PFI-TT: Behavior-Based Account Recovery, Trust Assessment, and Continuous Authentication for Strengthening Online Identity

PFI-TT：基于行为的帐户恢复、信任评估和持续身份验证，以加强在线身份

• 批准号: 2122746
• 负责人: Daqing Hou
• 金额: $ 25万
• 依托单位: Clarkson University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-07-15 至 2024-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2122746&HistoricalAwards=false
• 关键词: PFI; TT; Behavior; Based; Account

The broader impact/commercial potential of this Partnerships for Innovation - Technology Translation (PFI-TT) project is in the online fraud detection and prevention for large populations of users in different industries such as healthcare, credit card processing or retail banking business. The proposed project involves the prototyping of a novel software for online fraud detection and prevention based on behavioral biometrics. US consumers lose $5.1 billion annually due to account takeover fraud and online shopping presents the greatest fraud risk. There is strong demand for online fraud detection in sectors such as e-commerce and financial services. This project includes an entrepreneurial education and leadership development plan for the graduate students in the team, that will include customer discovery activities, mentorship from experienced entrepreneurs in the biometrics business area, and innovation and entrepreneurship activities at the Center for Identification Technology Research (CITeR), a NSF Industry University Collaborative Research Center (IUCRC). Broadening participation activities include supporting underrepresented graduate students and providing research opportunities for undergraduate students from diverse groups. The proposed project involves the prototyping of a novel software solution framework for online fraud detection and prevention that is based on behavioral biometrics. The software framework systematically integrates options for prevention via account recovery, trust assessment of universal identities, and detection via post-login authentication. The team will also explore the design and implementation of innovative features/solutions for intellectual property and user privacy protection, two deployment options, and additional post-login authentication features paving the way for integrating behavioral biometrics and post-login authentication into enterprise systems. Finally, usability considerations including end-user evaluation of behavioral biometrics in security critical scenarios that matter the most to consumers will be explored.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

这种伙伴关系对创新 - 技术翻译（PFI -TT）项目的更广泛的影响/商业潜力在于在线欺诈检测和预防范围内，包括医疗保健，信用卡处理或零售银行业务等不同行业的大量用户。 拟议的项目涉及基于行为生物识别技术的在线欺诈检测和预防的新型软件的原型制作。 由于帐户收购欺诈和在线购物的最大欺诈风险，美国消费者每年损失51亿美元。电子商务和金融服务等领域对在线欺诈检测的需求很大。该项目包括针对团队研究生的企业家教育和领导力发展计划，其中包括客户发现活动，生物识别公司业务领域经验丰富的企业家的指导以及身份认同技术研究中心（CITER），A NSF工业大学协作中心（IUCRC）的创新和企业家活动。 扩大参与活动包括支持代表性不足的研究生，并为来自不同小组的本科生提供研究机会。提出的项目涉及基于行为生物识别技术的新型软件解决方案框架的原型制作，用于在线欺诈检测和预防。软件框架系统地集成了通过帐户恢复，通用身份的信任评估以及通过Login后身份验证检测的预防选项。 该团队还将探索用于知识产权和用户隐私保护的创新功能/解决方案的设计和实施，两个部署选项以及其他后验证身份验证功能铺平了为将行为生物识别技术和洛糖后身份验证整合到Enterprise系统中的道路。 最后，将探讨在安全性临界场景中对行为生物识别技术的最终用户评估，将探讨最重要的对消费者的评估。该奖项反映了NSF的法定任务，并被认为是值得通过基金会的智力优点和更广泛的影响来通过评估来支持的。

项目成果

User Authentication by Fusion of Mouse Dynamics and Widget Interactions: Two Experiments with PayPal and Facebook

• DOI: 10.1109/ccnc51644.2023.10059968
• 发表时间: 2023-01
• 期刊: 2023 IEEE 20th Consumer Communications & Networking Conference (CCNC)
• 作者: Simon Khan;Daqing Hou

Shared Multi-Keyboard and Bilingual Datasets to Support Keystroke Dynamics Research

共享多键盘和双语数据集以支持击键动力学研究

• DOI: 10.1145/3508398.3511516
• 发表时间: 2022
• 期刊: CODASPY '22: Proceedings of the Twelfth ACM Conference on Data and Application Security and Privacy
• 作者: Wahab, Ahmed Anu;Hou, Daqing;Banavar, Mahesh;Schuckers, Stephanie;Eaton, Kenneth;Baldwin, Jacob;Wright, Robert
• 通讯作者: Wright, Robert

A User Study of Keystroke Dynamics as Second Factor in Web MFA

击键动力学作为 Web MFA 中第二因素的用户研究

• DOI: 10.1145/3577923.3583642
• 发表时间: 2023
• 期刊: CODASPY '23: Proceedings of the Thirteenth ACM Conference on Data and Application Security and Privacy
• 作者: Wahab, Ahmed Anu;Hou, Daqing;Schuckers, Stephanie
• 通讯作者: Schuckers, Stephanie

Multi-Modality Mobile Datasets for Behavioral Biometrics Research: Data/Toolset paper

用于行为生物识别研究的多模态移动数据集：数据/工具集论文

• DOI: 10.1145/3577923.3583637
• 发表时间: 2023
• 期刊: CODASPY '23: Proceedings of the Thirteenth ACM Conference on Data and Application Security and Privacy
• 作者: Ray-Dowling, Aratrika;Wahab, Ahmed Anu;Hou, Daqing;Schuckers, Stephanie
• 通讯作者: Schuckers, Stephanie

Stationary mobile behavioral biometrics: A survey

• DOI: 10.1016/j.cose.2023.103184
• 发表时间: 2023-03
• 期刊: Comput. Secur.
• 作者: Aratrika Ray-Dowling;Daqing Hou;S. Schuckers