This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
behavioral_biometrics [2018/07/12 19:22] sandeep.gupta@unitn.it [Solutions] |
behavioral_biometrics [2020/03/21 13:18] sandeep.gupta@unitn.it [Talks and Tutorials] |
||
---|---|---|---|
Line 1: | Line 1: | ||
- | Among the [[research_activities|research topics]] of the [[start|Security Group]], we are investigating the use of behavioral biometrics for user authentication on new generation devices. Existing authentication schemes, e.g., PIN/passwords, face and iris recognition, etc., have shown to be less secure and less usable and users are reluctant to enable them on their devices. Consequently, the research has been diverted to find their usable alternatives. | + | Among the [[research_activities|research topics]] of the [[start|Security Group]], we are investigating the use of behavioral biometrics for user authentication on new-generation devices. Existing authentication schemes, e.g., PIN/passwords, face and iris recognition, etc., have shown to be less secure and less usable and users are reluctant to enable them on their devices. Consequently, the research has been diverted to find usable alternatives. |
Human biological data, due to its permanence and uniqueness, can be used as a means of identification, authentication and access control. The use of biological data for the purpose of identity management is termed as biometric recognition or simply biometrics. Physical (based on the physical characteristics) and behavioral (based on behaviors) biometrics are the most popular types. Physical characteristics include fingerprints, hand geometry, iris or retina scans, etc., and behavioral characteristics include keystrokes, gait, signature, voice, etc. Other biometrics use chemical features (based on events that happen in a person's body, measured by e.g., odor or temperature) and cognitive features (based on brain responses to specific stimuli, e.g. odor or sound). | Human biological data, due to its permanence and uniqueness, can be used as a means of identification, authentication and access control. The use of biological data for the purpose of identity management is termed as biometric recognition or simply biometrics. Physical (based on the physical characteristics) and behavioral (based on behaviors) biometrics are the most popular types. Physical characteristics include fingerprints, hand geometry, iris or retina scans, etc., and behavioral characteristics include keystrokes, gait, signature, voice, etc. Other biometrics use chemical features (based on events that happen in a person's body, measured by e.g., odor or temperature) and cognitive features (based on brain responses to specific stimuli, e.g. odor or sound). | ||
- | Biometrics has got all the potential to completely replace PINs and passwords because they can be stolen, forgotten, and shared. Biometric authentication has been studied for a long time. Large-scale commercial deployments already exist, such as the fingerprint sensors on laptops and smartphones. However, these deployments are based on physical biometrics, which essentially require explicit user action, hence result in annoying the users. As a results, most of the research about transparent, implicit and unobservable authentication for smartphone's security and access control is based on behavioral biometrics. | + | Biometrics has got all the potential to completely replace PINs and passwords because they can be stolen, forgotten, and shared. Biometric authentication has been studied for a long time. Large-scale commercial deployments already exist, such as the fingerprint sensors on laptops and smartphones. However, these deployments are based on physical biometrics, which essentially requires explicit user action, hence result in annoying users. As a result, most of the research about transparent, implicit and unobservable authentication for smartphone's security and access control is based on behavioral biometrics. |
- | Behavioral biometrics offer many advantages over physiological traits. One of the main advantages is that the behavioral patterns can be collected transparently or sometimes even without user's knowledge. More importantly, data collection does not require any special dedicated hardware. However, most of the behaviors are not unique enough to provide accurate user identification but have shown promising results in user verification. Various behavior-based authentication solutions have been tested and evaluated but are yet to be deployed at large scale. One reason is that the performance of many of these schemes is not yet at the same level as physical biometrics. Another reason is that not much attention has been paid to the performance of biometrics under differing or difficult circumstances. For example, gait authentication is typically evaluated by having subjects walk along flat surfaces of corridors in buildings. | + | Behavioral biometrics offer many advantages over physiological traits. One of the main advantages is that the behavioral patterns can be collected transparently or sometimes even without the user's knowledge. More importantly, data collection does not require any special dedicated hardware. However, most of the behaviors are not unique enough to provide accurate user identification but have shown promising results in user verification. Various behavior-based authentication solutions have been tested and evaluated but are yet to be deployed at large scale. One reason is that the performance of many of these schemes is not yet at the same level as physical biometrics. Another reason is that not much attention has been paid to the performance of biometrics under differing or difficult circumstances. For example, gait authentication is typically evaluated by having subjects walk along flat surfaces of corridors in buildings. |
- | We have been developing behavioral-biometric-based solutions that authenticate the users with either minimal or no cooperation from the users. We are designing, prototyping and testing the proposed authentication based on our identified behaviors, i.e., how a person holds her phone, moves her phone, or interact with its touchscreen. We are also performing the comparative evaluation, based on accuracy, performance, and usability, with the state-of-the-art behavioral-biometric-based solutions. All of our solutions exploit the existing hardware (avoiding additional hardware requirement) and hence can be implemented on most of the smartphones available in the market today. | + | We have been developing behavioral-biometric-based solutions that authenticate the users with either minimal or no cooperation from the users. We are designing, prototyping and testing the proposed authentication based on our identified behaviors, i.e., how a person holds her phone, moves her phone, or interacts with its touchscreen. We are also performing the comparative evaluation, based on accuracy, performance, and usability, with the state-of-the-art behavioral-biometric-based solutions. All of our solutions exploit the existing hardware (avoiding additional hardware requirements) and hence can be implemented on most of the smartphones available in the market today. |
==== Themes ==== | ==== Themes ==== | ||
- | Within the main stream project we covered a number of themes. | + | Within the mainstream project we covered a number of themes. |
- | * Authentication for Smartphones, tablets and smartwatches. | + | * Authentication for Smartphones, tablets, and smartwatches. |
* Securing the behavioral-biometric-template (ongoing) | * Securing the behavioral-biometric-template (ongoing) | ||
* Risk-based adaptive/continuous user authentication schemes(ongoing). | * Risk-based adaptive/continuous user authentication schemes(ongoing). | ||
Line 22: | Line 22: | ||
==== People ==== | ==== People ==== | ||
- | The following is a list of involved people. | + | Team members |
- | * [[http://www.disi.unitn.it/people/PER0140883/|Attaullah Buriro]] | ||
- | * [[https://www.linkedin.com/in/sandeepgupta26|Sandeep Gupta]] | ||
* [[http://disi.unitn.it/~crispo/|Bruno Crispo]] | * [[http://disi.unitn.it/~crispo/|Bruno Crispo]] | ||
+ | * [[https://www.linkedin.com/in/sandeepgupta26|Sandeep Gupta]] | ||
+ | * [[http://www.disi.unitn.it/people/PER0140883/|Attaullah Buriro]] | ||
* Filippo Del Frari | * Filippo Del Frari | ||
Line 42: | Line 42: | ||
* [[Android App Reputation Services (ARTS)]] | * [[Android App Reputation Services (ARTS)]] | ||
+ | |||
+ | ==== Datasets ==== | ||
+ | |||
+ | **Instructions to access to our datasets** | ||
+ | |||
+ | - Send the {{:disi_securitylab_license.pdf|signed license agreement}} by email as per the instructions mentioned below. | ||
+ | - Send an email to __security(AT)disi(DOT)unitn(DOT)it__, as follows: | ||
+ | - Subject: [DATABASE download: DISI Security Lab Datasets] | ||
+ | - Body: Your name, e-mail, telephone number, organization, postal mail, purpose for which you will use the database, time and date at which you sent the email with the signed license agreement. | ||
+ | - Once the email along with the license agreement has been received, we will send the requested database. | ||
+ | |||
+ | |||
+ | **Datasets Available** | ||
+ | |||
+ | - 95 users touch and hold-movements data (smartphones) | ||
+ | - 86 users swipe, pickup, and voice data (smartphones) | ||
+ | - 40 users hold and digital signature data (tablets) | ||
+ | - 40 users hand-movements data for Smarthandle | ||
==== Solutions ==== | ==== Solutions ==== | ||
- | * [[http://unitn.apachetechnology.com|DialerAuth]] | + | * [[http://unitn.apachetechnology.com/#dialerauth|DialerAuth]] |
- | * [[http://unitn.apachetechnology.com|DriverAuth]] | + | * [[http://unitn.apachetechnology.com/#driverauth|DriverAuth]] |
- | * [[http://unitn.apachetechnology.com|Hold n Sign]] | + | * [[http://unitn.apachetechnology.com/#holdnsign|Hold n Sign]] |
- | * [[http://unitn.apachetechnology.com|Itsme]] | + | * [[http://unitn.apachetechnology.com/#itsme|Itsme]] |
- | * [[http://unitn.apachetechnology.com|SnapAuth]] | + | * [[http://unitn.apachetechnology.com/#snapauth|SnapAuth]] |
- | * [[http://unitn.apachetechnology.com|Touchstroke]] | + | * [[http://unitn.apachetechnology.com/#touchstroke|Touchstroke]] |
====Talks and Tutorials ==== | ====Talks and Tutorials ==== | ||
+ | * Sandeep Gupta. [[https://youtu.be/t91JcogINcQ|Next-generation user authentication schemes for IoT applications]], FOSAD, 2019. | ||
+ | * Sandeep Gupta. [[https://youtu.be/EyJ-th-L8Ik|Introduction to Machine Learning and Classifiers]], UNITN, 2019. | ||
* Attaullah Buriro. //Mobile Biometrics: Towards A Comprehensive Evaluation Methodology//. Madrid, Spain. October 2017.{{:research_activities:mobile-biometrics.pdf|Slides}} | * Attaullah Buriro. //Mobile Biometrics: Towards A Comprehensive Evaluation Methodology//. Madrid, Spain. October 2017.{{:research_activities:mobile-biometrics.pdf|Slides}} | ||
* Attaullah Buriro. //Hold & Sign: A Novel Behavioral Biometrics for Smartphone User Authentication//. DistriNET KULeuven, LEuven, Belgium. December 2016.{{:research_activities:diskman.pdf|Slides}} | * Attaullah Buriro. //Hold & Sign: A Novel Behavioral Biometrics for Smartphone User Authentication//. DistriNET KULeuven, LEuven, Belgium. December 2016.{{:research_activities:diskman.pdf|Slides}} | ||
Line 60: | Line 80: | ||
| | ||
==== Publications ==== | ==== Publications ==== | ||
+ | | ||
+ | **2020** | ||
+ | * Sandeep Gupta, Attaullah Buriro and Bruno Crispo: A chimerical dataset combining physiological and behavioral biometric traits for reliable user authentication on smart devices and ecosystems; Data In Brief (DIB), Elsevier. | ||
+ | | ||
+ | **2019** | ||
+ | * Sandeep Gupta, Attaullah Buriro and Bruno Crispo: A Risk-driven Model to Minimize the Effects of Human Factors on Smart Devices; ETAA, 2019. | ||
+ | * Sandeep Gupta, and Bruno Crispo: A perspective study towards biometric-based rider authentication schemes for driverless taxis, International Conference On Innovation And Intelligence For Informatics, Computing, And Technologies (3ICT), 2019. | ||
+ | * Sandeep Gupta, Attaullah Buriro, and Bruno Crispo: SmartHandle: A Novel Behavioral Biometric-based Authentication Scheme for Smart Lock Systems, 3rd International Conference on Biometric Engineering and Applications (ICBEA 2019), 2019. | ||
+ | * Sandeep Gupta, Attaullah Buriro, and Bruno Crispo: DriverAuth: A Risk-based Multi-modal Biometric-based Driver Authentication Scheme for Ride-sharing Platforms, Computers & Security, 2019. | ||
+ | * Sandeep Gupta, Attaullah Buriro, and Bruno Crispo: DriverAuth: Behavioral Biometric-based Driver Authentication Mechanism for On-demand Ride and Ridesharing Infrastructure, Information & Communications Technology Express, ICT Express Journals, 2019. | ||
+ | | ||
+ | **2018:** | ||
+ | * Attaullah Buriro, Bruno Crispo, Mojtaba Eskandri, Sandeep Gupta, Athar Mahboob, Rutger Van Acker; SnapAuth: A Gesture-Based Unobtrusive Smartwatch User Authentication Scheme, International Workshop on Emerging Technologies for Authorization and Authentication, 2018. | ||
+ | * Attaullah Buriro, Sandeep Gupta, Bruno Crispo, and Filippo Del Frari: DIALERAUTH: A Motion-assisted Touch-based Smartphone User Authentication Scheme, 8th ACM Conference on Data and Application Security and Privacy, Tempe, AZ, USA, March 2018. | ||
+ | * Sandeep Gupta, Attaullah Buriro, and Bruno Crispo: Demystifying Authentication Concepts in Smartphones: Ways and Types to Secure Access, Mobile Information Systems (Special Issue), Hindawi Journals, 2018. | ||
+ | | ||
+ | | ||
**2017:** | **2017:** | ||
* Attaullah Buriro, Zahid Akhtar, Bruno Crispo, and Sandeep Gupta: Mobile Biometrics: Towards A Comprehensive Evaluation Methodology. In //Proceedings of The 51st International Carnahan Conference on Security Technology (ICCST-2017)//, Madrid, Spain. {{:research_activities:mobile_biometric.pdf|PDF}} | * Attaullah Buriro, Zahid Akhtar, Bruno Crispo, and Sandeep Gupta: Mobile Biometrics: Towards A Comprehensive Evaluation Methodology. In //Proceedings of The 51st International Carnahan Conference on Security Technology (ICCST-2017)//, Madrid, Spain. {{:research_activities:mobile_biometric.pdf|PDF}} |