Multi-modal decision fusion for continuous authentication. (January 2015)

• Record Type: Journal Article
• Authors: Fridman, Lex; Stolerman, Ariel; Acharya, Sayandeep; Brennan, Patrick; Juola, Patrick; Greenstadt, Rachel; Kam, Moshe
• Is Part Of: Computers & electrical engineering. Volume 41(2015)
• Page Start: 142
• Page End: 156
• Publication Date: 2015-01
• Subjects: Multimodal biometric systems -- Distributed communication -- Security and privacy -- Behavioral biometrics -- Decision fusion -- Active authentication; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2014.10.018
• Languages: English
• ISSNs: 0045-7906

Abstract

Graphical abstract: Highlights: Behavioral biometrics: keystroke dynamics, mouse movement, stylometry. A parallel binary decision fusion architecture with 11 sensors. A dataset collected from 67 users each working in an office environment for a week. Achieve below 1% error rates (FAR, FRR) after only 30 s of activity. Characterize robustness of system to adversarial attacks. Abstract: Active authentication is the process of continuously verifying a user based on their on-going interaction with a computer. In this study, we consider a representative collection of behavioral biometrics: two low-level modalities of keystroke dynamics and mouse movement, and a high-level modality of stylometry. We develop a sensor for each modality and organize the sensors as a parallel binary decision fusion architecture. We consider several applications for this authentication system, with a particular focus on secure distributed communication. We test our approach on a dataset collected from 67 users, each working individually in an office environment for a period of approximately one week. We are able to characterize the performance of the system with respect to intruder detection time and robustness to adversarial attacks, and to quantify the contribution of each modality to the overall performance.