Addressing insider threat using “where you are” as fourth factor authentication

Abstract

Current physical and cybersecurity systems have been relying on traditional three factor authentication to mitigate the threats posed by insider attacks. Typically, systems use one or two of the following factors to authenticate end-users: what you know (e.g., password), what you have (e.g., RSA ID), or what you are (e.g., fingerprint). Systems based on these factors have the following limitations: 1) access is typically bound to a single authentication occurrence leading to remote vulnerabilities, 2) the factors have little impact against persistent insider threats, and 3) many of the authentication systems violate system design principles such as user psychological acceptability by inconveniencing the end-users. In order to mitigate the identified limitations, we propose the usage of "where you are" as a complementary factor that can significantly improve both cybersecurity and physical security. Having accurate location tracking as a new factor for authentication: 1) provides continuous identification tracking and continuous mediation of access to resources, 2) requires remote threats to acquire a physical presence, 3) allows for the enforcement of cybersecurity and physical security policies in real-time through automation, and 4) provides enhanced security without inconveniencing the end-users. Using the strength of location as an authentication factor, this paper specifies design requirements that must be present in an insider-threat Prevention System (iTPS) that is capable of actively monitoring malicious insider behaviors. iTPS has the potential to radically change the physical protection systems and cybersecurity landscape by providing practitioners with the first-of-its-kind tool for real-time insider-threat prevention capabilities. iTPS is particularly suited to address the safety and security needs of critical infrastructure, nuclear facilities, and emergency response situations.

Usable comprehensive-factor authentication for a secure time attendance system

“…All three factors can be blended successfully in general, but cost effectiveness should be considered (Abiew, Jnr & Banning, 2020). In addition to the three classical factors, somewhere you are or location may be counted as the fourth factor (Choi & Zage, 2012). Low-cost locators such as Bluetooth and GPS can be implemented to track or locate a user physically while authenticating (Ramatsakane & Leung, 2017).…”

Framework for the Comparison and Selection of Schemes for Multi-Factor Authentication

“…Out of these, 217 propose the use of inherence-based authentication schemes, whereas 169 propose the use of possession-based schemes and 124 the use of knowledge-based ones. The remaining 5 articles propose the use of schemes based on other authentication factors, such as the use of the user's social networks [21] and location-based authentication [22]. Table 3 shows the number of articles proposing the use of the distinct authentication schemes, split by the authentication factors to which they belong.…”

EMBERS: EpheMeral biometrically enhanced real-time location System

“…Almost all of these solutions utilize difference of signal strength (DSS) techniques to estimate proximity. Unfortunately, DSS is highly susceptible to multi-path and reflection problems due to heterogeneous building structures and reflective materials making it difficult to ascertain accurate location information [1].…”

“…In order to mitigate the identified limitations, we proposed the usage of "where you are" as a complementary fourth factor that can significantly improve both cybersecurity and physical security [1]. RTLSs have been largely used as means of tracking manufacturing process [2], [3] but their performance, integrity and assurance as a security and safety tool is unknown.…”