Towards a Better Understanding of Impersonation Risks - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2022

Towards a Better Understanding of Impersonation Risks

Résumé

In many situations, it is of interest for authentication systems to adapt to context (e.g., when the user's behavior differs from the previous behavior). Hence, during authentication events, it is common to use contextually available features to calculate an impersonation risk score. This paper proposes an explainability model that can be used for authentication decisions and, in particular, to explain the impersonation risks that arise during suspicious authentication events (e.g., at unusual times or locations). The model applies Shapley values to understand the context behind the risks. Through a case study on 30,000 real world authentication events, we show that risky and nonrisky authentication events can be grouped according to similar contextual features, which can explain the risk of impersonation differently and specifically for each authentication event. Hence, explainability models can effectively improve our understanding of impersonation risks. The risky authentication events can be classified according to attack types. The contextual explanations of the impersonation risk can help authentication policymakers and regulators who attempt to provide the right authentication mechanisms, to understand the suspiciousness of an authentication event and the attack type, and hence to choose the suitable authentication mechanism.
Fichier principal
Vignette du fichier
Towards_a_Better_Understanding_of_Impersonation_Risks-cameraReady.pdf (440.23 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03789500 , version 1 (03-10-2022)
hal-03789500 , version 2 (10-10-2022)

Identifiants

  • HAL Id : hal-03789500 , version 2

Citer

Anne Bumiller, Olivier Barais, Nicolas Aillery, Gael Le Lan. Towards a Better Understanding of Impersonation Risks. SINCONF 2022 - 15th IEEE International Conference on Security of Information and Networks, Nov 2022, Sousse, Tunisia. pp.1-9. ⟨hal-03789500v2⟩
62 Consultations
78 Téléchargements

Partager

Gmail Facebook X LinkedIn More