Smartphones have now become ubiquitous for accessing and controlling home appliances in smart homes, a popular application of the Internet of Things. User authentication on smartphones is mostly achieved at initial access. However, without applying a continuous authentication process, the network will be susceptible to unauthorized users. This issue emphasizes the importance of offering a continuous authentication scheme to identify the current user of the device. This can be achieved by extracting information during smartphone usage, including application access patterns. In this paper, we present a flexible machine learning user authentication scheme for smart home networks based on smartphone usage. Considering that users may run their smartphone applications differently during different day time intervals as well as different days of the week, new features are extracted by considering this information. The scheme is evaluated on a real-world dataset for continuous user authentication. The results show that the presented scheme authenticates users with high accuracy.
CaoH. and LinM., Mining Smartphone Data for app Usage Prediction and Recommendations: A Survey, Pervasive and Mobile Computing37 (2017), 1–22.
2.
FernandesE., JungJ. and PrakashA., Security Analysis of Emerging Smart Home Applications, Proceedings –2016 IEEE Symposium on Security and Privacy, SP 2016 (2016), 636–654.
3.
MeffertC., ClarkD., BaggiliI. and BreitingerF., Forensic State Acquisition From Internet of Things (FSAIoT): A General Framework and Practical Approach for IoT Forensics Through IoT Device State Acquisition, in 12th International Conference on Availability, Reliability and Security, 2017, pp. 1–11.
4.
AshibaniY. and MahmoudQ. H., A Machine Learning-Based User AuthenticationModel UsingMobile App Data, in International Conference on Intelligent and Fuzzy Systems (INFUS), 2019, pp. 408–415, (Best Paper Award).
5.
Zhang LideZ.M.; TiwanaBirjodh; QianZhiyun; WangZhaoguang; DickRobert P.; Mao and YangL., Accurate Online Power Estimation and Automatic Battery Behavior Based Power Model Generation for Smartphones, in Proceedings of the eighth IEEE/ACM/IFIP international conference on Hardware/software codesign and system synthesis., 2010, pp. 105–114.
6.
LiF., ClarkeN., PapadakiM. and DowlandP., Behaviour Profiling for Transparent Authentication for Mobile Devices, European Conference on Cyber Warfare and Security. Academic Conferences International Limited, pp. 307–315, 2011.
7.
ShiE., NiuY., JakobssonM. and ChowR., Implicit Authentication Through Learning User Behavior, Springer, Berlin, Heidelberg., pp. 99–113, 2011.
8.
DamopoulosD., MenesidouS. A., KambourakisG., PapadakiM., ClarkeN. and GritzalisS., Evaluation of Anomaly-Based IDS for Mobile Devices Using Machine Learning Classifiers, Security and Communication Networks5(1) (2012), 3–14.
9.
AlotaibiS., AlrubanA., FurnellS. and ClarkeN., A Novel Behaviour Profiling Approach to Continuous Authentication for Mobile Applications, in The 5th International Conference on Information Systems Security and Privacy, 2019, no. February, pp. 1–6.
10.
FridmanL., WeberS., GreenstadtR. and KamM., Active Authentication on Mobile Devices via Stylometry, Application Usage, Web Browsing, and GPS Location, IEEE Systems Journal11(2) (2017), 513–521.
11.
NealT.J. and WoodardD.L., Using Associative Classification to Authenticate Mobile Device Users, in IEEE International Joint Conference on Biometrics, IJCB 2017, 2017, pp. 71–79.
12.
KalamandeenA., ScannellA., De LaraE., ShethA. and LamarcaA., Ensemble: Cooperative Proximity-Based Authentication, pp. 331–343, 2010.
13.
MahbubU., KomulainenJ., FerreiraD. and ChellappaR., Continuous Authentication of Smartphones Based on Application Usage, IEEE Transactions on Biometrics, Behavior, and Identity Science1(3) (2019), 165–180.
14.
LiF., ClarkeN., PapadakiM. and DowlandP., Active Authentication for Mobile Devices Utilising Behaviour Profiling, International Journal of Information Security13(3) (2014), 229–244.
15.
AshibaniY. and MahmoudQ.H., A Behavior Profiling Model for User Authentication in IoT Networks based on App Usage Patterns, in 44th IEEE Annual Conference of the Industrial Electronics Society (IECON), 2018, 2841–2846.
16.
AshibaniY. and MahmoudQ.H., A User Authentication Model for IoT Networks Based on App Traffic Patterns, in 9th IEEE Annual I Information Technology; Electronics and Mobile Communication Conference (IEMCON), 2018, pp. 632–638.
17.
LiuJ., ZhongL., WickramasuriyaJ. and VasudevanV., uWave: Accelerometer-Based Personalized Gesture Recognition and its Applications, Pervasive and Mobile Computing5(6) (2009), 657–675.
18.
LiL., ZhaoX. and XueG., Unobservable Re-authentication for Smartphones, NDSS – Network and Distributed System Security Symposium, pp. 1–16, 2013.
19.
Sae-BaeN., MemonN., IsbisterK. and AhmedK., Multitouch Gesture-Based Authentication, IEEE Transactions on Information Forensics and Security9(4) (2014), 568–582.
20.
ThangH. M., VietV. Q., Dinh ThucN. and ChoiD., Gait Identification Using Accelerometer on Mobile Phone, International Conference on Control, Automation and Information Sciences (ICCAIS), pp. 344–348, 2012.
21.
ChoiSangil, YounIk-Hyun, LeMayR., BurnsS. and YounJ.-H., Biometric Gait Recognition Based on Wireless Acceleration Sensor Using K-Nearest Neighbor Classification, International Conference on Computing, Networking and Communications (ICNC), pp. 1091–1095, 2014.
22.
KaleA., RajagopalanA.N., CuntoorN. and KrügerV., Gait-Based Recognition of Humans Using Continuous HMMs, Proceedings – 5th IEEE International Conference on Automatic Face Gesture Recognition, FGR, pp. 336–341, 2002.
23.
GafurovD., HelkalaK. and SøndrolT., Biometric Gait Authentication Using Accelerometer Sensor, Journal of Computers1(7) (2006), 51–59.
24.
NickelC., WirtlT. and BuschC., Authentication of Smartphone Users Based on the Way They Walk Using K-NN Algorithm, Intelligent Information Hiding and Multimedia Signal Processing (IIH-MSP), Eighth International Conference, IEEE, pp. 16–20, 2012.
25.
HallJ., BarbeauM. and KranakisE., Anomaly-Based Intrusion Detection Using Mobility Profiles of Public Transportation Users,’, 2005), IEEE.2 (2005), 17–24.
26.
SubudhiS. and PanigrahiS., Quarter-Sphere Support Vector Machine for Fraud Detection in Mobile Telecommunication Networks, Procedia Computer Science48 (2015), 353–359.
27.
Al-BayatiB., ClarkeN. and DowlandP., Adaptive Behavioral Profiling for Identity Verification in Cloud Computing: A Model and Preliminary Analysis, GSTF Journal on Computing5(1) (2016), 21–28.
28.
AupyA. and ClarkeN., User Authentication by Service Utilisation Profiling, Advances in Network and Communications Engineering2(18) (2005).
29.
YazjiS., ChenX., DickR.P. and ScheuermannP., Implicit User Re-Authentication for Mobile Devices, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)5585(LNCS) (2009), 325–339.
30.
Ben SalemM. and StolfoS.J., Modeling User Search Behavior for Masquerade Detection, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)6961(LNCS) (2011), 181–200.
31.
AshibaniY., KaulingD. and MahmoudQ.H., Design and Implementation of a Contextual-Based Continuous Authentication Framework for Smart Homes, Applied System Innovation2(1) (2019), 1–20.
32.
AbdiL. and HashemiS., To Combat Multi-Class Imbalanced Problems by Means of Over-Sampling Techniques, IEEE Transactions on Knowledge and Data Engineering28(1) (2016), 238–251.
33.
KimK.S., ChoiH.H., MoonC.S. and MunC.W., Comparison of K-Nearest Neighbor, Quadratic Discriminant and Linear Discriminant Analysis in Classification of Electromyogram Signals Based on the Wrist-Motion Directions, Current Applied Physics11(3) (2011), 740–745.
34.
AlmeidaTiago A. and YamakamiA., Compression-Based Spam Filter, Security and Communication Networks9(4) (2016), 1327–335.
35.
WindeattT., Accuracy/Diversity and Ensemble MLP Classifier Design, IEEE Transactions on Neural Networks17(5) (2006), 1194–1211.
36.
LiM., et al., Coupled K-Nearest Centroid Classification for Non-iid Data, in Transactions on Computational Collective Intelligence XV, Springer, Berlin, Heidelberg., 2014, pp. 89–100.
37.
AmasyaliM.F. and ErsoyO.K., Classifier Ensembles with the Extended Space Forest, IEEE Transactions on Knowledge and Data Engineering26(3) (2014), 549–562.
38.
QiY., Random Forest for Bioinformatics, Ensemble Machine Learning: Methods and ApplicatiOns, pp. 307–323, 2012.
39.
XiaJ., GhamisiP., YokoyaN. and IwasakiA., Random Forest Ensembles and Extended Multiextinction Profiles for Hyperspectral Image Classification, IEEE Transactions on Geoscience and Remote Sensing56(1) (2017), 202–216.
40.
RawassizadehR., MomeniE., DobbinsC. and Mirza-babaeiP., Lesson Learned from Collecting Quantified Self Information via Mobile and Wearable Devices, Journal of Sensor and Actuator Networks4(4) (2015), 315–335.
41.
GarcíaV., SánchezJ.S. and MollinedaR.A., Knowledge-Based Systems On the Effectiveness of Preprocessing Methods When Dealing with Different Levels of Class Imbalance, Knowledge-Based Systems, Elsevier25 (2012), 13–21.
42.
SunY., WongA.K.C. and KamelM.S., Classification of Imbalanced Data: A Review, International Journal of Pattern Recognition and Artificial Intelligence23(04) (2009), 687–719.
