TY - GEN
T1 - Mouse authentication without the temporal aspect - What does a 2D-CNN learn?
AU - Chong, Penny
AU - Tan, Yi Xiang Marcus
AU - Guarnizo, Juan
AU - Elovici, Yuval
AU - Binder, Alexander
N1 - Publisher Copyright: © 2018 IEEE.
PY - 2018/8/2
Y1 - 2018/8/2
N2 - Mouse dynamics as behavioral biometrics are under investigation for their effectiveness in computer security systems. Previous state-of-the-art methods relied on heuristic feature engineering for the extraction of features. Our work addresses this issue by learning the features with a convolutional neural network (CNN), thereby eliminating the need for manual feature design. Contrary to time-series-based modeling approaches, we propose to use a two-dimensional CNN with images as inputs. While counterintuitive at first sight, it permits to profit from well-initialized lower-layer kernels obtained via transfer learning. We demonstrate our results on two public datasets, Balabit and TWOS, and compare against a 1D-CNN and a classical baseline relying on hand-crafted features, which are both outperformed. We show that a position-independent variant of the 2D-CNN loses little performance yet we learned that the trained classifier is very sensitive to simulated resolution shifts at test time. In a final step, we analyze and visualize the learned features on single test curves using layer-wise relevance propagation (LRP). This analysis reveals that the 2D-CNN uses curve information only sparsely, with a tendency to assign little relevance to straight segments and artifactual curve crossings.
AB - Mouse dynamics as behavioral biometrics are under investigation for their effectiveness in computer security systems. Previous state-of-the-art methods relied on heuristic feature engineering for the extraction of features. Our work addresses this issue by learning the features with a convolutional neural network (CNN), thereby eliminating the need for manual feature design. Contrary to time-series-based modeling approaches, we propose to use a two-dimensional CNN with images as inputs. While counterintuitive at first sight, it permits to profit from well-initialized lower-layer kernels obtained via transfer learning. We demonstrate our results on two public datasets, Balabit and TWOS, and compare against a 1D-CNN and a classical baseline relying on hand-crafted features, which are both outperformed. We show that a position-independent variant of the 2D-CNN loses little performance yet we learned that the trained classifier is very sensitive to simulated resolution shifts at test time. In a final step, we analyze and visualize the learned features on single test curves using layer-wise relevance propagation (LRP). This analysis reveals that the 2D-CNN uses curve information only sparsely, with a tendency to assign little relevance to straight segments and artifactual curve crossings.
KW - Authentication
KW - CNN
KW - LRP
KW - Mouse dynamics
UR - http://www.scopus.com/inward/record.url?scp=85052243965&partnerID=8YFLogxK
U2 - 10.1109/SPW.2018.00011
DO - 10.1109/SPW.2018.00011
M3 - Conference contribution
SN - 9780769563497
T3 - Proceedings - 2018 IEEE Symposium on Security and Privacy Workshops, SPW 2018
SP - 15
EP - 21
BT - Proceedings - 2018 IEEE Symposium on Security and Privacy Workshops, SPW 2018
T2 - 2018 IEEE Symposium on Security and Privacy Workshops, SPW 2018
Y2 - 24 May 2018
ER -