User identification and monitoring is one of the most important issues in computer system security. A new method for user identification is presented based on the dynamics of computer mouse behavior. Data of mouse behavior in various applications are collected
and users' mouse behavior in human computer interaction is analyzed and modeled
specifically from both the interaction layer and the physiological layer. Based on the dynamic model
a real-time identity authentication and monitoring prototype system is developed
which can intercept users' mouse behavior data
and compare user's current behavior with his history behavior model in order to detect and authenticate current user's identity. According to the result of authentication
system responds real-time and defends against the intrusion of illegal user. An algorithm that uses feature dimension reduction and neural network for classification is applied in experiments for ten users. The experimental results show that mouse dynamics is effective for authenticating and monitoring user identities with a false accept rate(FAR)of 0.48% and a false rejection rate(FRR)of 2.86%.
关键词
Keywords
references
O'GORMAN L. Comparing passwords, tokens, and biometrics for user authentication [J]. Proceedings of the IEEE, 2003, 91(12):2021-2040.
BLEHA S, SLIVINSKY C, HUSSIEN B. Computer-access security systems using keystroke dynamics [J]. IEEE Transactions on Pattern Analysis and Machine Intelligence, 1990, 12(12):1217-1222.
OBAIDAT M S, SADOUN B. Verification of computer users using keystroke dynamics [J]. IEEE Transactions on System, Man, Cybernetics, 1997, 27(2):261-269.
高艳, 管晓宏, 孙国基, 等. 基于实时击键序列的主机入侵检测 [J]. 计算机学报, 2004, 27(3):336-400. GAO Yan, GUAN Xiaohong, SUN Guoji, et al. The host-based intrusion detection based on real time keystroke sequences [J]. Chinese Journal of Computers, 2004, 27(3):336-400.
PUSARA M, BRODLEY C E. User re-authentication via mouse movements [C]∥Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security. New York, USA: ACM,2004:1-8.
GAMBOA H, FRED A. A behavioral biometric system based on human computer interaction [EB/OL]. [2006-10-11].http:∥www.lx.it.pt/~afred/anawebit/articles/AFredSPIE2004.pdf.
AHMED A A E, TRAORE I. Anomaly intrusion detection based on biometrics [C]∥Proceedings of IEEE Information Assurance Workshop. Piscataway, NJ, USA: IEEE, 2005:452-453.
AHMED A A E, TRAORE I. Detecting computer intrusions using behavioral biometrics [EB/OL]. [2006-08-19].http:∥www.lib.unb.ca/Texts/PST/2005/pdf/ahmed.pdf.
GARG A, SANKARANARAYANAN V, UPADH-
YAYA S, et al. USim: a user behavior simulation framework for training and testing IDSes in GUI based systems [C]∥Proceedings of 39th Annual Simulation Symposium. Los Alamitos, CA, USA: IEEE Computer Society, 2006:196-203.
FITTS P M. The information capacity of the human motor system in controlling the amplitude of movement[J]. Journal of Experimental Psychology, 1954,47(6):381-391.
MITHAL A K, DOUGLAS S A. Differences in movement microstructure of the mouse and the finger-controlled isometric joystick [C]∥Proceedings of the SIGCHI Conference on Human Factors in Computing Systems: Common Ground. New York, USA: ACM, 1996:300-307.
PLAMONDON R, FENG C, WOCH A. A kinematic theory of rapid human movement [J]. Biological Cybernetics, 2003, 89(2):126-138.