Open AccessOptimizing Decision Tree Attack on CAS Scheme
Author(s) -
Toni Perković,
Marin Bugarić,
Mario Čagalj
Publication year - 2016
Publication title -
advances in electrical and computer engineering
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.254
H-Index - 23
eISSN - 1844-7600
pISSN - 1582-7445
DOI - 10.4316/aece.2016.02010
Subject(s) - scheme (mathematics) , computer science , decision tree , tree (set theory) , data mining , mathematics , mathematical analysis
In this paper we show a successful side-channel timing attack on a well-known high-complexity cognitive authentication (CAS) scheme. We exploit the weakness of CAS scheme that comes from the asymmetry of the virtual interface and graphical layout which results in nonuniform human behavior during the login procedure, leading to detectable variations in user's response times. We optimized a well-known probabilistic decision tree attack on CAS scheme by introducing this timing information into the attack. We show that the developed classifier could be used to significantly reduce the number of login sessions required to break the CAS scheme