Theme Interception Sequence Learning: Deflecting Rubber-Hose Attacks Using Implicit Learning

Diwakar, Shyam; Chellaiah, Priya; Nair, Bipin; Achuthan, Krishnashree

doi:10.1007/978-3-319-11933-5_55

Cited by 4 publications

(2 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Studies report comic strips playing a strategic role in expanding the opportunities in teaching and learning, and have shown a decrease in social loneliness and increased satisfaction in students with autism spectrum disorder [15], [16]. An authentication system [17] based on implicit learning from cognitive psychology [18], where passwords were generated using a special task called serial interception sequence learning (SISL) was proposed as a preliminary implementation. Users were trained on a secret key of 30-character length in a 45-minute training session.…”

Section: Introductionmentioning

confidence: 99%

Using Theme-based Narrative Construct of Images as Passwords: Implementation and Assessment of Remembered Sequences

et al. 2017

Self Cite

View full text Add to dashboard Cite

Abstract-With many online engineering platforms such as virtual and remote laboratories designed for young or aged users, user authentication and passwords-based methods are being re-evaluated for tracking usage patterns and security. For ICT-enabled online engineering platforms, image-based humancentric approaches are gaining relevance for access frameworks. With the rubber-hose attacks, increased senior users, many existing systems are vulnerable to many attacks. This paper employs human uniqueness of narrative skills on an image-based password system for online platforms with focus on theme in the password generation process. To generate the secret password, a specially designed computer game was used. We used narrative constructs composed of cartoon image sequences to generate user-speci!c secret key. The durability of generated passwords and the authentication process while assessing the reconstruction process by a potential hacker was verified. For validating use of coerced attacks, under imposed psychological duress, users failed retrieving the password sequence suggesting the reliability as an anti-coercive attack cybersecurity tool. A set of experiments were used to analyze user behavior behind the image-based password system. EEG measurements demonstrated increased activity of " rhythms in F3 and FC5 channel bins and augmented levels of # rhythms in F3 and O1 channels, suggesting users added personalization to authentication more than in alpha-numeric password-based logins.

show abstract

Section: Introductionmentioning

confidence: 99%

Using Theme-based Narrative Construct of Images as Passwords: Implementation and Assessment of Remembered Sequences

et al. 2017

Self Cite

View full text Add to dashboard Cite

show abstract

“…Initial proposals to address coercion attacks are based on generating innovative authentication materials using implicitly learned tasks (i.e. habitual bias in performing a certain task), which could not be consciously explained to an attacker [4,8] and therefore prevented authentication materials from being transferred during a coercion attack. However, these proposals did not explicitly cover the second (and more realistic) scenario of coercion, where an attacker forces the victim to perform the authentication process for them so that the attacker can gain unauthorized access to the system.…”

Section: Introductionmentioning

confidence: 99%

Chill-Pass: Using Neuro-Physiological Responses to Chill Music to Defeat Coercion Attacks

Wolotsky¹,

Husain²,

Choe³

2016

Preprint

View full text Add to dashboard Cite

Current alphanumeric and biometric authentication systems cannot withstand situations where a user is coerced into releasing their authentication materials under hostile circumstances. Existing approaches of coercion resistant authentication systems (CRAS) propose authentication factors such as implicit learning tasks, which are non-transferable, but still have the drawback that an attacker can force the victim (causing stress) to perform the task in order to gain unauthorized access. Alternatively, there could be cases where the user could claim that they were coerced into giving up the authentication materials, whereas in reality they acted as an insider attacker. Therefore, being able to detect stress during authentication also helps to achieve non-repudiation in such cases. To address these concerns, we need CRAS that have both the non-transferable property as well as a mechanism to detect stress related to coercion. In this paper, we study the feasibility of using Chill (intensely pleasurable) music as a stimulus to elicit unique neuro-physiological responses that can be used as an authenticating factor for CRAS. Chill music and stress are both stimuli for a neuro-chemical called Dopamine. However, they release the Dopamine at different parts of the brain, resulting in different neuro-physiological responses, which gives us both the non-transferable and stress-detection properties necessary for CRAS. We have experimentally validated our proposed Chill music based CRAS using human subjects and measuring their neuro-physiological responses on our prototype system. Based on the 100 samples collected from the subjects, we were able to successfully authenticate the subjects with an accuracy of over 90%. Our work not only demonstrates the potential of Chill music as a unique stimulus for CRAS, but also paves the * Sandia National Laboratories is a multi-program laboratory managed and operated by Sandia Corporation, a wholly owned subsidiary of Lockheed Martin Corporation, for the U.S. Department of Energys National Nuclear Security Administration under contract DE-AC04-94AL85000.path of wider adoption of CRAS in general.

show abstract

A Skill Based Image Grid Authentication Scheme

Walte

Sarath

2018

2018 Fourth International Conference on Computing Communication Control and Automation (ICCUBEA)

View full text Add to dashboard Cite

Theme Interception Sequence Learning: Deflecting Rubber-Hose Attacks Using Implicit Learning

Cited by 4 publications

References 17 publications

Using Theme-based Narrative Construct of Images as Passwords: Implementation and Assessment of Remembered Sequences

Using Theme-based Narrative Construct of Images as Passwords: Implementation and Assessment of Remembered Sequences

Chill-Pass: Using Neuro-Physiological Responses to Chill Music to Defeat Coercion Attacks

A Skill Based Image Grid Authentication Scheme

Contact Info

Product

Resources

About