Users Identified Through Typing, Mouse Movements

mask.of.sanity writes "Users can be identified with a half percent margin of error based on the way they type. The research work has been spun into an application that could continuously authenticate users (PDF), rather than just relying on passwords, and could lock accounts if another person jumped on the computer. Researchers are now integrating mouse movements and clicks, and mobile touch patterns into the work."

News..

[Nimatek]

How exactly is that new? https://www.keytrac.net/ [keytrac.net] http://www.intensityanalytics.com/ [intensityanalytics.com] http://www.idcontrol.com/keystrokeid [idcontrol.com] And there is like half a dozen more.

Re:I've heard this before

[jones_supa]

Ha!

And some others:

2000: Identification By Typing [slashdot.org]
2007: Typing Patterns for Authentication [slashdot.org]
2008: Identify and Verify Users Based on How They Type [slashdot.org]
2011: Verifying Passwords By the Way They're Typed [slashdot.org]
2013: RSA: An Unusual Approach to User Authentication: Behavorial Biometrics [slashdot.org]

Swedish Company

[Frankie70]

This has been done by a Swedish Company - http://www.behaviosec.com/ [behaviosec.com]

They have a continuous monitoring a system and also a product which can be integrated into a Web Page Post Form for a 2nd Factor of Authentication. I have played around with their Web Product - it's very good to be used as a secondary mechanism.

They are also working with DARPA - http://www.behaviosec.com/darpa-and-behaviosec-go-beyond-passwords/ [behaviosec.com]

So I am wondering if the Iowa University project is an extension on this?

The original Behaviosec product came out of a research project in a Swedish University and the people running the company include students who did the original project.

No. Been sick, been injured, not been locked out

[raymorris]

If you hadn't tried it, you'd think that might be a problem. In fact, it's not.

I've been sick, I've been injured. My COO has been sick a lot. We log in to systems using Strongbox maybe four times per day.
Four times per day times about 400 days = 1600 logins for each of us. We haven't been locked out based on keyboard and mouse yet. Looking at millions of user logins, the keyboard and mouse indicators closely track the other indicators we use. By that, I mean if the real user scores 41-52-07 and they are in the US, when see a log in attempt with a score of 24-92-18 that attempt will come from China.