arrow
返回

POSTER: When and How to Implicitly Authenticate Smartphone Users

delete2014-11-03
delete4
PRE
AI
A
Aaron Atwater *
K
Khan, Hassan
H
Hengartner, Urs
DOI:10.1145/2660267.2662373delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Possession of modern smartphones is becoming increasingly ubiquitous, and with this rise in usage comes a rise in the amount of sensitive data being stored on them. Despite this, the high-frequency, low-duration nature of the average smartphone session makes passwords or PIN-locks even less usable than in the desktop context. To combat these issues, implicit authentication (IA) schemes can be developed and deployed to smartphones. IA schemes continuously authenticate users by profiling their behaviour using the variety of sensors prevalent on the phones, such as touchscreens and accelerometers. When a non-owner acquires the device and attempts to access sensitive data on it, the IA scheme recognizes the difference in behaviour and automatically ejects the attacker from the system. In particularly sensitive contexts, IA schemes can also be deployed as a secondary defence mechanism on top of explicit authentication, providing layered security in the event of, for example, a shoulder-surfing attack compromising the device's PIN or an operating system vulnerability allowing its bypass. In this work, we evaluate existing proposals for IA schemes using different behavioural feature sets, and evaluate them against real-world data to show when they are (and are not) useful. We have implemented them in an easily extensible open source framework for the Android operating system called Itus, which allows other researchers to iteratively improve on the existing mechanisms for performing IA. Itus performs IA at the app level, which we have shown allows app developers to selectively protect sensitive data while decreasing the impact on battery life and device performance, and at the same time obtaining better detection accuracy for the IA scheme being invoked.
Keyword:
Security
Implicit Authentication
Behavioural Biometrics
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

P
Proceedings of the ACM SIGSAC Conference on Computer and Communications Security
IF:
0
论文数:
5
被引数:
0

机构

U
University of Waterloo
学者数:
2.2W
论文数: 2.3W
被引数: 3.3W
引用论文

引用论文

Internal anal sphincter achalasia
err2009-11-01
err0
PREAI
errReshma Doodnath; Prem Puri
err分享
err收藏
Functional Perovskite Hybrid of Polyacetylene Ammonium and Lead Bromide:  Synthesis, Light Emission, and Fluorescence Imagining
err2006-09-26
err0
PREAI
errHaipeng Xu; Jingzhi Sun; Anjun Qin; Jianli Hua; Zhen Li; Yongqiang Dong; Hai Xu; Wangzhang Yuan; Yuguang Ma; Mang Wang; Ben Zhong Tang
err分享
err收藏
Control Performance, Stability Conditions, and Bifurcation Analysis of the Twelve-Pole Active Magnetic Bearings System
err2021-11-16
err0
errOAAI
errSabry M. El-Shourbagy; Nasser A. Saeed; Magdi Kamel; Kamal R. Raslan; Mohamed K. Aboudaif; Jan Awrejcewicz
err分享
err收藏
学者 查看更多内容