TWC: Medium: Collaborative: Long-term Active User Authentication Using Multi-modal Profiles

TWC：中：协作：使用多模式配置文件进行长期活跃用户身份验证

• 批准号: 1314792
• 负责人: Stephanie Schuckers
• 金额: $ 35万
• 依托单位: Clarkson University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-09-15 至 2018-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1314792&HistoricalAwards=false
• 关键词: TWC; Medium; Collaborative; Long; term

This project aims at advancing the state-of-the-art in cybersecurity by developing efficient methods for generating novel biometric signatures and performing active and continuous user authentication. Current authentication procedures typically occur once at the initial log-in stage and involve user proxies such as passwords and smart cards which suffer from several vulnerabilities. This research addresses these limitations by developing probabilistic, generative models to represent multimodal biometrics of every user in the system, so that any significant deviation from the user-specific model flags the presence of an imposter. This novel technique specifically targets mitigation of masquerading attacks which are particularly challenging to detect as they are mostly carried out by insiders familiar with the activity patterns of the authorized user. The approach enables identification of intruders before they can hijack a user session of an authorized individual who may have momentarily stepped away from his/her console.The project also involves extensive usability tests for seamless integration of the authentication processes in real-life computer and network systems, thus ensuring that data about the behavior and performance of people using the network is fed-back and incorporated into future designs of the security protocols. The methods also readily extend to protecting both wired and wireless networks, and mobile devices.

该项目旨在通过开发有效的方法来生成新颖的生物特征签名并执行主动和连续的用户身份验证，从而推进网络安全的最先进水平。当前的身份验证过程通常在初始登录阶段发生一次，并涉及用户代理，例如密码和智能卡，这些代理存在多个漏洞。这项研究通过开发概率生成模型来表示系统中每个用户的多模态生物识别数据，从而解决了这些限制，因此与用户特定模型的任何重大偏差都会标记冒名顶替者的存在。这种新技术专门针对减轻伪装攻击，这些攻击尤其难以检测，因为它们主要是由熟悉授权用户活动模式的内部人员执行的。 该方法能够在入侵者劫持可能暂时离开其控制台的授权个人的用户会话之前对其进行识别。该项目还涉及广泛的可用性测试，以实现现实计算机和网络中身份验证过程的无缝集成系统，从而确保有关使用网络的人的行为和表现的数据得到反馈并纳入安全协议的未来设计中。该方法还很容易扩展到保护有线和无线网络以及移动设备。