When Human cognitive modeling meets PINs: User-independent inter-keystroke timing attacks

• Main Authors: LIU, Ximing, LI, Yingjiu, DENG, Robert H., CHANG, Bing, LI, Shujun
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2019
• Subjects: Authentication; Human behavior; Human cognitive model; Keystroke dynamics; PIN; Timing attack; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/4153; https://ink.library.smu.edu.sg/context/sis_research/article/5157/viewcontent/Human_Cognitive_Model_PINS_2019_01.pdf
• Institution: Singapore Management University

This paper proposes the first user-independent inter-keystroke timing attacks on PINs. Our attack method is based on an inter-keystroke timing dictionary built from a human cognitive model whose parameters can be determined by a small amount of training data on any users (not necessarily the target...