Activity Attribute-Based User Behavior Model for Continuous User Authentication

In general, authentication using a username and password has been used to manage access to the system. This way, it can be arranged so that only authorized people can access a system. However, it does not rule out the possibility of several spoofing attacks. User behavior can be used instead of a password to solve this problem. Given that user behavior is unique, the behavior can be used for the authentication process. One of the authentication processes is to continuously use weblogs, as proposed by Leslie et al. However, the method used by Leslie et al. still has a drawback with the Leslie method. Only the user's role is identified. So, the attacker's identity cannot be known if an attack occurs. A continuous authentication method using weblogs and user attributes such as user id, DateTime, event, category, and products is used to overcome this problem. Using this method, the user's identity can be identified immediately after the role is known. In addition, using the proposed method, the accuracy of user identity authentication obtained is, on average, 95.08%, which means it is greater than the accuracy of user role authentication using the Leslie method, which is 46%.