Optimizing Decision Tree Attack on CAS Scheme

Jan 1, 2016·
Toni Perković
Toni Perković
,
Marin Bugarić
,
Mario Čagalj
DOI

Abstract

In this paper we show a successful side-channel timing attack on a well-known high-complexity cognitive authentication (CAS) scheme. We exploit the weakness of CAS scheme that comes from the asymmetry of the virtual interface and graphical layout which results in nonuniform human behavior during the login procedure, leading to detectable variations in user’s response times. We optimized a well-known probabilistic decision tree attack on CAS scheme by introducing this timing information into the attack. We show that the developed classifier could be used to significantly reduce the number of login sessions required to break the CAS scheme.

Type

Publication

Advances in Electrical and Computer Engineering, 16(2), 69–74

Status

Peer-reviewed Open access
publications
Toni Perković
Authors
Toni Perković
Full Professor
I am a Full Professor in the Department of Electronics and Computing at the Faculty of Electrical Engineering, Mechanical Engineering and Naval Architecture (FESB), University of Split, Croatia, where I teach wireless network security, wireless communication networks, data science and reinforcement learning. My research spans information security, applied cryptography and the Internet of Things. Before returning to FESB in 2020, I was an assistant and then associate professor at the University Department of Forensic Sciences in Split. I co-founded the SpliTech international conference and serve on the editorial board of the Journal of Communications Software and Systems.