@inproceedings{cb261d47840241e3878b2086dff081a5,
title = "SocialAuth: Designing touch behavioral smartphone user authentication based on social networking applications",
abstract = "Modern smartphones expressed an exponential growth and have become a personal assistant in people{\textquoteright}s daily lives, i.e., keeping connected with peers. Users are willing to store their personal data even sensitive information on the phones, making these devices an attractive target for cyber-criminals. Due to the limitations of traditional authentication methods like Personal Identification Number (PIN), research has been moved to the design of touch behavioral authentication on smartphones. However, how to design a robust behavioral authentication in a long-term period remains a challenge due to behavioral inconsistency. In this work, we advocate that touch gestures could become more consistent when users interact with specific applications. In this work, we focus on social networking applications and design a touch behavioral authentication scheme called SocialAuth. In the evaluation, we conduct a user study with 50 participants and demonstrate that touch behavioral deviation under our scheme could be significantly decreased and kept relatively stable even after a long-term period, i.e., a single SVM classifier could achieve an average error rate of about 3.1\% and 3.7\% before and after two weeks, respectively.",
keywords = "Behavioral user authentication, Machine learning, Smartphone security, Social networking, Touch gestures, Usable security",
author = "Weizhi Meng and Wenjuan Li and Lijun Jiang and Jianying Zhou",
note = "Funding Information: Acknowledgments. We would like to thank all anonymous reviewers for their helpful comments, and Jianying Zhou was supported by SUTD start-up research grant SRG-ISTD-2017-124. Publisher Copyright: {\textcopyright} IFIP International Federation for Information Processing 2019.; 34th IFIP TC 11 International Conference on Information Security and Privacy Protection, SEC 2019 ; Conference date: 25-06-2019 Through 27-06-2019",
year = "2019",
doi = "10.1007/978-3-030-22312-0\_13",
language = "English",
isbn = "9783030223113",
series = "IFIP Advances in Information and Communication Technology",
publisher = "Springer New York LLC",
pages = "180--193",
editor = "Gurpreet Dhillon and Fredrik Karlsson and Karin Hedstr{\"o}m and Andr{\'e} Z{\'u}quete",
booktitle = "ICT Systems Security and Privacy Protection - 34th IFIP TC 11 International Conference, SEC 2019, Proceedings",
address = "United States",
}