Zhang, Bonan, Chen, Chao, Lee, Ickjai, Lee, Kyungmi, and Ong, Kok-Leong (2025) Exploring the Vulnerability of ECG-Based Authentication Systems Through A Dictionary Attack Approach. In: Lecture Notes in Computer Science (15256) pp. 141-158. From: ICA3PP 2024: 24th International Conference on Algorithms and Architectures for Parallel Processing, 29-31 October 2024, Macau, China.

PDF (Publisher Accepted Version) - Accepted Version Restricted to Repository staff only

Abstract

Electrocardiogram (ECG)-based authentication has gained popularity recently, but its security measures have not been thoroughly explored. In this paper, we explore dictionary attacks against ECG authentication systems. We attempt to spoof the victim’s ECG model without prior knowledge of the victim’s ECG information. We investigated the feasibility of identifying a “master” collection of ECG signals that may coincide with ECG verification templates saved by authenticated users. Our experiments in four different ECG verification schemes show that these master ECG signals can effectively impersonate the ECG verification profiles of a wide range of users. These findings highlight significant vulnerabilities in current ECG-based authentication systems and can be used to strengthen ECG-based authentication systems.

Item ID:	84918
Item Type:	Conference Item (Research - E1)
ISBN:	978-981-96-1551-3
Copyright Information:	© The Editor(s) (if applicable) and The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd. 2025
Date Deposited:	19 Mar 2025 23:51
FoR Codes:	46 INFORMATION AND COMPUTING SCIENCES > 4604 Cybersecurity and privacy > 460402 Data and information privacy @ 100%
SEO Codes:	22 INFORMATION AND COMMUNICATION SERVICES > 2204 Information systems, technologies and services > 220405 Cybersecurity @ 100%
Downloads:	Total: 2 Last 12 Months: 2
	More Statistics