User Authentication by Fusion of Mouse Dynamics and Widget Interactions: Two Experiments with PayPal and Facebook

User Authentication by Fusion of Mouse Dynamics and Widget Interactions: Two Experiments with PayPal and Facebook
复制标题

DOI:
10.1109/ccnc51644.2023.10059968
复制
发表时间:
2023-01
期刊:
2023 IEEE 20th Consumer Communications & Networking Conference (CCNC)
影响因子:
--
通讯作者:
Simon Khan;Daqing Hou
Simon Khan;Daqing Hou
中科院分区:
其他
文献类型:
--
作者:
Simon Khan;Daqing Hou

文献摘要

相似文献

在日常生活中使用互联网使我们在数据和系统的安全和隐私方面变得脆弱。例如,雅虎和Equifax都发生了大规模的数据泄露事件,原因是系统内缺乏强大和安全的数据保护。因此,必须找到解决方案,以进一步提高数据安全性并保护我们系统的隐私。为此,我们提出通过利用基于鼠标动态的分数级融合来认证用户(例如,屏幕上的鼠标移动)和窗口小部件交互(例如,当点击或悬停在屏幕上的不同图标上时)。在这项研究中,我们专注于两个常见的应用程序,PayPal(一个货币交易网站)和Facebook(一个社交媒体平台)。虽然我们为这两个应用程序融合了相同的模式,但调查PayPal的目的是为了展示当用户与应用程序进行短时间交互时,我们如何对用户进行身份验证,而调查Facebook的目的是基于社交媒体浏览活动对用户进行身份验证。我们总共有10个PayPal用户,平均每个用户12分钟的数据,总共有15个Facebook用户,平均每个用户2小时的数据。通过将单个鼠标轨迹与轨迹期间发生的相关小部件交互融合,我们的平均EER(相等错误率)与鼠标动态和小部件交互的评分级融合对于PayPal为7.64%(SVM-rbf)和3.25%(GBM),对于Facebook为5.49%(SVM-rbf)和2.54%(GBM)。为了进一步提高我们的融合性能,我们结合了多个连续轨迹的联合收割机决策得分,在PayPal和Facebook的所有用户中获得11个决策得分后,平均EER为0%。
Utilization of Internet in everyday life has made us vulnerable in terms of security and privacy of our data and systems. For example, large-scale data breaches have occurred at Yahoo and Equifax because of lacking of robust and secure data protection within systems. Therefore, it is imperative to find solutions to further boost data security and protect privacy of our systems. To this end, we propose to authenticate users by utilizing score-level fusions based on mouse dynamics (e.g., mouse movement on a screen) and widget interactions (e.g., when clicking or hovering over different icons on a screen) on two novel datasets. In this study, we focus on two common applications, PayPal (a money transaction website) and Facebook (a social media platform). Though we fuse the same modalities for both applications, the purpose of investigating PayPal is to demonstrate how we can authenticate users when the users interact with the app for only a short period of time, while the purpose of investigating Facebook is to authenticate users based on social media browsing activities. We have a total of 10 users for PayPal with an average of 12 minutes of data per user and a total of 15 users for Facebook with an average of 2 hours of data per user. By fusing a single mouse trajectory with the associated widget interactions that occur during the trajectory, our mean EERs (Equal Error Rates) with a score-level fusion of mouse dynamics and widget interactions are 7.64% (SVM-rbf) and 3.25% (GBM), for PayPal, and 5.49% (SVM-rbf) and 2.54% (GBM), for Facebook. To further improve the performance of our fusion, we combine decision scores from multiple consecutive trajectories, which yields a 0% mean EER after 11 decision scores across all the users for both PayPal and Facebook.