Keystroke dynamics‐based user authentication service for cloud computing

Abo-Alian, Alshaimaa; Badr, Nagwa L.; Tolba, Mohamed F.

doi:10.1002/cpe.3718

Cited by 12 publications

(4 citation statements)

References 39 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…such as a security electronic token, a key, trusted device, passport, smart cards, or ID card as an Automatic Teller Machine card (ATM card) [21] [22]. Those physical devices were developed to overcome certain weakness associated with using passwords.…”

Section: Possession-based Authentication Techniquesmentioning

confidence: 99%

Biometric-based Authentication Techniques for Securing Cloud Computing Data - A Survey

Asmaa¹,

Hala²,

Mostafa-Sami³

2018

IJCA

View full text Add to dashboard Cite

Cloud Computing is the most growing paradigm for delivering computational resources as a service over the internet. By 2018, many different enterprises have adopted this utility-based computing for reducing the operational and capital expenditure of building their infrastructure network, buying software licenses, hiring IT teams and other requirements. With this unlimited growth of using cloud services and the multi-tenancy nature of sharing cloud service instance between different consumers and enterprises, securing accessing to the data of the cloud became a major issue. Traditional authentication techniques and credentials does not provide enough security against the modern means of attacks. So, new biometric-based authentication techniques have been discovered to overcome the loop holes. Here we present a comprehensive survey on the existing user's authentication techniques especially biometric-based techniques used for accessing cloud data.

show abstract

Section: Possession-based Authentication Techniquesmentioning

confidence: 99%

Biometric-based Authentication Techniques for Securing Cloud Computing Data - A Survey

Asmaa¹,

Hala²,

Mostafa-Sami³

2018

IJCA

View full text Add to dashboard Cite

show abstract

“…Recently, researchers have proposed different individuallevel identity theft detection methods based on suspicious behavior detection [11], [27]- [33]. However, the efficacy of these methods significantly depends on the sufficiency of behavior records, suffering from the low-quality of behavior records due to data collecting limitations or some privacy issues [3].…”

Section: Introductionmentioning

confidence: 99%

“…Especially, when a method only utilizes a specific dimension of behavioral data, the efficacy damaged by poor data is possibly enlarged. Unfortunately, most existing works just concentrate on a specific dimension of users' behavior, such as keystroke [27], clickstream [30], and user generated content (UGC) [11], [31], [32].…”

Section: Introductionmentioning

confidence: 99%

Fusing Behavioral Projection Models for Identity Theft Detection in Online Social Networks

Wang

Yang

Cui

et al. 2019

IEEE Trans. Comput. Soc. Syst.

View full text Add to dashboard Cite

In this work, we aim at building a bridge from poor behavioral data to an effective, quick-response, and robust behavior model for online identity theft detection. We concentrate on this issue in online social networks (OSNs) where users usually have composite behavioral records, consisting of multi-dimensional low-quality data, e.g., offline check-ins and online user generated content (UGC). As an insightful result, we find that there is a complementary effect among different dimensions of records for modeling users' behavioral patterns. To deeply exploit such a complementary effect, we propose a joint model to capture both online and offline features of a user's composite behavior. We evaluate the proposed joint model by comparing with some typical models on two real-world datasets: Foursquare and Yelp. In the widely-used setting of theft simulation (simulating thefts via behavioral replacement), the experimental results show that our model outperforms the existing ones, with the AUC values 0.956 in Foursquare and 0.947 in Yelp, respectively. Particularly, the recall (True Positive Rate) can reach up to 65.3% in Foursquare and 72.2% in Yelp with the corresponding disturbance rate (False Positive Rate) below 1%. It is worth mentioning that these performances can be achieved by examining only one composite behavior (visiting a place and posting a tip online simultaneously) per authentication, which guarantees the low response latency of our method. This study would give the cybersecurity community new insights into whether and how a real-time online identity authentication can be improved via modeling users' composite behavioral patterns.

show abstract

“…Cloud computing is an emerging paradigm that is considered an alternative to the conventional computing for delivering software, platform, and infrastructure services to customers on demand . Cloud storage services allow the data owner to outsource local data to an online virtualized storage.…”

Section: Introductionmentioning

confidence: 99%

Integrity as a service for replicated data on the cloud

Abo-Alian

Badr

Tolba

2016

Concurrency and Computation

Self Cite

View full text Add to dashboard Cite

Summary With the proliferation of cloud storage services, data integrity verification becomes increasingly significant in order to guarantee the availability and correctness of the outsourced data. Recently, many auditing schemes have been proposed to verify data integrity without possessing or downloading the outsourced data files. However, such schemes in existence assume that there is a single data owner that can update the file and compute the integrity tags. They do not consider the efficiency of user revocation when auditing multi‐owner data in the cloud. In addition, existing schemes only support dynamic data operations over fixed‐size and single‐copy data blocks. Thus, every small update may need updating the tags for all file blocks in all replicas, which in turn causes higher storage and communication overheads. This paper proposes a public and dynamic auditing scheme that supports fully dynamic data operations over variable‐size data blocks for replicated and multi‐owner cloud storage. Moreover, the proposed scheme can also support efficient user revocation. By supporting batch auditing, the proposed scheme can handle multiple auditing tasks simultaneously and divide an auditing task into multiple sub‐tasks in order to increase the detection probability. Experimental results prove the effectiveness and efficiency of the proposed system. Copyright © 2016 John Wiley & Sons, Ltd.

show abstract

Keystroke dynamics‐based user authentication service for cloud computing

Cited by 12 publications

References 39 publications

Biometric-based Authentication Techniques for Securing Cloud Computing Data - A Survey

Biometric-based Authentication Techniques for Securing Cloud Computing Data - A Survey

Fusing Behavioral Projection Models for Identity Theft Detection in Online Social Networks

Integrity as a service for replicated data on the cloud

Contact Info

Product

Resources

About