WACA: Wearable-Assisted Continuous Authentication

Acar, Abbas; Aksu, Hidayet; Uluagac, A. Selcuk; Akkaya, Kemal

doi:10.1109/spw.2018.00042

Cited by 35 publications

(21 citation statements)

References 38 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In contrast, herein we consider web authentication schemes, thus focusing on user-to-web and device-to-web authentication. As such, user-to-device (e.g., [14] [15]) and similarly other paradigms such as device-to-device (e.g., [16] [17]), are out of the scope of our work.…”

Section: Background and Contextmentioning

confidence: 99%

Comparative Analysis and Framework Evaluating Mimicry-Resistant and Invisible Web Authentication Schemes

Alaca

Abdou

Oorschot

2021

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

Many password alternatives for web authentication proposed over the years, despite having different designs and objectives, all predominantly rely on the knowledge of some secret. This motivates us, herein, to provide the first detailed exploration of the integration of a fundamentally different element of defense into the design of web authentication schemes: a mimicry-resistance dimension. We analyze web authentication mechanisms with respect to new usability and security properties related to mimicry-resistance (augmenting the UDS framework), and in particular evaluate invisible techniques (those requiring neither user actions, nor awareness) that provide some mimicryresistance (unlike those relying solely on static secrets), including device fingerprinting schemes, PUFs (physically unclonable functions), and a subset of Internet geolocation mechanisms.• F. Alaca is with the

show abstract

Section: Background and Contextmentioning

confidence: 99%

Comparative Analysis and Framework Evaluating Mimicry-Resistant and Invisible Web Authentication Schemes

Alaca

Abdou

Oorschot

2021

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

show abstract

“…Acar et al [38] used smartwatches with keystroke dynamics for continuous authentication. Musale et al [25] proposed a continuous authentication system based on Motorola 360 Sport by using accelerometer and gyroscope features.…”

Section: Related Workmentioning

confidence: 99%

Can a Smartband be Used for Continuous Implicit Authentication in Real Life

et al. 2020

View full text Add to dashboard Cite

The use of cloud services that process privacy-sensitive information such as digital banking, pervasive healthcare, smart home applications requires an implicit continuous authentication solution, which will make these systems less vulnerable to the spoofing attacks. Physiological signals can be used for continuous authentication due to their uniqueness. Ubiquitous wrist-worn wearable devices are equipped with photoplethysmogram sensors, which enable us to extract heart rate variability (HRV) features. In this study, we show that these devices can be used for continuous physiological authentication for enhancing the security of the cloud, edge services, and IoT devices. A system that is suitable for the smartband framework comes with new challenges such as relatively low signal quality and artifacts due to placement, which were not encountered in full lead electrocardiogram systems. After the artifact removal, cleaned physiological signals are fed to the machine learning algorithms. In order to train our machine learning models, we collected physiological data using off-the-shelf smartbands and smartwatches in a real-life event. By applying a minimum quality threshold, we achieved a 3.96% Equal Error Rate. Performance evaluation shows that HRV is a strong candidate for continuous unobtrusive implicit physiological authentication.

show abstract

“…Similar to IvoriWatch, several schemes leverage motion sensors embedded on a wrist-wearable for security purposes. Schemes most relevant to our work are ZEBRA [13] and WACA [1]. ZEBRA correlates the sequence of interactions observed on the host machine with the sequence of interactions predicted based on wrist motions captured by the wrist-wearable to enable a continuous re-authentication of the user.…”

Section: Related Workmentioning

confidence: 99%