How to Prevent to Delegate Authentication

Alimomeni, Mohsen

doi:10.1007/978-3-319-28865-9_26

Cited by 4 publications

(8 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…BA systems can be active or passive. Active BA systems [6], [13], [14], [21], [22] collect behavioral data through challenge and response sessions, while in passive BA systems [11], [12], [22]- [25], data collection is through a background process. Active BA systems such as DAC [14] can protect against replay attacks because of the freshness of the challenge.…”

Section: Related Workmentioning

confidence: 99%

“…The most common approach for authentication is using passwords [1]- [3]. Password systems, however, are vulnerable to password cracking [4], password theft [5], and password sharing [6], with the last one effectively allowing the insiders to bypass the security perimeter of organizations.…”

Section: Introductionmentioning

confidence: 99%

“…Behavioral Authentication (BA) systems construct a behavioral profile of a user using their behavioral characteristics that are represented as a set of features. To provide security, features must be non-delegatable and nonemulatable [6]; that is it should be hard for a user to "teach" their password to a second user for password sharing, and hard for a user to "learn" them from an honest user to mimic their behavior. An identity claim is a tuple of (i) an identity, and (ii) a measurement of behavioral data, and is referred to as a verification request.…”

Section: Introductionmentioning

confidence: 99%

“…The BA system will use a verification algorithm to measure the distance between the profile of the claimed identity and the presented data, and accepts or rejects the claim. Behavioral data can be collected passively [11], [12], or actively [6], [13], [14] during an interactive session. Active BA systems require the user's presence at the time of the verification request, and provide higher security guarantee.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Scalable Behavioral Authentication

Islam

Kneppers

2021

IEEE Access

Self Cite

View full text Add to dashboard Cite

A Behavioral Authentication (BA) system constructs a behavioral profile for a user and uses it to verify their identity claims. It is primarily used as a second factor in user authentication. A BA system starts with an initial database of user profiles, and uses a verification algorithm to accept or reject a verification request, that consists of a claimed identity and behavioral data by measuring the distance between the profile of the claimed identity and the presented behavioral data. As new users join the system, the size of profile database grows and for a user u, the probability of other users with "close" profiles increases, and this results in an increase in the error probability of verification algorithm. We analyze this problem in distance-based verification systems, and introduce the notion of scalability of BA systems that requires the system error probability to remain (almost) unchanged as the size of the profile database grows. To achieve scalability, we propose personalization of verification algorithm. More specifically, for a user u the verification algorithm considers a set of doppelgangers that consists of users that have "close" profiles to u, and uses the set to form additional verification checks for verification requests against u. We use extensive experiments to validate the above, including the increase in the verification error with the increase in the database size, and implement and evaluate our proposed scalable verification algorithm in reducing this error. To our knowledge, this is the first systematic treatment of scalability of BA systems. Our notion of scalability and the approach to achieving it are general and applicable to other distance-based authentication systems.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Scalable Behavioral Authentication

Islam

Kneppers

2021

IEEE Access

Self Cite

View full text Add to dashboard Cite

show abstract

“…These approaches cannot be directly used for profile privacy because they will affect the output of the matching algorithm. Behavioural authentication systems [23] come in many forms such as keystroke, touch dynamics or game playing [24,25]. DAC is an active challenge-responses behavioural-based authentication system.…”

Section: Related Workmentioning

confidence: 99%

Privacy-Enhanced Profile-Based Authentication Using Sparse Random Projection

Taheri

Islam

2017

IFIP Advances in Information and Communication Technology

Self Cite

View full text Add to dashboard Cite

Fuzzy Vault for Behavioral Authentication System

Islam

2020

IFIP Advances in Information and Communication Technology

Self Cite

View full text Add to dashboard Cite

A fuzzy vault encrypts a message using fuzzy data such as user's biometric data as the vault key. Fuzzy vault can be used to protect users' cryptographic keys in smart cards and inside applications. We consider fuzzy vault based on behavioral data. A behavioral profile of a user consists of a set of features that collectively authenticates the user. Compared to biometric vault behavioral vault has the advantages of being revocable and less privacy sensitive. Fuzzy vaults for behavioral data, however, introduces significant challenges including feature representation, and feature matching algorithms that can provide the required correctness, security, and efficiency. We design and analyze a fuzzy vault based on the user's behavioral data that employs a novel soft-decision decoding algorithm and implement our design for two behavioral authentication (BA) systems. Our approach is general and can be used for other BA systems. We discuss our results and directions for future research.

show abstract

How to Prevent to Delegate Authentication

Cited by 4 publications

References 14 publications

Scalable Behavioral Authentication

Scalable Behavioral Authentication

Privacy-Enhanced Profile-Based Authentication Using Sparse Random Projection

Fuzzy Vault for Behavioral Authentication System

Contact Info

Product

Resources

About