4.5 Article

Continuous user authentication using multi-modal biometrics

期刊

COMPUTERS & SECURITY
卷 53, 期 -, 页码 234-246

出版社

ELSEVIER ADVANCED TECHNOLOGY
DOI: 10.1016/j.cose.2015.06.001

关键词

Biometrics; Transparent authentication; Multimodal biometrics; Linguistic profiling; Keystroke dynamics; Behavioural profiling; Mobile device

向作者/读者索取更多资源

As modem mobile devices increase in their capability and accessibility, they introduce additional demands in terms of security particularly authentication. With the widely documented poor use of PINs, Active Authentication is designed to overcome the fundamental issue of usable and secure authentication through utilizing biometric-based techniques to continuously verify user identity. This paper proposes a novel text-based multimodal biometric approach utilizing linguistic analysis, keystroke dynamics and behavioural profiling. Experimental investigations show that users can be discriminated via their text-based entry, with an average Equal Error Rate (EER) of 3.3%. Based on these findings, a framework that is able to provide robust, continuous and transparent authentication is proposed. The framework is evaluated to examine the effectiveness of providing security and user convenience. The result showed that the framework is able to provide a 91% reduction in the number of intrusive authentication requests required for high security applications. (C) 2015 Elsevier Ltd. All rights reserved.

作者

我是这篇论文的作者
点击您的名字以认领此论文并将其添加到您的个人资料中。

评论

主要评分

4.5
评分不足

次要评分

新颖性
-
重要性
-
科学严谨性
-
评价这篇论文

推荐

Article Computer Science, Information Systems

Motivating Information Security Policy Compliance: Insights from Perceived Organizational Formalization

Yuxiang Hong, Steven Furnell

Summary: Psychological and behavioral characteristics are important factors in causing information security incidents. This study explores the influence of organizational structures on information security policy compliance behavioral intention and finds that perceived organizational formalization significantly affects cognitive processes, behavioral habits, and deterrent certainty. The study suggests the design of formal rules, procedures, and communications to improve employee information security policy compliance habits and intentions.

JOURNAL OF COMPUTER INFORMATION SYSTEMS (2022)

Article Computer Science, Information Systems

Duplicitous social media and data surveillance: An evaluation of privacy risk

Karl van der Schyff, Stephen Flowerday, Steven Furnell

COMPUTERS & SECURITY (2020)

Article Computer Science, Information Systems

Privacy risk and the use of Facebook Apps: A gender-focused vulnerability assessment

Karl van der Schyff, Stephen Flowerday, Steven Furnell

COMPUTERS & SECURITY (2020)

Article Computer Science, Information Systems

Real-world smartphone-based gait recognition

Hind Alobaidi, Nathan Clarke, Fudong Li, Abdulrahman Alruban

Summary: Securing smartphones is crucial as they become vulnerable to cybercrime. Gait authentication, an non-intrusive method, has shown promise in recognizing users in real-world environments.

COMPUTERS & SECURITY (2022)

Editorial Material Computer Science, Information Systems

Human aspects of cyber security

Nathan Clarke, Steven Furnell

INFORMATION AND COMPUTER SECURITY (2023)

Proceedings Paper Computer Science, Interdisciplinary Applications

Explainable AI with Domain Adapted FastCAM for Endoscopy Images

Jan Stodt, Christoph Reich, Nathan Clarke

Summary: Artificial intelligence has enormous potential in healthcare and medical technology, and explainability is crucial for certification procedures. This study adapts FastCAM for improving the detection of medical instruments in endoscopy images.

COMPUTATIONAL SCIENCE - ICCS 2022, PT III (2022)

Proceedings Paper Computer Science, Interdisciplinary Applications

The Need for Emergency-Based Access Control in AAL Systems

Hendrik Kuijs, Christoph Reich, Martin Knahl, Nathan Clarke, Ivana Ognjanovic

Summary: This paper discusses the necessity of special access control rules for AAL systems in emergency situations, highlighting the importance of personally identifiable information (PII) for helpers and emergency doctors.

2022 11TH MEDITERRANEAN CONFERENCE ON EMBEDDED COMPUTING (MECO) (2022)

Article Computer Science, Information Systems

Evaluation of Contextual and Game-Based Training for Phishing Detection

Joakim Kavrestad, Allex Hagberg, Marcus Nohlberg, Jana Rambusch, Robert Roos, Steven Furnell

Summary: Cybersecurity is a crucial issue, and individuals play a significant role in ensuring secure behavior. This paper evaluates two promising methods of Information Security Awareness Training (ISAT) in supporting users' secure behavior, and suggests future research ideas of combining training with other support systems.

FUTURE INTERNET (2022)

Article Computer Science, Theory & Methods

Addressing big data variety using an automated approach for data characterization

Georgios Vranopoulos, Nathan Clarke, Shirley Atkinson

Summary: This paper proposes an automated approach for metadata identification and enrichment in describing Big Data. Through experimentation and the use of algorithmic techniques, it is shown that this approach can improve the accuracy and efficiency of data identification.

JOURNAL OF BIG DATA (2022)

Article Computer Science, Information Systems

Incorporating the human facet of security in developing systems and services

Bilal Naqvi, Nathan Clarke, Jari Porras

Summary: This paper introduces an integrative framework to address security and usability conflicts throughout the system development lifecycle. By interviewing industry practitioners and validating the framework through a workshop, design patterns are created to assist system designers and developers in making informed decisions.

INFORMATION AND COMPUTER SECURITY (2021)

Article Computer Science, Information Systems

A novel approach for improving information security management and awareness for home environments

Fayez Ghazai Alotaibi, Nathan Clarke, Steven M. Furnell

Summary: This paper proposes a system for improving security management and awareness for home users through creating and assigning different security policies for digital devices. Experts have evaluated the proposed approach positively, agreeing that it is usable, feasible, and effective in enhancing security management and awareness for home users. The study offers a framework and mock-up design to strengthen information security for home users.

INFORMATION AND COMPUTER SECURITY (2021)

Article Computer Science, Information Systems

Comparing the protection and use of online personal information in South Africa and the United Kingdom in line with data protection requirements

Adele Da Veiga, Ruthea Vorster, Fudong Li, Nathan Clarke, Steven M. Furnell

INFORMATION AND COMPUTER SECURITY (2020)

Proceedings Paper Computer Science, Software Engineering

Multi-Platform Authorship Verification

Abdulaziz Altamimi, Nathan Clarke, Steven Furnell, Fudong Li

THIRD CENTRAL EUROPEAN CYBERSECURITY CONFERENCE (CECC 2019) (2019)

Article Computer Science, Information Systems

CyberEntRel: Joint extraction of cyber entities and relations using deep learning

Kashan Ahmed, Syed Khaldoon Khurshid, Sadaf Hina

Summary: This paper mainly introduces the construction of the cyber threat intelligence knowledge graph and the information extraction technique. By using joint extraction technique, it solves the problem of traditional techniques becoming ineffective due to the increasing size of CTI data. Experimental results show that this technique outperforms state-of-the-art models in knowledge triple extraction on CTI data and improves the F1 score.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

Enhance membership inference attacks in federated learning

Xinlong He, Yang Xu, Sicong Zhang, Weida Xu, Jiale Yan

Summary: This paper proposes a new membership inference attack method in federated learning, which utilizes data poisoning and sequence prediction confidence. The attack is effective and results in minimal overall model performance degradation.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

CTIMD: Cyber threat intelligence enhanced malware detection using API call sequences with parameters

Tieming Chen, Huan Zeng, Mingqi Lv, Tiantian Zhu

Summary: In this paper, the authors propose a deep learning based dynamic malware detection method called CTIMD, which integrates threat knowledge from CTIs into the learning process of API call sequences with runtime parameters. Experimental results show that CTIMD outperforms existing methods in terms of performance.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

SuM: Efficient shadow stack protection on ARM Cortex-M

Wonwoo Choi, Minjae Seo, Seongman Lee, Brent Byunghoon Kang

Summary: This paper proposes SUM, a backward-edge control flow protection scheme for ARM Cortex-M processors. It combines MPU and the overlooked hardware feature FaultMask to achieve efficient and robust protection. The empirical evaluation shows minimal runtime overhead for the proposed solution.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

Which factors predict susceptibility to phishing? An empirical study

Liliana Ribeiro, Ines Sousa Guedes, Carla Sofia Cardoso

Summary: Phishing susceptibility is influenced by individual and contextual factors. The study found that individuals who perceive themselves as capable of detecting phishing and those who use online services more frequently are more susceptible to phishing. However, technology competencies and other individual variables do not predict phishing susceptibility.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

Optimization-based adversarial perturbations against twin support vector machines

Wenjie Wang, Yuanhai Shao, Yiju Wang

Summary: In this paper, we investigate the adversarial perturbations of twin support vector machines (TWSVMs) and propose an optimization framework, which provides explicit solutions to increase the interpretability of the conclusion and convenience for calculation.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

AIPA: An Adversarial Imperceptible Patch Attack on Medical Datasets and its Interpretability

Snofy D. Dunston, V. Mary Anita Rajam

Summary: This paper proposes a novel adversarial attack technique that can synthesize adversarial images to mislead deep learning models, and also studies interpretability plots. The research findings show that the proposed attack technique influences the interpretability plots, regardless of the success of the attack.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

Protocol clustering of unknown traffic based on embedding of protocol specification

Junchen Li, Guang Cheng, Zongyao Chen, Peng Zhao

Summary: Protocol Reverse Engineering (PRE) is a direct approach for analyzing unknown traffic. This paper proposes a method for clustering unknown traffic based on private protocol labels, and the experimental results demonstrate its advantages on real-world network traffic.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

When explainability turns into a threat- using xAI to fool a fake news detection method

Rafal Kozik, Massimo Ficco, Aleksandra Pawlicka, Marek Pawlicki, Francesco Palmieri, Michal Choras

Summary: The inclusion of Explainability of Artificial Intelligence (xAI) has become a mandatory requirement for designing and implementing reliable, interpretable, and ethical AI solutions. However, it has been shown that xAI can enable successful adversarial attacks in the domain of fake news detection, leading to a decrease in AI security. This paper presents an attack scheme that uses an explainable solution to reshape the structure of the original message, allowing the adversary to manipulate the model's prediction while keeping the message's meaning intact.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

Ensuring secure interoperation of access control in a multidomain environment

Benyuan Yang, Lili Luo, Zhimeng Wang

Summary: Interoperation is widely used in practical industrial applications, but merging local access control policies may lead to security violations. Dealing with these issues in a multidomain environment is critical, but finding the maximum secure interoperation among individual systems poses a challenge due to the large number of entities and access involved.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

FACILE: A capsule network with fewer capsules and richer hierarchical information for malware image classification

Binghui Zou, Chunjie Cao, Longjuan Wang, Sizheng Fu, Tonghua Qiao, Jingzhang Sun

Summary: The ongoing struggle between security researchers and malware has led to the exploration of using convolutional neural networks and capsule networks for classification and identification of malware. However, training these networks requires a significant amount of data and parameters, and the research on capsule networks is still in its early stages, posing challenges.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

Multivariate time series anomaly detection by fusion of deep convolution residual autoencoding reconstruction model and ConvLstm forecasting model

Hongsong Chen, Xingyu Li, Wenmao Liu

Summary: Multivariate time-series anomaly detection is crucial for maintaining normal operation of physical equipment. Recent advances have been made in this field, but two challenges have limited the model's ability to generalize. To address these challenges, a multivariate time-series anomaly detection model consisting of a characterization network and a forecasting network is proposed. Experimental results demonstrate that this method outperforms baseline methods in terms of detection performance and robustness.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

FLAD: Adaptive Federated Learning for DDoS attack detection

Roberto Doriguzzi-Corin, Domenico Siracusa

Summary: This paper discusses the application of federated learning in the field of cybersecurity and proposes an adaptive mechanism-based federated learning solution for DDoS attack detection in dynamic cybersecurity scenarios. Through experiments, it is demonstrated that the proposed solution outperforms state-of-the-art federated learning algorithms in terms of convergence time and accuracy.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

Municipality2HTTPS: A study on HTTPS protocol's usage in Italian municipalities' websites

Antonio Giovanni Schiavone

Summary: The usage of HTTPS protocol is crucial for secure communication with websites, ensuring the confidentiality, integrity, and authenticity of online data transmissions. The Municipality2HTTPS research project analyzed the implementation of HTTPS in Italian municipalities' websites and identified areas for improvement.

COMPUTERS & SECURITY (2024)

Article Computer Science, Information Systems

Hello me, meet the real me: Voice synthesis attacks on voice assistants

Domna Bilika, Nikoletta Michopoulou, Efthimios Alepis, Constantinos Patsakis

Summary: Voice Assistants (VAs) are widely used in smart devices, but are vulnerable to attacks, as shown by experiments with popular VAs revealing successful attack rates exceeding 30% and statistical variations among vendors, calling for additional countermeasures to protect user information.

COMPUTERS & SECURITY (2024)