Snoop-forge-replay attacks on continuous verification with keystrokes

IEEE Transactions on Information Forensics and Security

Volumn 8, Issue 3, 2013, Pages 528-541

  Rahman, Khandaker A ^a   Balagani, Kiran S ^b   Phoha, Vir V ^a  

^a LOUISIANA TECH UNIVERSITY   (United States)

^b NEW YORK INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

Biometrics; continuous verification; keystroke dynamics; snooping; spoof attacks

Indexed keywords

DE FACTO STANDARD; ERROR RATE; FORGERY ATTACKS; KEY PARAMETERS; KEYLOGGERS; KEYSTROKE DYNAMICS; SNOOPING; SPOOF ATTACKS; TIME SPAN; VERIFICATION METHOD; VERIFICATION SYSTEMS; VIRTUALIZATION TECHNOLOGIES; VIRTUALIZATIONS;

BIOMETRICS; VIRTUAL REALITY;

EXPERIMENTS;

EID: 84874586100     PISSN: 15566013     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIFS.2013.2244091     Document Type: Article

References (27)

1. D. Gunetti and C. Picardi, "Keystroke analysis of free text," ACM Trans. Inf. Syst. Secur., vol. 8, no. 3, pp. 312-347, Aug. 2005. (Pubitemid 43906388)
2. F. Monrose and A. Rubin, "Authentication via keystroke dynamics," in Proc. 4th ACM Conf. Computer and Commun. Security, NY, USA, 1997, pp. 48-56.
3. P. Dowland, H. Singh, and S. Furnell, "A preliminary investigation of user authentication using continuous keystroke analysis," in Proc. 8th IFIP Conf. Infor. Security Mgmt. and Small Sys. Security, Nevada, USA, 2001.
4. T. Shimshon, R. Moskovitch, L. Rokach, and Y. Elovici, "Continuous verification using keystroke dynamics," in Proc. Int. Conf. Computational Intel. and Security, Los Alamitos, CA, USA, 2010, pp. 411-415.
5. R. S. Zack, C. C. Tappert, and S.-H. Cha, "Performance of a long-text-input keystroke biometric authentication system using an improved k-nearest-neighbor classification method," in Proc. 2010 Fourth IEEE Intl. Conf. Theory Applications and Systems (BTAS), 2010, pp. 1-6.
6. A. Messerman, T. Mustafić, S. A. Camtepe, and S. Albayrak, "Continuous and non-intrusive identity verification in real-time environments based on free-text keystroke dynamics," in Proc. IEEE Int. Joint Conf. Biometrics (IJCB 11), Oct. 11-13, 2011, pp. 1-8.
7. SendInput [Online]. Available: msdn.microsoft.com
8. xsendkeycode [Online]. Available: http://manpages.ubuntu.com/man-pages/ gutsy/man8/xsendkeycode.8.html
9. U. Uludag and A. K. Jain, "Attacks on biometric systems: A case study in fingerprints," in Proc. SPIE Security, Steganography and Watermarking of Multimedia Contents VI, Jan. 2004, vol. 5306, pp. 622-633.
10. R. Maxion and K. Killourhy, "Keystroke biometrics with number-pad input," in Proc. 2010 IEEE/IFIP Int. Conf. Dependable Systems and Networks (DSN), pp. 201-210, 28 2010-July 1 2010.
11. S. Joshi, "Naive Bayes and Similarity Based Methods for Identi fying Computer Users Using Keystroke Patterns," Ph.D. dissertation, Louisiana Tech University, Ruston, LA, USA, 2009.
12. K. A. Rahman, K. S. Balagani, and V. V. Phoha, "Making impostor pass rates meaningless: A case of snoop-forge-replay attack on continuous cyber-behavioral verification with keystrokes," in Proc. 2011 IEEE Computer Vision and Pattern Recognition Workshops (CVPRW), Colorado, USA, Jun. 2011, pp. 31-38.
13. L. C. F. Araujo, L. H. R. Sucupira, M. Lizarraga, L. Ling, and J. B. T. Yabu-uti, "User authentication through typing biometrics features," IEEE Trans. Signal Process., vol. 53, no. 2, pp. 851-855, Feb. 2005. (Pubitemid 40181779)
14. K. Killourhy and R. Maxion, "Why did my detector do that?!: Predicting keystroke-dynamics error rates," in Recent Adv. in Intrusion Detection, Canada, 2010, pp. 256-276.
15. D. Stefan, X. Shu, and D. Yao, "Robustness of keystroke-dynamics based biometrics against synthetic forgeries," Comput. Security, vol. 31, no. 1, pp. 109-121, Feb. 2012.
16. A. Serwadda, V. V. Phoha, and A. Kiremire, "Using global knowledge of users' typing traits to attack keystroke biometrics templates," in Proc. 13th ACM Workshop on Multimedia and Security, New York, NY, USA, 2011, pp. 51-60.
17. L. Ballard, D. Lopresti, and F. Monrose, "Forgery quality and its implications for behavioral biometric security," IEEE Trans. Syst., Man, Cybern. B, vol. 37, no. 5, pp. 1107-1118, Oct. 2007. (Pubitemid 47534580)
18. D. Gafurov, E. Snekkenes, and P. Bours, "Spoof attacks on gait authentication system," IEEE Trans. Inf. Forensics Security, vol. 2, no. 3, pp. 491-502, Sep. 2007. (Pubitemid 47290583)
19. L. Ballard, S. Kamara, F. Monrose, and M. K. Reiter, "Towards practical biometric key generation with randomized biometric templates," in Proc. 15th ACM Conf. Computer and Communications Security, New York, NY, USA, 2008, pp. 235-244.
20. L. Ballard, D. Lopresti, and F. Monrose, "Evaluating the security of handwriting biometrics," in Proc. 10th Int. Workshop on the Foundations of Handwriting Recognition, 2006, vol. 15, pp. 461-466.
21. L. Ballard, F. Monrose, and D. Lopresti, "Biometric authentication revisited: Understanding the impact of wolves in sheep's clothing," in Proc. 15th Conf. USENIX Security Symp., California, USA, 2006, vol. 15.
22. Anti-Phishing Working Group, Phishing Activity Trends Report for the Month of February, 2007 Feb. 2007 [Online]. Available: www.an-tiphishing.org/ reports/apwg-report-february-2007.pdf
23. M. Davies, Word Frequency Data From the Corpus of Contemporary American English (COCA) Feb. 2008 [Online]. Available: http://www.wordfrequency.info, Last accessed May 15, 2011
24. V. Phoha and S. Joshi, Methods of Identifying Users Based on Text Entered on Keyboard Patent Pending, 2010.
25. Y. Wang, T. Tan, and A. Jain, "Combining face and iris biometrics for identity verification," in Proc. Fourth Int. Conf. AVBPA, 2003, pp. 805-813.
26. A. Jain, K. Nandakumar, and A. Ross, "Score normalization in multimodal biometric systems," Pattern Recognit., vol. 38, no. 12, pp. 2270-2285, Dec. 2005. (Pubitemid 41336698)
27. D. R. Ridley and M. Lively, "English letter frequencies and their applications: Part ii-digraph frequencies," Psychol. Reports, vol. 95, no. 3, pp. 787-794, Jul. 2004. (Pubitemid 40131912)