid=20110208-01
2. Survey Says 70% Don't Password-Protect Mobiles: Download Free Mobile Toolkit, Sophos Naked Security blog, Aug. 9, 2011 [Online]. Available: http://nakedsecurity.sophos.com/2011/08/09/free-sophosmobile- security-toolkit/
3. A. J. Aviv, K. Gibson, E.Mossop, M. Blaze, and J.M. Smith, "Smudge attacks on smartphone touch screens," in Proc. 4th USENIX Conf. Offensive technologies (WOOT'10), Berkeley, CA, 2010, pp. 1-7 [Online]. Available: http://dl.acm.org/citation.cfm?id=1925004.1925009, USENIX Association
4. Lost and Found: The Challenges of Finding Your Lost or Stolen Phone, Lookout Mobile Security's The Lookout Blog, Jul. 12, 2011 [Online]. Available: http://blog.mylookout.com/blog/2011/07/12/
5. Smart Phones Overtake Client PCs in 2011, Canalys, Feb. 2012 [Online]. Available: http://www.canalys.com/newsroom/smart-honesovertake- client-cs-2011
6. A. Jain, A. Ross, and S. Pankanti, "Biometrics: A tool for information security," IEEE Trans. Inf. Forensics Security, vol. 1, no. 2, pp. 125-143, Jun. 2006. (Pubitemid 43824625)
7. R. V. Yampolskiy and V. Govindaraju, "Behavioural biometrics; a survey and classification," Int. J. Biometrics, vol. 1, no. 1, pp. 81-113, Jun. 2008.
8. M. Derawi, C. Nickel, P. Bours, and C. Busch, "Unobtrusive user-authentication on mobile phones using biometric gait recognition," in Proc. 6th Int. Conf. Intelligent Information Hiding and Multimedia Signal Processing, Oct. 2010, pp. 306-311.
9. R. Spillane, "Keyboard apparatus for personal identification," IBM Tech. Disclosure Bull., vol. 17, no. 3346, 1975.
10. M. S. Obaidat and B. Sadoun, "Keystroke dynamics based authentication," in Biometrics, A. K. Jain, R. Bolle, and S. Pankanti, Eds. New York: Springer, 2002, pp. 213-229.
11. N. Clarke and S. Furnell, "Advanced user authentication for mobile devices," Comput. Security, vol. 26, no. 2, pp. 109-119, 2007. (Pubitemid 46367239)
12. F. Monrose, M. K. Reiter, and S. Wetzel, "Password hardening based on keystroke dynamics," in Proc. 6th ACM Conf. Computer and Communications Security (CCS '99), New York, 1999, pp. 73-82, ACM. (Pubitemid 32213902)
13. R. Joyce and G. Gupta, "Identity authentication based on keystroke latencies," Commun. ACM, vol. 33, no. 2, pp. 168-176, Feb. 1990. (Pubitemid 20657223)
14. J. Koreman, A. C. Morris, D. Wu, S. Jassim, H. Sellahewa, J. Ehlers, G. Chollet, G. Aversano, H. Bredin, S. Garcia-salicetti, L. Allano, B. L. Van, and B. Dorizzi, "Multi-modal biometric authentication on the SecurePhone PDA," in Proc. Multi-Modal User Authentication Workshop, Toulouse, France, 2006.
15. R. Biddle, S. Chiasson, and P. van Oorschot, Graphical Passwords: Learning From the First Generation, School of Computer Science, Carleton University, Tech. Rep. TR-09-09, 2009.
16. K. Niinuma and A. K. Jain, Continuous User Authentication Using Temporal Information, B. V. K. V. Kumar, S. Prabhakar, and A. A. Ross, Eds. Bellingham, WA: SPIE, 2010, vol. 7667, no. 1.
17. H. Saevanee and P. Bhatarakosol, "User authentication using combination of behavioral biometrics over the touchpad acting like touch screen of mobile device," in Proc. Int. Conf. Computer and Electrical Engineering (ICCEE 2008), Dec. 2008, pp. 82-86.
18. M. Pusara and C. E. Brodley, "User re-authentication via mouse movements," in Proc. 2004 ACM Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC '04), NewYork, 2004, pp. 1-8, ACM. (Pubitemid 40821167)
19. Y. Nakkabi, I. Traoré, and A. A. E. Ahmed, "Improving mouse dynamics biometric performance using variance reduction via extractors with separate features," IEEE Trans. Syst.,Man, Cybern. A, vol. 40, no. 6, pp. 1345-1353, Nov. 2010.
20. H. Gamboa and A. Fred, "A behavioral biometric system based on human-computer interaction," in Proc. SPIE, 2004, vol. 5404, pp. 381-381.
21. N. Zheng, A. Paloski, and H. Wang, "An efficient user verification system via mouse movements," in Proc. 18th ACM Conf. Computer and Communications Security (CCS '11), New York, 2011, pp. 139-150, ACM.
22. Z. Jorgensen and T. Yu, "On mouse dynamics as a behavioral biometric for authentication," in Proc. 6th ACM Symp. Information, Computer and Communications Security (ASIACCS '11), New York, 2011, pp. 476-482, ACM.
23. A. Ahmed and I. Traore, "Anomaly intrusion detection based once biometrics," in Proc. 6th Ann. IEEE SMC Information Assurance Workshop, 2005 (IAW '05), Jun. 2005, pp. 452-453. (Pubitemid 43948767)
24. L. L. Lee, T. Berger, and E. Aviczer, "Reliable on-line human signature verification systems," IEEE Trans. Pattern Anal.Mach. Intell., vol. 18, no. 6, pp. 643-647, Jun. 1996. (Pubitemid 126773900)
25. A. K. Jain, F. D. Griess, and S. D. Connell, "On-line signature verification," Pattern Recognit., vol. 35, no. 12, pp. 2963-2972, 2002, Pattern Recognition in Information Systems.
26. J. Fierrez-Aguilar, L. Nanni, J. Lopez-Peñalba, J. Ortega-Garcia, and D. Maltoni, "An on-line signature verification system based on fusion of local and global information," in Proc. 5th Int. Conf. Audio- and Video-Based Biometric Person Authentication (AVBPA'05), 2005, pp. 523-532, Springer. (Pubitemid 41423069)
27. N. Sae-Bae, K. Ahmed, K. Isbister, and N. Memon, "Biometric-rich gestures: A novel approach to authentication on multi-touch devices," in Proc. ACM Ann. Conf. Human Factors in Computing Systems, 2012, pp. 977-986, ACM.
28. A. De Luca, A. Hang, F. Brudy, C. Lindner, and H. Hussmann, "Touch me once and i know it's you!: Implicit authentication based on touch screen patterns," in Proc. ACM Ann. Conf. Human Factors in Computing Systems, 2012, pp. 987-996, ACM.
29. K. V.Mardia and P. E. Jupp, Directional Statistics, ser. Wiley Series in Probability and Statistics. Hoboken, NJ: Wiley, 2000.
30. I. Guyon and A. Elisseeff, "An introduction to variable and feature selection," J. Mach. Learn. Res., vol. 3, pp. 1157-1182, Mar. 2003.
31. J. H. Friedman, J. L. Bentley, and R. A. Finkel, "An algorithm for finding best matches in logarithmic expected time," ACM Trans. Math. Softw., vol. 3, no. 3, pp. 209-226, Sep. 1977.
32. C. Cortes and V. Vapnik, "Support-vector networks," Mach. Learning, vol. 20, pp. 273-297, 1995.
33. B. E. Boser, I. M. Guyon, and V. N. Vapnik, "A training algorithm for optimal margin classifiers," in Proc. 5th Ann. Workshop on Computational Learning Theory (COLT '92), 1992, pp. 144-152, ACM.
34. I. Fischer, C. Kuo, L. Huang, and M. Frank, "Smartphones: Not smart enough?," in Proc. 2nd ACM CCS Workshop on Security and Privacy in Mobile Devices (SPSM '12), New York, 2012.