Slashdot Mirror
Users Identified Through Typing, Mouse Movements
mask.of.sanity writes "Users can be identified with a half percent margin of error based on the way they type. The research work has been spun into an application that could continuously authenticate users (PDF), rather than just relying on passwords, and could lock accounts if another person jumped on the computer. Researchers are now integrating mouse movements and clicks, and mobile touch patterns into the work."
How exactly is that new? https://www.keytrac.net/ http://www.intensityanalytics.com/ http://www.idcontrol.com/keystrokeid And there is like half a dozen more.
Ha!
And some others:
2000: Identification By Typing
2007: Typing Patterns for Authentication
2008: Identify and Verify Users Based on How They Type
2011: Verifying Passwords By the Way They're Typed
2013: RSA: An Unusual Approach to User Authentication: Behavorial Biometrics
This has been done by a Swedish Company - http://www.behaviosec.com/
They have a continuous monitoring a system and also a product which can be integrated into a Web Page Post Form for a 2nd Factor of Authentication. I have played around with their Web Product - it's very good to be used as a secondary mechanism.
They are also working with DARPA - http://www.behaviosec.com/darpa-and-behaviosec-go-beyond-passwords/
So I am wondering if the Iowa University project is an extension on this?
The original Behaviosec product came out of a research project in a Swedish University and the people running the company include students who did the original project.