Continuous Authentication Technology Based on Device Driver Behavior
Haojun Xia, Hongwei Liu, Da Zhang, Haohao Liu, Xiaotong Wang, Bibo Tu · 2024
At present, the existing peripheral interface authentication is mostly based on static features, which cannot effectively resist the security threats in the new form. This paper proposes a continuous authentication technology of device driver behavior from a dynamic perspective, aiming to achieve continuous authentication of user identity through real-time monitoring and analysis of long-time interaction behavior between the device and the system. According to the process of peripheral access to the system, the device driver behavior is divided into the device driver behavior in the enumeration phase and the device driver behavior in the user usage phase. In the enumeration phase, this paper proposes an authentication technique based on device enumeration fingerprints; while in the user usage phase, continuous authentication of user identity is realized by continuous authentication technique in peripheral communication mode. We use three supervised learning algorithms for experiments, and their accuracy rate reaches more than 97.25%. Compared with the traditional identity authentication with static features, the dynamic continuous authentication through these two phases significantly enhances the security of identity authentication in the whole process of the peripheral.