Chuan-wu MAO, Yang CHENG, Wen-ming YU. Method of dynamic real-time authentication[J]. Chinese Journal of Network and Information Security, 2016, 2(3): 76-85.
DOI:
Chuan-wu MAO, Yang CHENG, Wen-ming YU. Method of dynamic real-time authentication[J]. Chinese Journal of Network and Information Security, 2016, 2(3): 76-85. DOI: 10.11959/j.issn.2909-109x.2016.00040.
To solve the problem organization’s insider threats which was brought by internal staff through identity spoofing. A method of dynamic real-time authentication was presented. By faking exceptions of mouse to build dynamic authentication
when continuously consecutive authentication were abnormal
user was forced into fixed scene certification which was building of memory game. An identity verification experiment
in which 15 participants were involved
showed that the performance of proposed method was encouraging with FAR of 1.8% and FRR of 3.0% and authentication time of 8.12 s for authentication. The experiment shows that the method is not only real-time but also has a better user experience and accuracy.
关键词
Keywords
references
CHEN X J , SHI J Q , XU R , et al . PAITS: detect masquerader via short-lived interventional mouse dynamics [M ] . Berlin: Springer , 2014 : 231 - 242 .
CHEN X J , XU F , XU R , et al . A practical real-time authentication system with identity tracking based on mouse dynamics [C ] // IEEE INFOCOM .c 2014 : 121 - 122 .
CHEN X J , FANG B X , TAN Q F et al . Inferring attack intent of malicious insider based on probabilistic attack graph model [J ] . Chinese Journal of Computers , 2014 , 37 ( 1 ): 62 - 72 .
魏梓丞 . 面向身份伪冒的主机异常行为检测 [D ] . 北京:北京邮电大学 2014 .
WEI Z C . Abnormal behavior detection of host computer for identity based intrusion detection [D ] . Beijing:Beijing University of Posts and Telecommunications 2014 .
CHEN X J , SHI J Q , XU F , et al . Research on the optimal security policy algorithm for internal threats [C ] // Computer Research and Development , 2014 , 51 ( 7 ) 1565 - 1577 .
ZHENG N , PALOSKL A , WANG H . An efficient user verification system via mouse movements [C ] // ACM Conference on Computer& Communications Security .c 2011 : 139 - 150 .
PUSARA M , BRODLEY C E . User re-authentication via mouse movements [C ] // Workshop on Visualization & Data Mining for Computer Security .c 2004 : 1 - 8 .
AHMED A , TRAORE I . Detecting computer Intrusions using behavioral biometrics [C ] // The third Annual Conference on Privacy, Security and Trust .c 2005 : 91 - 98 .
GAMBOA H , FRED A . A behavioral biometric system based on human-computer interaction [C ] // The International Society for Optical Engineering .c 2004 : 381 - 392 .
FANG C , CAI Z M , SHEN C , et al . Authentication and monitoring of user identities based on mouse dynamics [J ] . Journal of Xi'an Jiaotong University , 2008 , 10 ( 40 ) 1235 - 1239 .
SHEN C , CAI Z M , GUAN X H , et al . User identity authentication and monitoring based on the behavior of the mouse [J ] . Journal of Communication , 2010 , 31 ( 7 ) 68 - 75 .
WANG S , CAI Z M , SHEN C , et al . The influence of the technology on the dynamic identity authentication of the mouse [J ] . MiCroelectronics and Computer , 2013 , 30 ( 4 ) 14 - 21 .
WANG X , WANG M Y , LIANG J . Identity authentication based on the behavior of the mouse and keyboard [J ] . China Educational Technology and Equipment , 2014 ( 22 ): 50 - 53 .
WEI Z , CHEN X , PU Y et al . A real-time authentication method based on cursor-hidden scene [J ] . International Workshop on Cloud Computing & Information Security , 2013 , 52 ( 1391 ): 346 - 350 .
An identity and group authentication scheme for resource-constrained industrial control devices based on Chinese commericial cryptography
Blockchain-based cross-data center anonymous and verifiable identity authentication scheme
Lightweight terminal cross-domain authentication protocol in edge computing environment
Novel continuous identity authentication method based on mouse behavior
Anonymous vehicle authentication scheme based on blockchain technology in the intersection scenario
Related Author
Cao Jin
Yang Lan
Li Huan
Li Wei
Li Xinze
Sun Junjun
ZHANG Chaoyang
XU Shujiang
Related Institution
Xidian University
Xinjiang Oilfield Company Digital Intelligence Technology Company
Shandong Provincial Key Laboratory of Computer Networks, Shandong Fundamental Research Center for Computer Science
Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan), Qilu University of Technology (Shandong Academy of Sciences)
College of Computer Science and Technology, Chongqing University of Posts and Telecommunications