SocialAuth: Designing touch behavioral smartphone user authentication based on social networking applications

Weizhi Meng; Wenjuan Li; Lijun Jiang; Jianying Zhou

doi:10.1007/978-3-030-22312-0_13

SocialAuth: Designing touch behavioral smartphone user authentication based on social networking applications

Weizhi Meng^*, Wenjuan Li, Lijun Jiang, Jianying Zhou

^*Corresponding author for this work

Department of Applied Mathematics and Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

151 Downloads (Pure)

Abstract

Modern smartphones expressed an exponential growth and have become a personal assistant in people’s daily lives, i.e., keeping connected with peers. Users are willing to store their personal data even sensitive information on the phones, making these devices an attractive target for cyber-criminals. Due to the limitations of traditional authentication methods like Personal Identification Number (PIN), research has been moved to the design of touch behavioral authentication on smartphones. However, how to design a robust behavioral authentication in a long-term period remains a challenge due to behavioral inconsistency. In this work, we advocate that touch gestures could become more consistent when users interact with specific applications. In this work, we focus on social networking applications and design a touch behavioral authentication scheme called SocialAuth. In the evaluation, we conduct a user study with 50 participants and demonstrate that touch behavioral deviation under our scheme could be significantly decreased and kept relatively stable even after a long-term period, i.e., a single SVM classifier could achieve an average error rate of about 3.1% and 3.7% before and after two weeks, respectively.

Original language	English
Title of host publication	Proceedings of 34^th International Conference on ICT Systems Security and Privacy Protection
Editors	Gurpreet Dhillon, André Zúquete, Fredrik Karlsson, Karin Hedström
Publisher	Springer
Publication date	1 Jan 2019
Pages	180-193
ISBN (Print)	9783030223113
DOIs	https://doi.org/10.1007/978-3-030-22312-0_13
Publication status	Published - 1 Jan 2019
Event	34th IFIP TC 11 International Conference on Information Security and Privacy Protection - Lisbon, Portugal Duration: 25 Jun 2019 → 27 Jun 2019 Conference number: 34

Conference

Conference	34th IFIP TC 11 International Conference on Information Security and Privacy Protection
Number	34
Country/Territory	Portugal
City	Lisbon
Period	25/06/2019 → 27/06/2019

Series	IFIP Advances in Information and Communication Technology
Volume	562
ISSN	1868-4238

Keywords

Behavioral user authentication
Machine learning
Smartphone security
Social networking
Touch gestures
Usable security

Access to Document

10.1007/978-3-030-22312-0_13

FulltextAccepted author manuscript, 666 KB

OpenUrl availability

Full text

Cite this

Meng, W., Li, W., Jiang, L., & Zhou, J. (2019). SocialAuth: Designing touch behavioral smartphone user authentication based on social networking applications. In G. Dhillon, A. Zúquete, F. Karlsson, & K. Hedström (Eds.), Proceedings of 34^th International Conference on ICT Systems Security and Privacy Protection (pp. 180-193). Springer. https://doi.org/10.1007/978-3-030-22312-0_13

Meng, Weizhi ; Li, Wenjuan ; Jiang, Lijun et al. / SocialAuth : Designing touch behavioral smartphone user authentication based on social networking applications. Proceedings of 34^th International Conference on ICT Systems Security and Privacy Protection. editor / Gurpreet Dhillon ; André Zúquete ; Fredrik Karlsson ; Karin Hedström. Springer, 2019. pp. 180-193 (IFIP Advances in Information and Communication Technology, Vol. 562).

@inproceedings{703344b0a1594cbd97addd1b77930f33,

title = "SocialAuth: Designing touch behavioral smartphone user authentication based on social networking applications",

abstract = "Modern smartphones expressed an exponential growth and have become a personal assistant in people{\textquoteright}s daily lives, i.e., keeping connected with peers. Users are willing to store their personal data even sensitive information on the phones, making these devices an attractive target for cyber-criminals. Due to the limitations of traditional authentication methods like Personal Identification Number (PIN), research has been moved to the design of touch behavioral authentication on smartphones. However, how to design a robust behavioral authentication in a long-term period remains a challenge due to behavioral inconsistency. In this work, we advocate that touch gestures could become more consistent when users interact with specific applications. In this work, we focus on social networking applications and design a touch behavioral authentication scheme called SocialAuth. In the evaluation, we conduct a user study with 50 participants and demonstrate that touch behavioral deviation under our scheme could be significantly decreased and kept relatively stable even after a long-term period, i.e., a single SVM classifier could achieve an average error rate of about 3.1% and 3.7% before and after two weeks, respectively.",

keywords = "Behavioral user authentication, Machine learning, Smartphone security, Social networking, Touch gestures, Usable security",

author = "Weizhi Meng and Wenjuan Li and Lijun Jiang and Jianying Zhou",

year = "2019",

month = jan,

day = "1",

doi = "10.1007/978-3-030-22312-0_13",

language = "English",

isbn = "9783030223113",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer",

pages = "180--193",

editor = "Gurpreet Dhillon and Andr{\'e} Z{\'u}quete and Fredrik Karlsson and Karin Hedstr{\"o}m",

booktitle = "Proceedings of 34th International Conference on ICT Systems Security and Privacy Protection",

note = "34th IFIP TC 11 International Conference on Information Security and Privacy Protection, SEC 2019 ; Conference date: 25-06-2019 Through 27-06-2019",

}

Meng, W, Li, W, Jiang, L & Zhou, J 2019, SocialAuth: Designing touch behavioral smartphone user authentication based on social networking applications. in G Dhillon, A Zúquete, F Karlsson & K Hedström (eds), Proceedings of 34^th International Conference on ICT Systems Security and Privacy Protection. Springer, IFIP Advances in Information and Communication Technology, vol. 562, pp. 180-193, 34th IFIP TC 11 International Conference on Information Security and Privacy Protection, Lisbon, Portugal, 25/06/2019. https://doi.org/10.1007/978-3-030-22312-0_13

SocialAuth: Designing touch behavioral smartphone user authentication based on social networking applications. / Meng, Weizhi; Li, Wenjuan; Jiang, Lijun et al.
Proceedings of 34^th International Conference on ICT Systems Security and Privacy Protection. ed. / Gurpreet Dhillon; André Zúquete; Fredrik Karlsson; Karin Hedström. Springer, 2019. p. 180-193 (IFIP Advances in Information and Communication Technology, Vol. 562).

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - SocialAuth

T2 - 34th IFIP TC 11 International Conference on Information Security and Privacy Protection

AU - Meng, Weizhi

AU - Li, Wenjuan

AU - Jiang, Lijun

AU - Zhou, Jianying

N1 - Conference code: 34

PY - 2019/1/1

Y1 - 2019/1/1

N2 - Modern smartphones expressed an exponential growth and have become a personal assistant in people’s daily lives, i.e., keeping connected with peers. Users are willing to store their personal data even sensitive information on the phones, making these devices an attractive target for cyber-criminals. Due to the limitations of traditional authentication methods like Personal Identification Number (PIN), research has been moved to the design of touch behavioral authentication on smartphones. However, how to design a robust behavioral authentication in a long-term period remains a challenge due to behavioral inconsistency. In this work, we advocate that touch gestures could become more consistent when users interact with specific applications. In this work, we focus on social networking applications and design a touch behavioral authentication scheme called SocialAuth. In the evaluation, we conduct a user study with 50 participants and demonstrate that touch behavioral deviation under our scheme could be significantly decreased and kept relatively stable even after a long-term period, i.e., a single SVM classifier could achieve an average error rate of about 3.1% and 3.7% before and after two weeks, respectively.

AB - Modern smartphones expressed an exponential growth and have become a personal assistant in people’s daily lives, i.e., keeping connected with peers. Users are willing to store their personal data even sensitive information on the phones, making these devices an attractive target for cyber-criminals. Due to the limitations of traditional authentication methods like Personal Identification Number (PIN), research has been moved to the design of touch behavioral authentication on smartphones. However, how to design a robust behavioral authentication in a long-term period remains a challenge due to behavioral inconsistency. In this work, we advocate that touch gestures could become more consistent when users interact with specific applications. In this work, we focus on social networking applications and design a touch behavioral authentication scheme called SocialAuth. In the evaluation, we conduct a user study with 50 participants and demonstrate that touch behavioral deviation under our scheme could be significantly decreased and kept relatively stable even after a long-term period, i.e., a single SVM classifier could achieve an average error rate of about 3.1% and 3.7% before and after two weeks, respectively.

KW - Behavioral user authentication

KW - Machine learning

KW - Smartphone security

KW - Social networking

KW - Touch gestures

KW - Usable security

U2 - 10.1007/978-3-030-22312-0_13

DO - 10.1007/978-3-030-22312-0_13

M3 - Article in proceedings

AN - SCOPUS:85068208647

SN - 9783030223113

T3 - IFIP Advances in Information and Communication Technology

SP - 180

EP - 193

BT - Proceedings of 34th International Conference on ICT Systems Security and Privacy Protection

A2 - Dhillon, Gurpreet

A2 - Zúquete, André

A2 - Karlsson, Fredrik

A2 - Hedström, Karin

PB - Springer

Y2 - 25 June 2019 through 27 June 2019

ER -

Meng W, Li W, Jiang L, Zhou J. SocialAuth: Designing touch behavioral smartphone user authentication based on social networking applications. In Dhillon G, Zúquete A, Karlsson F, Hedström K, editors, Proceedings of 34^th International Conference on ICT Systems Security and Privacy Protection. Springer. 2019. p. 180-193. (IFIP Advances in Information and Communication Technology, Vol. 562). doi: 10.1007/978-3-030-22312-0_13

SocialAuth: Designing touch behavioral smartphone user authentication based on social networking applications

Abstract

Conference

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this