안드로이드에서 앱 사용과 터치 정보를 이용한 행위 기반 사용자 인증 기술 연구
A Study of Behavior Based Authentication Using Touch Dynamics and Application Usage on Android
1
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
스마트폰 기기 내에 저장되는 사용자 정보가 다양화되어 개인정보에 대한 위협도 함께 증가하고 있다. 패턴 잠금, 지문 인식 등 다양한 사용자 인증 기술이 스마트폰에 적용되어 있으나 사용자 의존적, 거부감 유발 등의 한계점을 보이고있다. 최근 주목받고 있는 행위 기반 인증은 기기 사용과 동시에 인증이 가능하여 사용자에게 높은 편의성을 제공하나타 인증 기술에 비해 정확도가 낮아 이를 개선하기 위한 연구가 꾸준히 수행되고 있다. 본 연구에서는 이전 연구에서고려되지 않았던 앱 사용 정보를 새로운 인증 요소로 활용하는 방법을 제안한다. 또한 실제 앱 사용 상황을 고려한 데이터 수집 및 분석을 통해 제안 기술의 성능을 상세하게 분석한다.
Abstract
The increase in user data stored in the device implies the increase in threats of users’ sensitive data. Currently, smartphone authentication mechanisms such as Pattern Lock, fingerprint recognition are widely used. Although, there exist disadvantages of inconvenience use and dependence that users need to depend on their own memory. User behavior based authentication mechanism have advantages of high convenience by offering continuous authentication when using the mobile device. However, these mechanisms show limitations on low accuracy of authentication and there are researches to improve the accuracy. This paper proposes improved authentication mechanism that uses user’s smartphone application usage pattern which has not considered on earlier studies. Also, we analyze performance of proposed mechanism with collected datasets from actual use of smartphone applications.
참고문헌 (26)
- P. S. Teh, "A survey on touch dynamics authentication in mobile devices", Computers & Security, 59, pp.210~235 (2016)
- A. Alzubaidi, "Authentication of Smartphone Users Using Behavioral Biometrics", IEEE Communications Surveys & Tutorials, 18(3), pp.1998~2026 (2016)
- D. Davis, "On user choice in graphical password schemes", USENIX Security Symposium (2004)
- H. Gao, "Yagp : Yet another graphical password strategy", Annual Computer Security Applications Conference(ACSAC'08), pp.121~129 (2008)
- K. Renaud, "Visual passwords : Cure-all or snake-oil?", Communications of the ACM, pp.135~140 (2009)
- A. J. Aviv, "Smudge Attacks on Smartphone Touch Screens", Proc. of the 4th USENIX Conference on Offensive Technologies (WOOT'10), pp.1~7 (2010)
- P. Andriotis, "A Pilot Study on the Security of Pattern Screen-Lock Methods and Soft Side Channel Attacks", Proc. of the sixth ACM conference on Security and privacy in wireless and mobile networks (WiSec'13), pp.1~6 (2013)
- A. H. Lashkari, "Shoulder surfing attack in graphical password authentication", arXiv preprint arXiv:0912.0951, ~ (2009)
- S. M. Kolly, "A personal touch: Recognizing users based on touch screen behavior", Proceedings of the Third International Workshop on Sensing Applications on Mobile Phones (2012), ACM
- Y. Meng, "Touch gestures based biometric authentication scheme for touchscreen mobile phones", International Conference on Information Security and Cryptology (2012), Springer Berlin Heidelberg
- T. Feng, "Continuous mobile authentication using virtual key typing biometrics", 12th International Conference on Trust, Security and Privacy in Computing and Comm-unications, pp.1547~1552 (2013)
- Y. Meng, "Design of touch dynamics based user authentication with an adaptive mechanism on mobile phones", Proceedings of the 29th Annual ACM Symposium on Applied Computing, pp.1680~1687 (2014), ACM
- C. Shen, "Touch-interaction behavior for continuous user authentication on smartphones", 2015 International Conference on Biom- etrics (ICB), pp.157~162 (2015), IEEE
- L. Lu, "Safeguard : User Reauthentication on Smartphones via Behavioral Biometrics", IEEE Trans-actions on Computational Social Syst-ems, 2(3), pp.53~64 (2015)
- L. Fridman, "Active authentication on mobile devices via stylometry, application usage, web browsing, and GPS location", IEEE Systems Journal, PP(99), pp.1~9 (2015)
- Z. Sitová, "HMOG : New Behavioral Biometric Features for Continuous Authentication of Smartphone Users", IEEE Transactions on Information Forensics and Security, 11(5), pp.877~892 (2016)
- "Building Accessibility Services"[URL]
- "Microsoft Azure Machine Learning Studio"[URL]
- J. H. Friedman, "Greedy function approximation : a gradient boosting machine", Annals of statistics, pp.1189~1232 (2001)
- A. Criminisi, "Decision forests for computer vision and medical image analysis" (2013), Springer Science &Business Media
- J. Shotton, "Decision jungles : Compact and rich models for classification", Advances in Neural Information Processing Systems, pp.234~242 (2013)
- C. Cortes, "Support-vector networks", Machine learning, 20(3), pp.273~297 (1995)
- C. Jose, "Local deep kernel learning for efficient non-linear svm prediction", Proceedings of the 30th international conference on machine learning(ICML-13) (2013)
- S. Haykin, "Neuronal Networks-A comprehension Foundation", ~ (1999)
- R. Kohavi, "A study of cross-validation and bootstrap for accuracy estimation and model selection", Proc. Int. Joint Conf. Artificial, 14(2), pp.1137~1145 (1995)
- European Standard EN 50133-1: Alarm systems. Access control systems for use in security applications, , European Committee for Electrotechnical Standardization, ~, pp.Technical Body CLC (2002), TC 79