Abstract:In computer systems, user authentication technology is required to identify users who use computers. In modern times, various user authentication technologies, including strong security features based on ownership, such as certificates and security cards, have been introduced. Nevertheless, password-based authentication technology is currently mainly used due to its convenience of use and ease of implementation. However, according to Verizon's "2022 Data Breach Investigations Report," among all security incidents, security incidents caused by password exposures accounted for 82%. Hence, the security of password authentication technology is important. Consequently, this article analyzes prior research on keyboard data attacks and defense techniques to draw the fundamental reasons for keyboard data attacks and derive countermeasures. The first prior research is about stealing keyboard data, an attack that uses machine learning to steal keyboard data to overcome the limitations of a C/D bit attack. The second prior research is an attack technique that steals keyboard data more efficiently by expanding the features of machine learning used in the first prior research. In this article, based on previous research findings, we proposed a keyboard data protection technique using GAN, a Generative Adversarial Network, and verified its feasibility. To summarize the results of performance evaluation with previous research, the machine learning-based keyboard data attack based on the prior research exhibited a 96.7% attack success rate, while the study's proposed method significantly decreased the attack success rate by approximately 13%. Notably, in all experiments, the average decrease in the keyboard data classification performance ranged from a minimum of −29% to a maximum of 52%. When evaluating performance based on maximum performance, all performance indicators were found to decrease by more than 50%.

A Neural Attack Model for Cracking Passwords in Adversarial Environments

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

BAD-FM: Backdoor Attacks Against Factorization-Machine Based Neural Network for Tabular Data Prediction

The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks

Adversarial Attacks on Neural-Network-Based Soft Sensors: Directly Attack Output

Chunk-Level Password Guessing: Towards Modeling Refined Password Composition Representations

Adaptive Human-Machine Interactive Behavior Analysis With Wrist-Worn Devices for Password Inference

AuthNet: Neural Network with Integrated Authentication Logic

Niffler: A Context-Aware and User-Independent Side-Channel Attack System for Password Inference

Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries

Improving Real-world Password Guessing Attacks via Bi-directional Transformers

Empirial study on security verification and assessment of neural network accelerator

PassTSL: Modeling Human-Created Passwords through Two-Stage Learning

Effective Ambiguity Attack Against Passport-based DNN Intellectual Property Protection Schemes through Fully Connected Layer Substitution

Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution

Offensive Security of Keyboard Data Using Machine Learning for Password Authentication in IoT

Behavioral Acoustic Emanations: Attack and Verification of PIN Entry Using Keypress Sounds

Deep learning-based authentication for insider threat detection in critical infrastructure

Keyboard Data Protection Technique Using GAN in Password-Based User Authentication: Based on C/D Bit Vulnerability

The weak password problem: chaos, criticality, and encrypted p-CAPTCHAs

Improving behavior based authentication against adversarial attack using XAI