The Impact of Password Complexity Level on Building a Reliable Model of Keystroke Features
Article Sidebar
-
Keystroke Dynamics, Familiar Password, Features, Biometric Template, Enrolment, Access Control
Abstract
Electronic authentication is considered to be one of the most important problems in the field of accessing information sources. In an era that relies entirely on virtual accounts, the complexity of the password is no longer effective to protect it from penetration. This necessitates the use of new technologies to enhance the level of security that passwords provide to protect users' data. Keystroke dynamics is a technique for identifying users based on their behavior on the keyboard. This study aims to identify the various methods of authentication and highlights the use of keystroke dynamics as a powerful tool that can be used alongside the password to verify the identity of the user. This paper provides a theoretical and analytical study of the use of keystroke dynamics in producing a model for the behavioral user characteristics according to the type of password. A software application was developed by the Java language to conduct an experiment to collect time data for users when they interact with the keyboard to enter three passwords of different complexity levels and then extract behavioral characteristics and apply a statistical classification algorithm. The study showed that the use of medium-complex and complex passwords gives better results than the simple password and also confirmed the results of previous studies. It was also found that the use of aggregated features (total typing time) associated with a complex password is the best to distinguish users from one another while taking into account their behavior when writing large letters and numbers.
Full text article
References
1- القحطاني، خاد بن سليمان والغثبر، محمد بن عبدالله، (2009)، أمن المعلومات، الطبعة الأولى.
2- المهن، نورا.2011 استخدام مجموعة المصنعات لمصادقة التوقيع الديناميكي. the of Communications ACS، 4(2).
3- العطاس، إيمان ومسحول، سهام. 2012، اختيار التواقيع مصادقة فى السمات الديناميكية. (1)5، Communications of the ACS، 4(2).
4/- ما هي القياسات الحيوية (paper White) http://www.aware.com/wp-content/uploads%20/2016/02/WP_What-are-Biometrics_Arabic_0216.pdf
[5]-Abualgasim, S.D. and Osman, I. (2011), An application of the keystroke Dynamics biometric for securing PINs and passwords , WCSIT, 1(9), pp 398-404.
[6]-Alsultan, A., Warwick, K. and Wei, H., 2016. Free-text keystroke dynamics authentication for Arabic language.IET Biometrics,5(3):164-169
[7]-Ali,M.L., Monaco, J.V., Tappert, C.C. and Qiu, M., 2017. Keystroke biometric systems for user authentication.Journal of Signal Processing Systems,86(2-3):175-190
[8]-Bhartiya, N., Jangid, N. and Jannu, S., 2018, April. Biometric Authentication Systems: SecurityConcerns and Solutions. p. 1-6. In2018 3rd International Conference for Convergence in Technology (I2CT). IEEE
[9]-Bhardwaj, I., Londhe, N.D. and Kopparapu, S.K., 2017. A novel behavioural biometric technique for robust user authentication.IETE Technical Review,34(5):pp.478-490.
[10]-Calot, E.P., Ierache, J.S. and Hasperué, W., 2019, September. Document Typist Identification by Classification Metrics Applying Keystroke Dynamics Under Unidealised Conditions.p. 19-24. In2019 International Conference on Document Analysis and Recognition Workshops (ICDARW). IEEE.
[11]-Conijn, R., Roeser, J. and van Zaanen, M., 2019. Understanding the keystroke log: the effect of writing task on keystroke features.Reading and Writing,32(9): 2353-2374.
[12]-Chatterjee, K., 2019. Biometric re-authentication: an approach towards achieving transparency in user authentication.Multimedia Tools and Applications,78(6): 6679-6700.
[13]-Fouad, K.M., Hassan, B.M. and Hassan, M.F., 2016. User authentication based on dynamic keystroke recognition.International Journal of Ambient Computing and Intelligence (IJACI),7(2):1-32
[14]-Kozierkiewicz-Hetmańska, A1, Marciniak, A1 and Pietranik, M., 2016, September. User Authentication Through Keystroke Dynamics as the Protection Against Keylogger Attacks.p. 345-355. InInternational Conference on Computational Collective Intelligence(). Springer, Cham.
[15]-Migdal, D. and Rosenberger, C., 2019, July. Keystroke Dynamics Anonymization System. ICETE (2): 448-455
[16]-Ometov, A., Bezzateev, S., Mäkitalo, N., Andreev, S., Mikkonen, T. and Koucheryavy, Y., 2018. Multi-factor authentication: A survey.Cryptography,2(1): 1.
[17]-Obaidat, M.S., Krishna, P.V., Saritha, V. and Agarwal, S., 2019. Advances in Key Stroke Dynamics-Based Security Schemes.p.165-187. In Biometric-Based Physical and Cybersecurity Systems. Springer, Cham.
[18]-Quraishi, S.J. and Bedi, S.S., 2018, November. Keystroke Dynamics Biometrics, A tool for User Authentication–Review.p. 248-254. In2018 International Conference on System Modeling & Advancement in Research Trends (SMART). IEEE
[19]-Raul, N., Shankarmani, R. and Joshi, P., 2020. A Comprehensive Review of Keystroke Dynamics-Based Authentication Mechanism. p. 149-162. InInternational Conference on Innovative Computing and Communications. Springer, Singapore.
[20]-Roy, S., Roy, U. and Sinha, D.D., 2014. Enhanced knowledge-based user authentication technique via keystroke dynamics.Int. J. Eng. Sci. Invention (IJESI),3(9): 41-48.
[21]-Sachan, M., Joshi, P. and Raul, N., 2017, September. Keystroke Dynamics Support for Authentication. p. p. 186-191. In2017 International Conference on Current Trends in Computer, Electrical, Electronics and Communication (CTCEEC). IEEE
[22]-Shanmugapriya, D. and Ganapathi, P., 2019. A Framework for Improving the Accuracy of Keystroke Dynamics-Based Biometric Authentication Using Soft Computing Techniques.p. 208-235. In Biometric Authentication in Online Learning Environments. IGI Global.
[23]-Shute, S., Ko, R.K. and Chaisiri, S., 2017, August. Attribution Using Keyboard Row Based Behavioural Biometrics for Handedness Recognition. p.1131-1138.In2017 IEEE Trustcom/BigDataSE/ICESS.IEEE
[24]-Sundararajan, A., Sarwat, A.I. and Pons, A., 2019. A survey on modality characteristics, performance evaluation metrics, and security for traditional and wearable biometric systems. ACM Computing Surveys (CSUR),52(2): pp.1-36
[25]-Syed, Z., Banerjee, S. and Cukic, B., 2016. Normalizing variations in feature vector structure in keystroke dynamics authentication systems. Software Quality Journal,24(1):137-157.
[26]-Yan, Jing. 2009, Continuous authentication based on computer security , Master’s thesis, Lulea university, Sweden.
Authors
This work is licensed under a Creative Commons Attribution 4.0 International License.
In a brief statement, the rights relate to the publication and distribution of research published in the journal of the University of Sebha where authors who have published their articles in the journal of the university of Sebha should how they can use or distribute their articles. They reserve all their rights to the published works, such as (but not limited to) the following rights:
- Copyright and other property rights related to the article, such as patent rights.
- Research published in the journal of the University of Sebha and used in its future works, including lectures and books, the right to reproduce articles for their own purposes, and the right to self-archive their articles.
- The right to enter a separate article, or for a non-exclusive distribution of their article with an acknowledgment of its initial publication in the journal of Sebha University.
Privacy Statement The names and e-mail addresses entered on the Sabha University Journal site will be used for the aforementioned purposes only and for which they were used.