{"id":"https://openalex.org/W4413747240","doi":"https://doi.org/10.1049/bme2/8262252","title":"A DeepConvLSTM Approach for Continuous Authentication Using Operational System Performance Counters","display_name":"A DeepConvLSTM Approach for Continuous Authentication Using Operational System Performance Counters","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4413747240","doi":"https://doi.org/10.1049/bme2/8262252"},"language":"en","primary_location":{"id":"doi:10.1049/bme2/8262252","is_oa":true,"landing_page_url":"https://doi.org/10.1049/bme2/8262252","pdf_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1049/bme2/8262252","source":{"id":"https://openalex.org/S2482923289","display_name":"IET Biometrics","issn_l":"2047-4938","issn":["2047-4938","2047-4946"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Biometrics","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1049/bme2/8262252","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080730739","display_name":"C\u00e9sar Andrade","orcid":"https://orcid.org/0009-0005-2218-6648"},"institutions":[{"id":"https://openalex.org/I62885914","display_name":"Universidade Federal do Amazonas","ror":"https://ror.org/02263ky35","country_code":"BR","type":"education","lineage":["https://openalex.org/I62885914"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"C\u00e9sar H. G. Andrade","raw_affiliation_strings":["Institute of Computing ,  Federal University of Amazonas ,  Manaus ,  Brazil ,  ufam.edu.br"],"raw_orcid":"https://orcid.org/0009-0005-2218-6648","affiliations":[{"raw_affiliation_string":"Institute of Computing ,  Federal University of Amazonas ,  Manaus ,  Brazil ,  ufam.edu.br","institution_ids":["https://openalex.org/I62885914"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002558458","display_name":"Hendrio Bragan\u00e7a","orcid":"https://orcid.org/0000-0003-1479-1707"},"institutions":[{"id":"https://openalex.org/I62885914","display_name":"Universidade Federal do Amazonas","ror":"https://ror.org/02263ky35","country_code":"BR","type":"education","lineage":["https://openalex.org/I62885914"]}],"countries":["BR"],"is_corresponding":true,"raw_author_name":"Hendrio L. S. Bragan\u00e7a","raw_affiliation_strings":["Institute of Computing ,  Federal University of Amazonas ,  Manaus ,  Brazil ,  ufam.edu.br"],"raw_orcid":"https://orcid.org/0000-0003-1479-1707","affiliations":[{"raw_affiliation_string":"Institute of Computing ,  Federal University of Amazonas ,  Manaus ,  Brazil ,  ufam.edu.br","institution_ids":["https://openalex.org/I62885914"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061160251","display_name":"Hor\u00e1cio A.B.F. Oliveira","orcid":"https://orcid.org/0000-0001-9777-3947"},"institutions":[{"id":"https://openalex.org/I62885914","display_name":"Universidade Federal do Amazonas","ror":"https://ror.org/02263ky35","country_code":"BR","type":"education","lineage":["https://openalex.org/I62885914"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Hor\u00e1cio Fernandes","raw_affiliation_strings":["Institute of Computing ,  Federal University of Amazonas ,  Manaus ,  Brazil ,  ufam.edu.br"],"raw_orcid":"https://orcid.org/0000-0001-9777-3947","affiliations":[{"raw_affiliation_string":"Institute of Computing ,  Federal University of Amazonas ,  Manaus ,  Brazil ,  ufam.edu.br","institution_ids":["https://openalex.org/I62885914"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041522968","display_name":"Eduardo Feitosa","orcid":"https://orcid.org/0000-0001-6401-3992"},"institutions":[{"id":"https://openalex.org/I62885914","display_name":"Universidade Federal do Amazonas","ror":"https://ror.org/02263ky35","country_code":"BR","type":"education","lineage":["https://openalex.org/I62885914"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Eduardo Feitosa","raw_affiliation_strings":["Institute of Computing ,  Federal University of Amazonas ,  Manaus ,  Brazil ,  ufam.edu.br"],"raw_orcid":"https://orcid.org/0000-0001-6401-3992","affiliations":[{"raw_affiliation_string":"Institute of Computing ,  Federal University of Amazonas ,  Manaus ,  Brazil ,  ufam.edu.br","institution_ids":["https://openalex.org/I62885914"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033286636","display_name":"Eduardo Souto","orcid":"https://orcid.org/0000-0003-0003-908X"},"institutions":[{"id":"https://openalex.org/I62885914","display_name":"Universidade Federal do Amazonas","ror":"https://ror.org/02263ky35","country_code":"BR","type":"education","lineage":["https://openalex.org/I62885914"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Eduardo Souto","raw_affiliation_strings":["Institute of Computing ,  Federal University of Amazonas ,  Manaus ,  Brazil ,  ufam.edu.br"],"raw_orcid":"https://orcid.org/0000-0003-0003-908X","affiliations":[{"raw_affiliation_string":"Institute of Computing ,  Federal University of Amazonas ,  Manaus ,  Brazil ,  ufam.edu.br","institution_ids":["https://openalex.org/I62885914"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5002558458"],"corresponding_institution_ids":["https://openalex.org/I62885914"],"apc_list":{"value":2200,"currency":"USD","value_usd":2200},"apc_paid":{"value":2200,"currency":"USD","value_usd":2200},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.31328716,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2025","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10444","display_name":"Context-Aware Activity Recognition Systems","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.982200026512146,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9003134965896606},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.5618339776992798},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3651318848133087},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3068620562553406}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9003134965896606},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5618339776992798},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3651318848133087},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3068620562553406}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1049/bme2/8262252","is_oa":true,"landing_page_url":"https://doi.org/10.1049/bme2/8262252","pdf_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1049/bme2/8262252","source":{"id":"https://openalex.org/S2482923289","display_name":"IET Biometrics","issn_l":"2047-4938","issn":["2047-4938","2047-4946"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Biometrics","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:03ad8a667dc2461a9341419658d0d375","is_oa":true,"landing_page_url":"https://doaj.org/article/03ad8a667dc2461a9341419658d0d375","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IET Biometrics, Vol 2025 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1049/bme2/8262252","is_oa":true,"landing_page_url":"https://doi.org/10.1049/bme2/8262252","pdf_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1049/bme2/8262252","source":{"id":"https://openalex.org/S2482923289","display_name":"IET Biometrics","issn_l":"2047-4938","issn":["2047-4938","2047-4946"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Biometrics","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8914304874","display_name":null,"funder_award_id":"2025/2026","funder_id":"https://openalex.org/F4320322994","funder_display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado do Amazonas"}],"funders":[{"id":"https://openalex.org/F4320318869","display_name":"Universidade Federal do Amazonas","ror":"https://ror.org/02263ky35"},{"id":"https://openalex.org/F4320319527","display_name":"Samsung Eletr\u00f4nica da Amaz\u00f4nia","ror":null},{"id":"https://openalex.org/F4320321091","display_name":"Coordena\u00e7\u00e3o de Aperfei\u00e7oamento de Pessoal de N\u00edvel Superior","ror":"https://ror.org/00x0ma614"},{"id":"https://openalex.org/F4320322025","display_name":"Conselho Nacional de Desenvolvimento Cient\u00edfico e Tecnol\u00f3gico","ror":"https://ror.org/03swz6y49"},{"id":"https://openalex.org/F4320322994","display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado do Amazonas","ror":"https://ror.org/026d6ma13"},{"id":"https://openalex.org/F4320332195","display_name":"Samsung","ror":"https://ror.org/04w3jy968"},{"id":"https://openalex.org/F4320337368","display_name":"Division of Graduate Education","ror":"https://ror.org/00whkrf32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4413747240.pdf","grobid_xml":"https://content.openalex.org/works/W4413747240.grobid-xml"},"referenced_works_count":49,"referenced_works":["https://openalex.org/W58039618","https://openalex.org/W1548125220","https://openalex.org/W1571850285","https://openalex.org/W1966864883","https://openalex.org/W1995919426","https://openalex.org/W2005833077","https://openalex.org/W2006443827","https://openalex.org/W2038850870","https://openalex.org/W2045011071","https://openalex.org/W2052655958","https://openalex.org/W2054177909","https://openalex.org/W2076501458","https://openalex.org/W2101026822","https://openalex.org/W2163393912","https://openalex.org/W2165485672","https://openalex.org/W2169360434","https://openalex.org/W2269306961","https://openalex.org/W2270470215","https://openalex.org/W2395966097","https://openalex.org/W2468767148","https://openalex.org/W2550436552","https://openalex.org/W2566467732","https://openalex.org/W2575313616","https://openalex.org/W2582443164","https://openalex.org/W2592507844","https://openalex.org/W2602531037","https://openalex.org/W2728779162","https://openalex.org/W2791180050","https://openalex.org/W2795342689","https://openalex.org/W2810785045","https://openalex.org/W2886351700","https://openalex.org/W2892006681","https://openalex.org/W2903604062","https://openalex.org/W2960747589","https://openalex.org/W2982465019","https://openalex.org/W3036608916","https://openalex.org/W3045731943","https://openalex.org/W3081352712","https://openalex.org/W3174449629","https://openalex.org/W3210417109","https://openalex.org/W3215592089","https://openalex.org/W4221101487","https://openalex.org/W4241378526","https://openalex.org/W4280644269","https://openalex.org/W4285212536","https://openalex.org/W4388765676","https://openalex.org/W4390065100","https://openalex.org/W4391169604","https://openalex.org/W4409946033"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W2912135041"],"abstract_inverted_index":{"Authentication":[0],"in":[1,162,180,235],"personal":[2,239],"and":[3,11,55,75,87,113,135,151,175,192,238],"corporate":[4],"computer":[5],"systems":[6,35,81,226,234],"predominantly":[7],"relies":[8],"on":[9,37],"login":[10],"password":[12],"credentials,":[13],"which":[14],"are":[15,129],"vulnerable":[16],"to":[17,83,109,131,137,148],"unauthorized":[18],"access,":[19],"especially":[20],"when":[21],"genuine":[22,157],"users":[23,158,205],"leave":[24],"their":[25],"devices":[26],"unlocked.":[27],"To":[28],"address":[29],"this":[30],"issue,":[31],"continuous":[32],"authentication":[33,89],"(CA)":[34],"based":[36],"behavioral":[38],"biometrics":[39],"have":[40],"gained":[41],"attention.":[42],"Traditional":[43],"CA":[44,146,225],"models":[45],"leverage":[46],"user\u2013device":[47],"interactions,":[48],"such":[49,69,230],"as":[50,70,231],"mouse":[51],"movements,":[52],"typing":[53],"dynamics,":[54],"speech":[56],"recognition.":[57],"This":[58],"paper":[59],"introduces":[60],"a":[61,85,94,141],"novel":[62],"approach":[63,167],"that":[64,128],"utilizes":[65],"system":[66],"performance":[67,121,223],"counters\u2014attributes":[68],"memory":[71,106],"usage,":[72],"CPU":[73],"load,":[74],"network":[76,96],"activity\u2014collected":[77],"passively":[78],"by":[79,153],"operating":[80],"(OSs),":[82],"develop":[84],"robust":[86],"low\u2010intrusive":[88],"mechanism.":[90],"Our":[91,187],"method":[92],"employs":[93],"deep":[95],"architecture":[97],"combining":[98],"convolutional":[99],"neural":[100],"networks":[101],"(CNNs)":[102],"with":[103],"long":[104],"short\u2010term":[105],"(LSTM)":[107],"layers":[108],"analyze":[110],"temporal":[111],"patterns":[112,127],"identify":[114],"unique":[115],"user":[116,215],"behaviors.":[117],"Unlike":[118],"traditional":[119],"methods,":[120],"counters":[122],"capture":[123],"subtle":[124],"system\u2010level":[125],"usage":[126],"harder":[130],"mimic,":[132],"enhancing":[133],"security":[134,150],"resilience":[136],"attacks.":[138],"We":[139,164],"integrate":[140],"trust":[142],"model":[143],"into":[144],"the":[145,190,195,220],"framework":[147],"balance":[149],"usability":[152],"avoiding":[154],"interruptions":[155],"for":[156,203,227],"while":[159,212],"blocking":[160],"impostors":[161],"real\u2010time.":[163],"evaluate":[165],"our":[166],"using":[168],"two":[169],"new":[170],"datasets,":[171],"COUNT\u2010SO\u2010I":[172],"(26":[173],"users)":[174],"COUNT\u2010SO\u2010II":[176],"(37":[177],"users),":[178],"collected":[179],"real\u2010world":[181],"scenarios":[182],"without":[183],"specific":[184],"task":[185],"constraints.":[186],"results":[188],"demonstrate":[189],"feasibility":[191],"effectiveness":[193],"of":[194,209,222],"proposed":[196],"method,":[197],"achieving":[198],"99%":[199],"detection":[200],"accuracy":[201],"(ACC)":[202],"impostor":[204],"within":[206],"an":[207],"average":[208],"17.2":[210],"s,":[211],"maintaining":[213],"seamless":[214],"experiences.":[216],"These":[217],"findings":[218],"highlight":[219],"potential":[221],"counter\u2013based":[224],"practical":[228],"applications,":[229],"safeguarding":[232],"sensitive":[233],"corporate,":[236],"governmental,":[237],"environments.":[240]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}
