用智能体模拟打字行为,发现键盘类型影响认证效果。
An Agent-Based Modeling Approach to Free-Text Keyboard Dynamics for Continuous Authentication
- 构建五类打字代理,模拟不同键盘的击键特征
- 随机森林准确率超70%,但跨键盘识别能力差
- 提示应按键盘类型定制用户认证模型
基于自由文本输入的连续认证系统为多因素认证提供了无感安全层。本研究采用智能体模型(ABM)模拟机械与膜式键盘上的多样化打字行为,生成五类独立代理的合成击键数据,每秒更新一次,滑动5秒窗口内捕捉停留时间、飞行时间和错误率特征。对比评估了单类支持向量机(OC-SVM)与随机森林(RF)两种机器学习方法的用户验证性能。结果显示:OC-SVM无法区分同一组内用户;而随机森林在同类型键盘上实现高精度识别(准确率 > 0.7),但在跨键盘场景下表现不佳,凸显硬件差异对打字行为的显著影响。结论表明:(1)需针对特定键盘建立用户画像以保证可靠性;(2)集成学习如随机森林更擅长捕捉细微用户特征。
原文摘要 · Abstract (English)
Continuous authentication systems leveraging free-text keyboard dynamics offer a promising additional layer of security in a multifactor authentication setup that can be used in a transparent way with no impact on user experience. This study investigates the efficacy of behavioral biometrics by employing an Agent-Based Model (ABM) to simulate diverse typing profiles across mechanical and membrane keyboards. Specifically, we generated synthetic keystroke data from five unique agents, capturing features related to dwell time, flight time, and error rates within sliding 5-second windows updated every second. Two machine learning approaches, One-Class Support Vector Machine (OC-SVM) and Random Forest (RF), were evaluated for user verification. Results revealed a stark contrast in performance: while One-Class SVM failed to differentiate individual users within each group, Random Forest achieved robust intra-keyboard user recognition (Accuracy > 0.7) but struggled to generalize across keyboards for the same user, highlighting the significant impact of keyboard hardware on typing behavior. These findings suggest that: (1) keyboard-specific user profiles may be necessary for reliable authentication, and (2) ensemble methods like RF outperform One-Class SVM in capturing fine-grained user-specific patterns.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。