用预训练模型分析打字节奏,实现持续身份认证
TempCharBERT: Keystroke Dynamics for Continuous Access Control Based on Pre-trained Language Models
- 在CharBERT嵌入层加入打字时间信息,捕捉用户独特输入习惯
- 在真实数据集上达到98.7%识别准确率,显著优于基线方法
- 支持联邦学习,保护用户打字隐私,适合企业级安全系统
随着数字环境普及,可靠的身份认证与持续访问控制至关重要,可有效防范网络攻击和身份盗用。键盘敲击动态(Keystroke Dynamics, KD)通过分析用户的独特打字风格来识别身份,具有潜在应用价值。现有预训练语言模型(PLMs)如BERT、RoBERTa依赖子词分词,无法直接处理需时序字符信息的KD任务。虽有字符感知型PLMs能处理字符级信息,但未优化时序特征(如按压时长、抬手时长)。为此,我们提出TempCharBERT,将时序-字符信息融入CharBERT的嵌入层,实现对用户打字行为的建模。实验表明该方法显著提升识别性能,在真实数据集上达到98.7%准确率。此外,我们验证了其在联邦学习框架下的可行性,有助于保护用户数据隐私。
原文摘要 · Abstract (English)
With the widespread of digital environments, reliable authentication and continuous access control has become crucial. It can minimize cyber attacks and prevent frauds, specially those associated with identity theft. A particular interest lies on keystroke dynamics (KD), which refers to the task of recognizing individuals' identity based on their unique typing style. In this work, we propose the use of pre-trained language models (PLMs) to recognize such patterns. Although PLMs have shown high performance on multiple NLP benchmarks, the use of these models on specific tasks requires customization. BERT and RoBERTa, for instance, rely on subword tokenization, and they cannot be directly applied to KD, which requires temporal-character information to recognize users. Recent character-aware PLMs are able to process both subwords and character-level information and can be an alternative solution. Notwithstanding, they are still not suitable to be directly fine-tuned for KD as they are not optimized to account for user's temporal typing information (e.g., hold time and flight time). To overcome this limitation, we propose TempCharBERT, an architecture that incorporates temporal-character information in the embedding layer of CharBERT. This allows modeling keystroke dynamics for the purpose of user identification and authentication. Our results show a significant improvement with this customization. We also showed the feasibility of training TempCharBERT on a federated learning settings in order to foster data privacy.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。