An attacker can obtain the password, and even with added security, we can inadvertently grant malicious individuals access. Therefore, a system could be created that learns your behavior within the system over time and see if your behavior within the system aligns with your behavior.
For example, it can learn your typing speed, the times you generally use the system, and your mouse movements, and then display a behavioral match score every time you log in.
People don't behave the same way every day, of course, so the system creates a profile for you over a certain period, and if your behavior doesn't largely match, it requests verification with an authenticator.
If your behavior is not consistent with your previous behavior by 0% to 40%, there will be no restrictions, if the level is between 40% and 70%, continue monitoring and collect additional behavioral signals, if it's between 70-90 percent, sensitive access may be restricted and if the value is even higher, additional verification may be requested directly.
This protection system is an additional system and should not be used alone. Since, user behavior may change over time, someone else may use the user's computer, AI can make behavior mimicry easier and keyboard/mouse data may create privacy problems.
If this project is implemented, password, MFA, digital trust, and shadow security systems can be used together to provide stronger security.
Top comments (0)