Enhancing Textual Password Authentication Using Typing Rhythm

We examined the false acceptance rate (FAR) and false rejection rate (FRR) of varying precision verification experimental designs. Analysis of variance was applied to derive the subcomponents of imprecision (ie, repeatability, between-run, between-day imprecision) for complex matrix experimental designs (day × run × replicate; day × run). For simple nonmatrix designs (1 day × multiple replicates or multiday × 1 replicate), ordinary standard deviations were calculated. The FAR and FRR in these different scenarios were estimated. The FRR increased as more samples were included in the precision experiment. The application of an upper verification limit, which seeks to cap FRR at 5% for multiple experiments, significantly increased the FAR. The FRR decreases as the observed imprecision increases relative to the claimed imprecision and when a greater number of days, runs, or replicates are included in the verification design. Increasing the number or days, runs, or replicates also reduces the FAR for between-day imprecision and repeatability. Design of verification experiments should incorporate the local availability of resources and analytical expertise. The largest imprecision component should be targeted with a greater number of measurements. Consideration of both FAR and FRR should be given when committing a platform into service.

"This paper explores the application of neural networks in multimodal biometric authentication systems, emphasizing the integration of multiple biometric modalities to enhance security, accuracy, and robustness against various attacks. Traditional authentication methods, such as passwords and single-modal biometrics, often suffer from vulnerabilities, including spoofing, environmental factors, and data breaches. To address these challenges, multimodal authentication systems combine several biometric traits, such as facial recognition, fingerprint scanning, voice recognition, and keystroke dynamics, to achieve higher reliability and resistance to security threats. The study provides an overview of public datasets used for training neural network-based biometric authentication models, including VoxCeleb, RAVDESS, MOBIO, and SDUMLA-HMT. These datasets contain diverse biometric information necessary for developing robust multimodal authentication systems. The paper evaluates the effectiveness of existing approaches using key performance metrics such as accuracy, false acceptance rate (FAR), false rejection rate (FRR), and area under the curve (AUC). Additionally, specialized metrics are considered, including failure to enroll rate (FTE), failure to acquire rate (FTA), and template stability (TS), which are crucial for real-world applications. The role of neural networks in multimodal biometric authentication is analyzed by examining state-of-the-art architectures, including convolutional neural networks (CNNs) and deep learning-based feature fusion methods. Various fusion levels—feature-level, score-level, and decision-level—are discussed to determine the optimal integration strategy for improving authentication performance. The results indicate that multimodal systems significantly outperform unimodal authentication methods by reducing vulnerability to spoofing and environmental variations. Experimental findings suggest that integrating multiple biometric traits enhances the system’s adaptability to dynamic conditions, reducing both false acceptance and false rejection rates. Despite these advantages, several challenges remain, including computational complexity, data privacy concerns, and the need for real-time processing capabilities. Future research should focus on optimizing multimodal fusion techniques, improving generalization across different datasets, and enhancing the security of biometric templates against adversarial attacks. Additionally, developing lightweight neural network architectures suitable for mobile and embedded systems is essential for the practical deployment of multimodal authentication technologies"

This method describes the advantages of a signature verification or any other biometric methodology having multiple tries. Traditional verification techniques acquire a test sample and compare with a model and a decision is made as to whether the test sample is genuine or a forgery. While it is clear that allowing a second try will reduce the false rejects, it will also increase the false accepts. However, from our experiments, the increase in false accepts was small compared to the dramatic reduction in false rejects. At the 1% false rejection (FR) rate, the addition of the second try reduced the false acceptance (FA) rate from 4.7% to 1.3%. So, in applications where very low FR is required, allowing the signer a second try appears to be a good option.

Smart Home Systems (SHSs) automation platforms are now enabling users to automate the control of their SHS devices by installing autonomous third-party applications (called SmartApps). However, intentional/unintentional issues would make SmartApps deviate from their expected behavior, putting the SHS owner’s security at risk. To address this issue, in this paper, we introduce an ML behavior-based approach to prevent malicious control of SHS devices by misbehaved SmartApps. To do so, control commands issued by the SmartApps during regular operation are captured to build a One-Class Support Vector Machine (OCSVM) model as a baseline for each installed SmartApp. Then, anomalous commands (i.e., outlier data points) should be detected and rejected, while normal commands (i.e., inlier data points) are allowed to be executed. Through an experimental evaluation conducted on an adapted SHS automation history, our proposed approach exhibits low false acceptance and rejection rates.

The problem of speaker recognition from a given set of speakers for any language and any context is considered. A database of Russian numerals that contains speech segments from 216 men and 177 women, each of whom spoke from 400 to 800 words, is used for recognition. Speech has been recorded on different types of microphones in different rooms at the natural noise level. Recognition is based on solutions of the inverse problem of finding the voice excitation pulse shape for each pitch period by the known speech segment. The pulse shape is defined as the inverse Fourier transform of the regularized ratio of speech signal spectra at the intervals of the open and closed glottis. Recognition is carried out by ten parameters: the pitch period, the open glottis interval duration, times when the source amplitude is maximum, minimum, or zero, the amplitude ratio for the minimum and maximum source pulses, three decomposition ratios of the source function by the principal component method, and the vowel duration. In such a recognition procedure, in the case of the utterance of a word that contains one vowel, the false reject rate (FRR) for men is 1.7---5.4%, and the false acceptance rate (FAR) is 5.4---7.1%. For women FRR = 2---5.2% and FAR = 5.2---6.3%. The recognition error decreases with an increasing number of vowels in the speech signal. At 10 vowels, for men FRR = 0.05---0.2% and FAR = 0.07---0.8%, and for women FRR = 0.09---0.2% and FAR = 0.17---2.1%.

Iris recognition system is the most secured, and faster means of identification and authentication. However, iris recognition system suffers a setback from blurring, low contrast and illumination due to low quality image which compromises the accuracy of the system. The acceptance or rejection rates of verified user depend solely on the quality of the image. In many cases, iris recognition system with low image contrast could falsely accept or reject user. Therefore this paper adopts Histogram Equalization Technique to address the problem of False Rejection Rate (FRR) and False Acceptance Rate (FAR) by enhancing the contrast of the iris image. A histogram equalization technique enhances the image quality and neutralizes the low contrast of the image at normalization stage. The experimental result shows that Histogram Equalization Technique has reduced FRR and FAR compared to the existing techniques.

The cumulative match curve (CMC) is used as a measure of 1: m identification system performance. It judges the ranking capabilities of an identification system. The receiver operating characteristic curve (ROC curve) of a verification system, on the other hand, expresses the quality of a 1:1 matcher. The ROC plots the false accept rate (FAR) of a 1:1 matcher versus the false reject rate (FRR) of the matcher. We show that the CMC is also related to the FAR and FRR of a 1:1 matcher, i.e., the matcher that is used to rank the candidates by sorting the scores. This has as a consequence that when a 1:1 matcher is used for identification, that is, for sorting match scores from high to low, the CMC does not offer any additional information beyond the FAR and FRR curves. The CMC is just another way of displaying the data and can be computed from the FAR and FRR.

Smart control access to any service is at the very basis of any smart city project. Biometrics have been used as a solution for system access control, for many years now. However, the simple use of biometrics can not be considered as final and perfect solution. Most problems are related to the data transmission way between the medias, where the users require access and the servers where the biometric data, captured upon registration, are stored. In this paper, the use smart-cards is adopted as a possible effective yet efficient solution to this problem. Palm-prints have been used as a human identifier for a long time now. This biometric is considered one of the most reliable to distinguish a person from another as its unique yet stable over time. In this work, we propose an efficient implementation of palm-print verification on smart-cards. For this implementation, the matching is done on-card. Thus, the biometric characteristics are always kept in the owner’s card, guaranteeing the maximum security and privacy. In a first approach, the False Acceptance Rate (FAR) and False Rejection Rate (FRR) are improved using upward, downward, leftward and rightward translations of the matched palm-codes. However, after thorough analysis of the achieved results, we show that the proposed method introduces a significant increase in terms of execution time of the matching operation. In order to mitigate this impact, we augmented the proposed technique with an acceptance threshold verification, thus decreasing drastically the execution time of the matching operation, and yet achieving considerably low FAR and FRR. It is noteworthy to point out that these characteristics are at the basis of any access control successful usage.

The main purpose of this study is to present a novel personal authentication approach with the electrocardiogram (ECG) signal. The electrocardiogram is a recording of the electrical activity of the heart and the recorded signals can be used for individual verification because ECG signals of one person are never the same as those of others. The discrete wavelet transform was applied for extracting features that are the wavelet coefficients derived from digitized signals sampled from one-lead ECG signal. By the proposed approach applied on 35 normal subjects and 10 arrhythmia patients, the verification rate was 100% for normal subjects and 81% for arrhythmia patients. Furthermore, the performance of the ECG verification system was evaluated by the false acceptance rate (FAR) and false rejection rate (FRR). The FAR was 0.83% and FRR was 0.86% for a database containing only 35 normal subjects. When 10 arrhythmia patients were added into the database, FAR was 12.50% and FRR was 5.11%. The experimental results demonstrated that the proposed approach worked well for normal subjects. For this reason, it can be concluded that ECG used as a biometric measure for personal identity verification is feasible.

Problem statement: In any real time biometric system processing speed and recognition time are crucial parameters. Reducing processing time involves many parameters like normalization, FAR, FRR, management of eyelid and eyelash occlusions, size of signature etc. Normalization consumes substantial amount of time of the system. This study contributes for improved iris recognition system with reduced processing time, False Acceptance Rate (FAR) and False Rejection Rate (FRR). Approach: To improve system performance and reliability of a biometric system. It avoided the iris normalization process used traditionally in iris recognition systems. The technique proposed here used different masks to filter out iris image from an eye. Comparative study of different masks was done and optimized mask is proposed. The experiment was carried on CASIA database consisting of 756 iris images of 108 persons. Each person contributes seven images of eye (108×7 = 756) images in the database. Results: In the proposed method: (1) Normalization step is avoided; (2) Computational time is reduced by 0.3342 sec; (3) Iris signature size is reduced; (4) Improved performance parameters. (With reduced feature size, proposed method achieves 99.4866% accuracy, 0.0069% FAR, 1.0198% FRR and significant increase in speed of the system). Conclusion: Iris signature proposed was comparatively small just of 1×24 size. Though Daugman’s method gives best accuracy of 99.90% but the iris signature length used by that algorithm is comparatively very high that is 1×2048 phase vector. Also Daugman has used phase information in signature formation. Our method gives a accuracy of 99.474% with a signature of comparatively very small length. This has definitely contributed to improve the speed.

In recent years the security breaches and fraud transactions are increasing day by day. So there is a necessity for highly secure authentication technologies. The security of an authentication system can be strengthened by using Biometric system rather than the traditional method of authentication like Identity Cards (ID) and password which can be stolen easily. A biometric system works on biometric traits and fingerprint has the maximum share in market for providing biometric authentication as it is reliable, consistent and easy to capture. Although the biometric system is used to provide security to many applications but it is susceptible to different types of assaults too. Among all the modules of the biometric system which needs security, biometric template protection has received great consideration in the past years from the research community due to sensitivity of the biometric data stored in the form of template. A number of methods have been devised for providing template protection. Fuzzy vault is one of the cryptosystem based method of template security. The aim of fuzzy vault technique is to protect the precarious data with the biometric template in a way that only certified user can access the secret by providing valid biometric. In this paper, a modified version of fuzzy vault is presented to increase the level of security to the template and the secret key. The polynomial whose coefficients represent the key is transformed using an integral operator to hide the key where the key can no longer be derived if the polynomial is known to the attacker. The proposed fuzzy vault scheme also prevents the system from stolen key inversion attack. The results are achieved in terms of False Accept Rate (FAR), False Reject Rate (FRR), Genuine Acceptance Rate (GAR) by varying the degree of polynomial and number of biometric samples. It was calculated that for 40 users GAR was found to be 92%, 90%, 85% for degree of polynomial to be 3, 4 and 5 respectively. It was observed that increasing the degree of polynomial decreased the FAR rate, thus increasing the security

Fingerprint recognition has widespread security applications owing to its uniqueness, permanence, and simplicity in capture. However, conventional fingerprint authentication systems face high false acceptance and rejection rates and susceptibility to spoofing attacks. To address these issues, this study proposes a deep learning-based fingerprint authentication system using a Convolutional Neural Network (CNN) with five convolution layers to derive robust spatial features. The model was trained and cross-validated on the SOCOFing dataset with regularization and data augmentation to enhance generalization and spoof resistance. Experimental results show that the proposed CNN achieved a training accuracy of 99.10% with a loss of 0.0223 and a validation accuracy of 98.89% with a loss of 0.0114. Moreover, the model maintained a low false acceptance rate of 0.33% and false rejection rate of 0.25%, demonstrating its efficacy and credibility for secure and real-time biometric authentication. A rigorous comparison with conventional CNN models and DCCN architectures confirmed that the proposed model provides higher accuracy, lower computational cost, and stronger resistance to spoofing attacks. These findings indicate that the proposed system successfully addresses existing limitations and offers a practical, scalable, and reliable solution for fingerprint verification using deep CNN architectures.

We propose a novel modality for active biometric authentication: electrical muscle stimulation (EMS). To explore this, we engineered an interactive system, which we call ElectricAuth, that stimulates the user’s forearm muscles with a sequence of electrical impulses (i.e., EMS challenge) and measures the user’s involuntary finger movements (i.e., response to the challenge). ElectricAuth leverages EMS’s intersubject variability, where the same electrical stimulation results in different movements in different users because everybody’s physiology is unique (e.g., differences in bone and muscular structure, skin resistance and composition, etc.). As such, ElectricAuth allows users to login without memorizing passwords or PINs. ElectricAuth’s challenge-response structure makes it secure against data breaches and replay attacks, a major vulnerability facing today’s biometrics such as facial recognition and fingerprints. Furthermore, ElectricAuth never reuses the same challenge twice in authentications – in just one second of stimulation it encodes one of 68M possible challenges. In our user studies, we found that ElectricAuth resists: (1) impersonation attacks (false acceptance rate: 0.17% at 5% false rejection rate); (2) replay attacks (false acceptance rate: 0.00% at 5% false rejection rate); and, (3) synthesis attacks (false acceptance rates: 0.2-2.5%). Our longitudinal study also shows that ElectricAuth produces consistent results over time and across different humidity and muscle conditions.

Touch gesture biometrics authentication system is the study of user's touching behavior on his touch device to identify him. The features traditionally used in touch gesture authentication systems are extracted using hand-crafted feature extraction approach. In this work, we investigate the ability of Deep Learning (DL) to automatically discover useful features of touch gesture and use them to authenticate the user. Four different models are investigated Long-Short Term Memory (LSTM), Gated Recurrent Unit (GRU), Convolutional Neural Network (CNN) combined with LSTM (CNN-LSTM), and CNN combined with GRU(CNN-GRU). In addition, different regularization techniques are investigated such as Activity Regularizer, Batch Normalization (BN), Dropout, and LeakyReLU. These deep networks were trained from scratch and tested using TouchAlytics and BioIdent datasets for dynamic touch authentication. The result reported in terms of authentication accuracy, False Acceptance Rate (FAR), False Rejection Rate (FRR). The best result we have been obtained was 96.73%, 96.07% and 96.08% for training, validation and testing accuracy respectively with dynamic touch authentication system on TouchAlytics dataset with CNN-GRU DL model, while the best result of FAR and FRR obtained on TouchAlytics dataset was with CNN-LSTM were FAR was 0.0009 and FRR was 0.0530. For BioIdent dataset the best results have been obtained was 84.87%, 78.28% and 78.35% for Training, validation and testing accuracy respectively with CNN-LSTM model. The use of a learning based approach in touch authentication system has shown good results comparing with other state-of-the-art using TouchAlytics dataset.

Behaviour-based continuous authentication systems like those that utilise an individual user's typing rhythm and device usage behaviour patterns have much potential over password-based schemes since they do not require an individual user to memorise passwords. Irrespective of the progress in biometric technologies, many systems are still susceptible to more complex attacks, and the decision between security and usability has been a perennial struggle for researchers and practitioners. This paper offers a powerful continuous authentication system based on AI and behavioural biometrics, enhancing precision and resistance to motivated attacks. By measuring behavioural data (e.g. keystroke dynamics and motion sensor) on a heterogeneous user population and then analyzing it, we trained our machine learning models to verify users in real-time. Based on our results, our performance is better than that of the traditional and static authentication methods, with an accuracy of 97.2 per cent, with the false acceptance rate (FAR) and false rejection rate (FRR) of 1.8 per cent and 2.3 per cent, respectively. Moreover, error analysis depicted significant trends in behaviour changes, which apply to an adaptive security strategy. This is demonstrated as a potential of AI-based behavioural biometrics to support feasible, secure, and user-friendly continuous authentication systems that work in contemporary cybersecurity scenarios. Future improvements will additionally involve enlarging datasets, combining multi-modal behavioural features, and increasing resistance to spoofing and behavioural drift.