Touchalytics: On the Applicability of Touchscreen Input as a Behavioral Biometric for Continuous Authentication
arXiv:1207.6231 · doi:10.1109/TIFS.2012.2225048
Abstract
We investigate whether a classifier can continuously authenticate users based on the way they interact with the touchscreen of a smart phone. We propose a set of 30 behavioral touch features that can be extracted from raw touchscreen logs and demonstrate that different users populate distinct subspaces of this feature space. In a systematic experiment designed to test how this behavioral pattern exhibits consistency over time, we collected touch data from users interacting with a smart phone using basic navigation maneuvers, i.e., up-down and left-right scrolling. We propose a classification framework that learns the touch behavior of a user during an enrollment phase and is able to accept or reject the current user by monitoring interaction with the touch screen. The classifier achieves a median equal error rate of 0% for intra-session authentication, 2%-3% for inter-session authentication and below 4% when the authentication test was carried out one week after the enrollment phase. While our experimental findings disqualify this method as a standalone authentication mechanism for long-term authentication, it could be implemented as a means to extend screen-lock time or as a part of a multi-modal biometric authentication system.
to appear at IEEE Transactions on Information Forensics & Security; Download data from http://www.mariofrank.net/touchalytics/
Cited by in corpus (38)
- A Perspective Analysis of Handwritten Signature Technology
- Active User Authentication for Smartphones: A Challenge Data Set and Benchmark Results
- A Survey on Behavioral Biometric Authentication on Smartphones
- An HMM-based behavior modeling approach for continuous mobile authentication
- An HMM-based Multi-sensor Approach for Continuous Mobile Authentication
- On the Resilience of Biometric Authentication Systems against Random Inputs
- Continuous User Authentication by Contactless Wireless Sensing
- Forgery-Resistant Touch-based Authentication on Mobile Devices
- User-Generated Free-Form Gestures for Authentication: Security and Memorability
- A Comprehensive Survey on Machine Learning Techniques and User Authentication Approaches for Credit Card Fraud Detection
- Treadmill Assisted Gait Spoofing (TAGS): An Emerging Threat to wearable Sensor-based Gait Authentication
- FingerSlid: Towards Finger-Sliding Continuous Authentication on Smart Devices Via Vibration
- BeCAPTCHA: Detecting Human Behavior in Smartphone Interaction using Multiple Inbuilt Sensors
- FADEWICH: Fast Deauthentication over the Wireless Channel
- Gesture-based Continuous Authentication for Wearable Devices: the Google Glass Case
- Insights from BB-MAS -- A Large Dataset for Typing, Gait and Swipes of the Same Person on Desktop, Tablet and Phone
- HMOG: New Behavioral Biometric Features for Continuous Authentication of Smartphone Users
- A Comprehensive Overview of Biometric Fusion
- Swipe dynamics as a means of authentication: results from a Bayesian unsupervised approach
- Continuous Authentication of Smartphones Based on Application Usage
- Shattered Trust: When Replacement Smartphone Components Attack
- PIANO: Proximity-based User Authentication on Voice-Powered Internet-of-Things Devices
- EnTrans:Leveraging Kinetic Energy Harvesting Signal for Transportation Mode Detection
- Deep Feature-based Face Detection on Mobile Devices
- Kinetic Song Comprehension: Deciphering Personal Listening Habits via Phone Vibrations
- Continuous Operator Authentication for Teleoperated Systems Using Hidden Markov Models
- DELTA: Data Extraction and Logging Tool for Android
- End-to-end User Recognition using Touchscreen Biometrics
- A report on personally identifiable sensor data from smartphone devices
- Kid on The Phone! Toward Automatic Detection of Children on Mobile Devices
- Dynamic Multi-level Privilege Control in Behavior-based Implicit Authentication Systems Leveraging Mobile Devices
- BehavioCog: An Observation Resistant Authentication Scheme
- Daily Turking: Designing Longitudinal Daily-task Studies on Mechanical Turk
- Your signature is your password: Haptic Passwords on Mobile Devices
- Authentication of Smartphone Users Using Behavioral Biometrics
- Authentication and Authorization for Mobile IoT Devices using Bio-features: Recent Advances and Future Trends
- Studying the Impact of Mood on Identifying Smartphone Users
- SMAUG: Secure Mobile Authentication Using Gestures