1. * Hassan Khan,Aaron Atwater,and Urs Hengartner

2. Outline Background Introduction for IA Previous work on IA challenge Introduction to Itus Itus for app developer Itus for IA developer Performance & conclusion

3. Outline Background Introduction for IA Previous work on IA challenge Introduction to Itus Itus for app developer Itus for IA developer Performance & conclusion

4. Why Implicit Authentication （ IA ）

5. Outline Background Introduction for IA Previous work on IA challenge Introduction to Itus Itus for app developer Itus for IA developer Performance & conclusion

6. Implicit Authentication  As a second line of defense  Measurement patterns of device use that are gathered from the device users without requiring deliberate actions.  When an adversary bypass a pass-lock,IA may be able to detect it

7. Outline Background Introduction for IA Previous work on IA challenge Introduction to Itus Itus for app developer Itus for IA developer Performance & conclusion

8. some IA system  TAP :a virtual key typing based authentication system for mobile device,transparently enhance the secrity of the mobile device in two stage:login stage and post- login stage  continuous mobile authentication using virtual key typing biometrics  Contemporary IA:device-centric  Application-centric implicit authentication ： enable fine grained authentication control with high accuracy  Towards Application-Centric Implicit Authentication on Smartphones

9. Implicit Authentication at platform level  OS or app framework is responsible for providing IA to all apps in an app independent manner;  Limitation: 1.different apps have different characteristics 2.Performance and battery life 3.The difference in app characteristics reduce the accuracy of IA 4.not be able to distinguish which activities within an app require protection 5.need to be managed by the platform developers or some central authority.

10. Solution for Limitation  These limitations can be circumvented by enabling the apps themselves to implicity authenticate users.  Delegate IA to apps:usability and flexibility  App developer requires domain-specific knowledge and significant effort to provide IA support: IA library

11. Outline Background Introduction for IA Previous work on IA challenge Introduction to Itus Itus for app developer Itus for IA developer Performance & conclusion

12. Challenges  Marking the resulting library easy to use for app developers  Be flexible enough to cater for app-specific functionality  Be extensible by the researchers developing novel IA schemes  Shouldn’t have a noticeable impact on performance or battery life to end users

13. Outline Background Introduction for IA Previous work on IA challenge Introduction to Itus Itus for app developer Itus for IA developer Performance & conclusion

14. Itus  A framework that separates the domain knowledge of IA from its deployment  App developers can provide IA in their apps easily  Allowing IA developers to iteratively contribute improvement to the framework.  Implement as a library at the user level  Itus Oracle:a tool for app developer

15. Outline Background Introduction for IA Previous work on IA challenge Introduction to Itus Itus for app developer Itus for IA developer Performance & conclusion

16. For app developer Easy to use

17. For app developer configurable

18. For app developer customized

19. Outline Background Introduction for IA Previous work on IA challenge Introduction to Itus Itus for app developer Itus for IA developer Performance & conclusion

20. For researchers and IA developers

21. Prefabs  Prefabs are pre-configured instances of the Itus Agent  …can specify classifiers,feature subsets,parameters,etc.  …allow an app developer to pick a prefab and go

22. Machine Learning Toolkit  Contains Classifier objects, each implementing a single machine learning algorithm  Developers implement only train and classify methods in order to add new algorithms

23. Event Processor  D evelopers create Measurement classes (e.g. Touch, Keystroke, Movement)  User input events are centrally managed and delivered by a Dispatcher object  Measurement objects only need to process input data into a numeric feature vector

24. Outline Background Introduction for IA Previous work on IA challenge Introduction to Itus Itus for app developer Itus for IA developer Performance & conclusion

25. Performance  Created three Itus Prefabs using different machine learning algorithms and feature sets  Touch-based, movement-based, and keystroke-based  Added to two open-source Android apps  Zirco web browser and TextSecure SMS messenger  Measured library overhead in terms of CPU, memory, and battery

26. CPU Overhead

27. Memory Overhead

28. Conclusion Itus is an application-level implicit authentication framework for Android that is: easy can be deployed by developers with minimal LoC extensible subcomponents can be improved iteratively Flexible support for application-specific functionality fast minimal, tuneable performance overhead