Many studies have shown that single entry-point authentication schemes for smartphones can easily be circumvented. IDEAuTH is an implicit deauthentication scheme that aims to minimize unauthorized access to security-sensitive applications and services running on users' smartphones when unauthorized access or intrusions are detected. IDEAuTH verifies legitimate owners of their smartphones by exploiting their micro hand-movements and decides to sign off the default user account revoking security-sensitive applications and services linked with it. We design and develop an Android-based prototype application as a proof-of-concept and collect a new dataset consisting of 21263 observations from 41 users in a real scenario. The user verification process employs four different one-class classifiers (OCCs), which is evaluated on the collected dataset using the holdout test method. IDEAuTH achieves a Half Total Error Rate (HTER) of approximate to 4 after applying a decision-level-fusion enhancing the best individual classifier's performance by approximate to 1 .(c) 2022 Published by Elsevier B.V.
展开▼
