행위 기반 인증을 위한 사용자 중심의 인증 요소 분석 연구
A Study of User Perception on Features Used in Behavior-Based Authentication
2
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
패스워드, 패턴 락, 지문인식 등의 기존 스마트폰 인증 기술은 사용자의 높은 자각을 요구하며 한번 인증이 되면재인증 절차 없이 모든 정보에 접근이 허용되는 일시적 인증이다. 이를 보완하기 위해 최근 스마트폰 사용자의 기기사용 패턴 및 행동을 기반으로 한 행위 기반 인증이 주목받고 있다. 하지만 기존의 연구는 사용자 중심의 연구가 아닌 인증의 정확도를 높이는 연구가 중점적으로 수행되었다. 인증은 사람이 직접 사용하는 것이므로 사용자 인식의분석이 필요하다. 본 연구는 인증을 강화하고 빈번히 발생하는 인증에 대한 사용 편의성을 향상시키기 위해 행위 기반 인증 기술에 대해 사용자 중심의 연구를 수행한다. 이를 위해 기존의 행위 기반 인증에 대한 연구를 바탕으로 인증 요소를 선별하고 이에 대한 인식 및 행위 기반 인증 기법의 수용에 대한 인식을 분석한다.
Abstract
The growth in smartphone service has given rise to an increase in frequency and importance of authentication. Existingsmartphone authentication mechanisms such as passwords, pattern lock and fingerprint recognition require a high level ofawareness and authenticate users temporarily with a point-of-entry techniques. To overcome these disadvantages, there havebeen active researches in behavior-based authentication. However, previous studies focused on enhancing the accuracy of theauthentication. Since authentication is directly used by people, it is necessary to reflect actual users’ perception. This paperproposes user perception on behavior-based authentication with feature analysis. We conduct user survey to empiricallyunderstand user perception regarding behavioral authentication with selected authentication features. Then, we analyzeacceptance of the behavioral authentication to provide continuous authentication with minimal awareness while using thedevice.
참고문헌 (30)
- S. M. Furnell, "Authentication and Supervision : A Survey of User Attitudes", Computers & Security, 19(6), pp.529~539 (2000)
- C. Braz, "Security and usability : the case of the user authentication methods", IHM, pp.199~203 (2006)
- H. Saevanee, "Text-based active authentication for mobile devices", IFIP, pp.99~112 (2014)
- M. Dürmuth, "Who are you? A statistical approach to measuring user authenticity", NDSS, pp.1~15 (2016)
- A. H. Lashkari, "Shoulder surfing attack in graphical password authentication", IJCSIS, 6(2), pp.145~154 (2009)
- A. J. Aviv, "Smudge Attacks on Smartphone Touch Screens", WOOT, 1~7 (2010)
- M. Shahzad, "Secure unlocking of mobile touch screen devices by simple gestures : You can see it but you can not do it", MobiCom, pp.39~50 (2013)
- A. K. Jain, "50 years of biometric research : Accomplishments challenges and opportunities", Pattern Recognition Letters, 79(1), pp.80~105 (2016)
- F. Li, "Active authentication for mobile devices utilising behaviour profiling", Int. J. Inf. Security, 13(3), pp.229~244 (2014)
- A. D. Luca, "Is Secure and Usable Smartphone Authentication Asking Too Much?", IEEE Computer, 48(5), pp.64~68 (2015)
- N. K. Ratha, "Enhancing security and privacy in biometrics-based authentication systems", IBM Systems Journal, 40(3), pp.614~634 (2001)
- N. Clarke, "Authentication of users on mobile telephones – a survey of attitudes and practices", Computers & Security, 24(7), pp.519~527 (2005)
- P. S. Teh, "A survey on touch dynamics authentication in mobile devices", Computers & Security, 59, pp.210~235 (2016)
- F. Tao, "Continuous mobile authentication using touchscreen gestures", HST, pp.451~456 (2012)
- L. Li, "Unobservable re-Authentication for smartphones", NDSS (2013)
- Xu, H, "Towards Continuous and Passive Authentication via Touch Biometrics : An Experimental Study on Smartphones", SOUPS, pp.187~198 (2014)
- Z. Sitová, "HMOG : New behavioral biometric features for continuous authentication of smart-phone users", IEEE Trans. Inform. Forensics Security, 11(5), pp.877~892 (2016)
- W. -H. Lee, "Secure pick up : Implicit authentication when you start using the smartphone", SACMAT, pp.67~78 (2017)
- Karapanos, N, "Sound-proof : usable two-factor authentication based on ambient sound", USENIX Security, pp.483~498 (2015)
- L. Zhang, "VoiceLive : A Phoneme Localization based Liveness Detection for Voice Authentication on Smartphones", CCS, pp.1080~1091 (2016)
- D. Liu, "Secure pairing with wearable devices by using ambient sound and light", Wuhan University Journal of Natural Sciences, 22(4), pp.329~336 (2017)
- T. Neal, "Mobile device application Bluetooth and Wi-Fi usage data as behavioral biometric traits", Proc. IEEE Int. Conf Biometrics Theory Applicat. and Syst, pp.1~6 (2015)
- F. Li, "Behaviour profiling for transparent authentication for mobile devices", Proc. Euro. Conf. Inform. Warfare and Security, pp.307~314 (2011)
- L. Fridman, "Active authentication on mobile devices via stylometry, application usage, web browsing, and GPS location", IEEE Systems Journal, 11(2), pp.513~521 (2017)
- S. Yazji, "Implicit User Re-authentication for Mobile Devices", Ubiquitous Intelligence and Computing, Lecture Notes in Computer Science, pp.325~339 (2009)
- Preuveneers, D., "Smartauth:dynamic context fingerprinting for continuous user authentication", Proc. of the ACM Symposium on Applied Computing, pp.2185~2191 (2015), SAC
- H. Xu, "Measuring mobile users’ concerns for information privacy", ICIS, pp.1~6 (2012)
- E. Chin, "Measuring user confidence in smartphone security and privacy", SOUPS, pp.1~6 (2012)
- "Password Selection and Use Guide", Korea Internet & Security Agency, ~ (2010)
- A. Serwadda, "Which verifiers work? : A benchmark evaluation of touch-based authentication algorithms", BTAS, pp.1~8 (2013)