新的基于鼠标行为的持续身份认证方法

易聪; 胡军

doi:10.11959/j.issn.2096-109x.2022067

您当前的位置：

首页 >

文章列表页 >

新的基于鼠标行为的持续身份认证方法

学术论文 | 更新时间：2024-06-03

- 新的基于鼠标行为的持续身份认证方法
- Novel continuous identity authentication method based on mouse behavior
- 网络与信息安全学报 2022年8卷第5期页码：179-188
- 作者机构：
  
  1. 计算智能重庆市重点实验室（重庆邮电大学），重庆 400065
  2. 重庆邮电大学计算机科学与技术学院，重庆 400065
- 作者简介：
  
  [ "易聪（1995- ），男，四川达州人，重庆邮电大学研究生，主要研究方向为智能信息处理和数据挖掘" ]
  [ "胡军（1977- ），男，湖北监利人，重庆邮电大学教授、博士生导师，主要研究方向为粒计算、粗糙集、智能信息处理和数据挖掘" ]
- 基金信息：
  
  国家自然科学基金;The National Natural Science Foundation of China(61936001);国家自然科学基金;The National Natural Science Foundation of China(61876201);国家自然科学基金;The National Natural Science Foundation of China(61876027);重庆市教委重点合作项目;The Key Cooperation Project of Chongqing Municipal Education Commission(HZ2021008);重庆市自然科学基金;The National Natural Science Foundation of Chongqing(cstc2019jcyj-cxttX0002);重庆市自然科学基金;The National Natural Science Foundation of Chongqing(cstc2021ycjh-bgzxm0013)
- DOI：10.11959/j.issn.2096-109x.2022067
  中图分类号： TP309
- 网络首发：2022-10，
  
  纸质出版：2022-10-15
- 稿件说明：
移动端阅览
易聪, 胡军. 新的基于鼠标行为的持续身份认证方法[J]. 网络与信息安全学报, 2022,8(5):179-188.

Cong YI, Jun HU. Novel continuous identity authentication method based on mouse behavior[J]. Chinese Journal of Network and Information Security, 2022, 8(5): 179-188.
易聪, 胡军. 新的基于鼠标行为的持续身份认证方法[J]. 网络与信息安全学报, 2022,8(5):179-188. DOI： 10.11959/j.issn.2096-109x.2022067.

Cong YI, Jun HU. Novel continuous identity authentication method based on mouse behavior[J]. Chinese Journal of Network and Information Security, 2022, 8(5): 179-188. DOI： 10.11959/j.issn.2096-109x.2022067.

摘要

随着互联网技术的快速发展，安全问题一直是人们关注的焦点。基于鼠标行为的持续身份认证对于保护计算机系统的安全起着至关重要的作用。针对鼠标行为认证方法存在的认证准确率较低和认证时间较长的问题，提出了一种新的基于鼠标行为的持续身份认证方法。该方法将用户的鼠标事件序列按不同的类型划分为相应的鼠标行为，并基于鼠标行为从多方面挖掘鼠标行为特征，对于时间和空间的特征值需要计算其统计值来唯一表示，从而更好地表示不同用户的鼠标行为差异，提高认证准确率。通过 ReliefF 算法得到鼠标行为特征的重要度，并在此基础上结合邻域粗糙集去除鼠标行为的无关或冗余特征，以达到降低模型复杂度和建模时间的目的，并采用二分类算法进行认证模型的训练。在身份认证时会根据每次收集的鼠标行为使用认证模型得到分类得分，再结合信任模型更新用户的信任值，当用户的信任值降低到信任模型阈值以下时，就会被判断为非法用户。在Balabit和DFL数据集上对所提方法的身份认证效果进行仿真实验，结果表明，该方法相较于其他文献的方法，不仅可以提高身份认证准确率、降低身份认证时间，而且对于外部用户的非法入侵具有一定的鲁棒性。

Abstract

With the rapid development of Internet technologies

security issues have always been the hot topics.Continuous identity authentication based on mouse behavior plays a crucial role in protecting computer systems

but there are still some problems to be solved.Aiming at the problems of low authentication accuracy and long authentication latency in mouse behavior authentication method

a new continuous identity authentication method based on mouse behavior was proposed.The method divided the user’s mouse event sequence into corresponding mouse behaviors according to different types

and mined mouse behavior characteristics from various aspects based on mouse behaviors.Thereby

the differences in mouse behavior of different users can be better represented

and the authentication accuracy can be improved.Besides

the importance of mouse behavior features was obtained by the ReliefF algorithm

and on this basis

the irrelevant or redundant features of mouse behavior were removed by combining the neighborhood rough set to reduce model complexity and modeling time.Moreover binary classification was adopted.The algorithm performed the training of the authentication model.During identity authentication

the authentication model was used to obtain a classification score based on the mouse behavior collected each time

and then the user’s trust value was updated in combination with the trust model.When the user’s trust value fell below the threshold of the trust model

it might be judged as illegal user.The authentication effect of the proposed method was simulated on the Balabit and DFL datasets.The results show that

compared with the methods in other literatures

this method not only improves the authentication accuracy and reduces the authentication latency

but also has a certain robustness to the illegal intrusion of external users.

关键词

Keywords

references

荆继武 . 网络可信身份管理的现状与趋势 [J ] . 信息安全研究 , 2016 , 2 ( 7 ): 666 - 668 .

JING J W . The development status and tendency of internet trusted identity management [J ] . Journal of Information Security Research , 2016 , 2 ( 7 ): 666 - 668 .

JOSHI V B , RAVAL M S . Adaptive threshold for fingerprint recognition system based on threat level and system load [J ] . Procedia Computer Science , 2020 , 171 : 498 - 507 .

LIU Q , JIANG B , ZHANG J L , et al . Semi-supervised uncorrelated dictionary learning for colour face recognition [J ] . IET Computer Vision , 2020 , 14 ( 3 ): 92 - 100 .

KUMAR M R , ARTHI K . An effective non-cooperative iris recognition system using hierarchical collaborative representation-based classification [J ] . The Journal of Supercomputing , 2020 , 76 ( 1 ): 1 - 14 .

AHMED A A E , TRAORE I . Biometric recognition based on free-text keystroke dynamics [J ] . IEEE Transactions on Cybernetics , 2014 , 44 ( 4 ): 458 - 472 .

CHANG T Y , TSAI C J , YEH J Y , et al . New soft biometrics for limited resource in keystroke dynamics authentication [J ] . Multimedia Tools and Applications , 2020 , 79 ( 31-32 ): 23295 - 23324 .

AHMED A A E , TRAORE I . Detecting computer intrusions using behavioral biometrics [C ] // 3rd Annual Conference on Privacy,Security and Trust . 2005 : 91 - 98 .

AHMED A A E , TRAORE I . A new biometric technology based on mouse dynamics [J ] . IEEE Transactions on Dependable ＆ Secure Computing , 2007 , 4 ( 3 ): 165 - 179 .

ZHENG N , PALOSKI A , WANG H . An efficient user verification system via mouse movements [C ] // Proceedings of the 18th ACM Conference on Computer and Communications Security . 2011 : 139 - 150 .

ZHENG N , PALOSKI A , WANG H . An efficient user verification system using angle-based mouse movement biometrics [J ] . ACM Transactions on Information and System Security , 2016 , 18 ( 3 ): 1 - 27 .

徐剑 , 李明洁 , 周福才 , 等 . 基于用户鼠标行为的身份认证方法 [J ] . 计算机科学 , 2016 , 43 ( 2 ): 148 - 154 .

XU J , LI M J , ZHOU F C , et al . Identity authentication method based on user’s mouse behavior [J ] . Computer Science , 2016 , 43 ( 2 ): 148 - 154 .

YILDIRIM M , ANARIM E . Session-based user authentication via mouse dynamics [C ] // 27th Signal Processing and Communications Applications Conference . 2019 : 1 - 4 .

田杰 , 宋礼鹏 . 基于鼠标及窗口行为的持续身份认证研究 [J ] . 中北大学学报(自然科学版) , 2020 , 41 ( 6 ): 511 - 519 , 526 .

TIAN J , SONG L P . Research on continuous identity authentication based on mouse and window behavior [J ] . Journal of North China University(Nature Science Edtion) , 2020 , 41 ( 6 ): 511 - 519 , 526 .

CHONG P , TAN Y X M , GUARNIZO J , et al . Mouse authentication without the temporal aspect-what does a 2D-CNN learn [C ] // IEEE Security and Privacy Workshops (SPW) . 2018 : 15 - 21 .

沈超 , 蔡忠闽 , 管晓宏 , 等 . 基于鼠标行为特征的用户身份认证与监控 [J ] . 通信学报 , 2010 , 31 ( 7 ): 68 - 75 .

SHEN C , CAI Z M , GUAN X H , et al . User authentication and monitoring based on mouse behavioral features [J ] . Journal on Communications , 2010 , 31 ( 7 ): 68 - 75 .

KONONENKO I , . Estimating attributes:analysis and extensions of relief [C ] // European Conference on Machine Learning . 1994 : 171 - 182 .

LADHA L , DEEPA T . Feature selection methods and algorithms [J ] . International Journal of Advanced Trends in Computer Science and Engineering , 2011 , 3 ( 5 ): 1787 - 1797 .

奖志军 , 易华蓉 . 一种基于图像金字塔光流的特征跟踪方法 [J ] . 武汉大学学报(信息科学版) , 2007 , 32 ( 8 ): 680 - 683 .

JANG Z J , YI H R . A feature tracking method based on image pyramid optical flow [J ] . Journal of Wuhan University(Information Science Edition) , 2007 , 32 ( 8 ): 680 - 683 .

ANTAL M , EGYED-ZSIGMOND E , . Intrusion detection using mouse dynamics [J ] . IET Biometrics , 2019 , 8 ( 5 ): 285 - 294 .

ALMALKI S , CHATTERJEE P , ROY K . Continuous authentication using mouse clickstream data analysis [C ] // International Conference on Security,Privacy and Anonymity in Computation,Communication and Storage . 2019 : 76 - 85 .

YILDIRIM M , ANARIM E . Novel feature extraction methods for authentication via mouse dynamics with semi-supervised learning [C ] // Innovations in Intelligent Systems and Applications Conference (ASYU) . 2019 : 1 - 6 .

浏览量

280

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于国密的工控低算力设备身份认证与群组认证方案

基于区块链的跨数据中心匿名可监管身份认证方案

边缘计算环境下轻量级终端跨域认证协议

基于深度神经网络的Android恶意软件检测方法

交叉口场景下基于区块链技术的匿名车辆身份认证方案