Android Security Symposium 2015

Continuous risk-aware multi-modal authentication

About the speakers

Daniel Hintze

FHDW University of Applied Sciences, Paderborn, Germany

Daniel Hintze received an M.Sc. in IT-Management and Information Systems from FHDW University of Applied Sciences, Paderborn, Germany in 2013. Since November 2013 he is enrolled in the PhD program at JKU Linz, Austria, with expected date of completion to be end of 2017. His main research interests include authentication on mobile devices, mobile device usage and UI design. Supervisors are René Mayrhofer and Josef Scharinger, professors at JKU Linz, as well as Eckhard Koch, professor at FHDW Paderborn.

Rainhard Findling

University of Applied Sciences Upper Austria, Hagenberg, Austria

Rainhard Dieter Findling received his BSc and MSc degree in Mobile Computing from the University of Applied Sciences Upper Austria in 2011 and 2013 with distinction. Currently, he is researcher with u'smile, the Josef Ressel Centre for User-Friendly Secure Mobile Environments, at the University of Applied Sciences Upper Austria, and working towards his PhD with the Institute of Networks and Security, at the Johannes Kepler University Linz, Austria. His research interests include machine learning, biometrics and security in the context of mobile environments and ubiquitous computing.

Muhammad Muaaz

University of Applied Sciences Upper Austria, Hagenberg, Austria

Muhammad Muaaz received an M.Sc. degree in Information and Communication Systems Security from KTH University, Stockholm, Sweden in 2012. Since March 2013 he is enrolled in the PhD program at JKU Linz under the supervision of Prof. Dr. René Mayrhofer and Prof. Dr. Josef Scharinger. His main research interests include information security biometric authentication on mobile devices, and machine learning.

Abstract

Nowadays, people own and carry an increasing number of mobile devices, such as smartphones and smartwatches. To protect sensitive data, these devices need authentication mechanisms - which usually don't go beyond point of entry and don't scale well with a growing number of devices and interactions. We present the preliminary design of CORMORANT, an extensible, risk-aware, multi-modal, cross-device authentication framework that enables transparent continuous authentication using different biometrics across multiple trusted devices. With CORMORANT we aim for user-friendly mobile devices security by reducing the number of authentication attempts and easing the integration of new authentication and risk assessment mechanisms.

Slides

Get the slides here.

Video