PAAKL: Password Authentication Using Behavioral Metrics

We present PAAKL, a method for password authentication. In addition to checking for a password´s correctness, PAAKL performs authentication by verifying that password using behavioral metrics extracted from the typing style of the rightful owner of a computer account. As such, PAAKL will deny access to users who have knowledge of a password but their typing style of that password is different from the typing style of the rightful owner. We implement and test our method with actual users. Our results indicate that the rightful owners of a password self-authenticate 92.5% of the time while the intruders - users that know the password of a rightful owner but are not rightful owners themselves, have 0% success in gaining access to a system.