Abstract
Portable computers are used to store and access sensitive information. They are frequently used in insecure locations with little or no physical protection, and are therefore susceptible to theft and unauthorized access. We propose an implicit user re-authentication system for portable computers that requires no application changes or hardware modifications. The proposed technique observes user-specific patterns in filesystem activity and network access to build models of normal behavior. These are used to distinguish between normal use and anomalous use. We describe these automated model generation and user detection techniques, and explain how to efficiently implement them in a wireless distributed system composed of servers and battery-powered portable devices. The proposed system is able to distinguish between normal use and attack with an accuracy of approximately 90% every 5 minutes and consumes less than 12% of a typical laptop battery in 24 hours.
Original language | English (US) |
---|---|
Title of host publication | Ubiquitous Intelligence and Computing - 6th International Conference, UIC 2009, Proceedings |
Pages | 325-339 |
Number of pages | 15 |
DOIs | |
State | Published - 2009 |
Event | 6th International Conference on Ubiquitous Intelligence and Computing, UIC 2009 - Brisbane, QLD, Australia Duration: Jul 7 2009 → Jul 9 2009 |
Publication series
Name | Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) |
---|---|
Volume | 5585 LNCS |
ISSN (Print) | 0302-9743 |
ISSN (Electronic) | 1611-3349 |
Other
Other | 6th International Conference on Ubiquitous Intelligence and Computing, UIC 2009 |
---|---|
Country/Territory | Australia |
City | Brisbane, QLD |
Period | 7/7/09 → 7/9/09 |
Funding
This work was supported in part by the National Science Foundation under awards CNS-0347941, CNS-0720691, and CNS-0613967.
ASJC Scopus subject areas
- Theoretical Computer Science
- General Computer Science