Dynamic user authentication based on mouse movements curves

In this paper we describe a behavioural biometric approach to authenticate users dynamically based on mouse movements only and using regular mouse devices. Unlike most of the previous approaches in this domain, we focus here on the properties of the curves generated from the consecutive mouse positions during typical mouse movements. Our underlying hypothesis is that these curves have enough discriminative information to recognize users. We conducted an experiment to test and validate our model in which ten participants are involved. Back propagation neural network is used as a classifier. Our experimental results show that behavioural information with discriminating features is revealed during normal mouse usage, which can be employed for user modeling for various reasons, such as information assets protection

BotSwindler: Tamper Resistant Injection of Believable Decoys in VM-Based Hosts for Crimeware Detection

We introduce BotSwindler, a bait injection system designed to delude and detect crimeware by forcing it to reveal during the exploitation of monitored information. The implementation of BotSwindler relies upon an out-of-host software agent that drives user-like interactions in a virtual machine, seeking to convince malware residing within the guest OS that it has captured legitimate credentials. To aid in the accuracy and realism of the simulations, we propose a low overhead approach, called virtual machine verification, for verifying whether the guest OS is in one of a predefined set of states. We present results from experiments with real credential-collecting malware that demonstrate the injection of monitored financial bait for detecting compromises. Additionally, using a computational analysis and a user study, we illustrate the believability of the simulations and we demonstrate that they are sufficiently human-like. Finally, we provide results from performance measurements to show our approach does not impose a performance burden

Combination of searches for Higgs boson pairs in pp collisions at \sqrts = 13 TeV with the ATLAS detector

This letter presents a combination of searches for Higgs boson pair production using up to 36.1 fb(-1) of proton-proton collision data at a centre-of-mass energy root s = 13 TeV recorded with the ATLAS detector at the LHC. The combination is performed using six analyses searching for Higgs boson pairs decaying into the b (b) over barb (b) over bar, b (b) over barW(+)W(-), b (b) over bar tau(+)tau(-), W+W-W+W-, b (b) over bar gamma gamma and W+W-gamma gamma final states. Results are presented for non-resonant and resonant Higgs boson pair production modes. No statistically significant excess in data above the Standard Model predictions is found. The combined observed (expected) limit at 95% confidence level on the non-resonant Higgs boson pair production cross-section is 6.9 (10) times the predicted Standard Model cross-section. Limits are also set on the ratio (kappa(lambda)) of the Higgs boson self-coupling to its Standard Model value. This ratio is constrained at 95% confidence level in observation (expectation) to -5.0 &lt; kappa(lambda) &lt; 12.0 (-5.8 &lt; kappa(lambda) &lt; 12.0). In addition, limits are set on the production of narrow scalar resonances and spin-2 Kaluza-Klein Randall-Sundrum gravitons. Exclusion regions are also provided in the parameter space of the habemus Minimal Supersymmetric Standard Model and the Electroweak Singlet Model. For complete list of authors see http://dx.doi.org/10.1016/j.physletb.2019.135103</p

Searches for lepton-flavour-violating decays of the Higgs boson in s=13\sqrt{s}=13 TeV pp\mathit{pp} collisions with the ATLAS detector

This Letter presents direct searches for lepton flavour violation in Higgs boson decays, H → eτ and H → μτ , performed with the ATLAS detector at the LHC. The searches are based on a data sample of proton–proton collisions at a centre-of-mass energy √s = 13 TeV, corresponding to an integrated luminosity of 36.1 fb−1. No significant excess is observed above the expected background from Standard Model processes. The observed (median expected) 95% confidence-level upper limits on the leptonflavour-violating branching ratios are 0.47% (0.34+0.13−0.10%) and 0.28% (0.37+0.14−0.10%) for H → eτ and H → μτ , respectively.publishedVersio

Search for flavour-changing neutral currents in processes with one top quark and a photon using 81 fb⁻¹ of pp collisions at \sqrts = 13 TeV with the ATLAS experiment

A search for flavour-changing neutral current (FCNC) events via the coupling of a top quark, a photon, and an up or charm quark is presented using 81 fb−1 of proton–proton collision data taken at a centre-of-mass energy of 13 TeV with the ATLAS detector at the LHC. Events with a photon, an electron or muon, a b-tagged jet, and missing transverse momentum are selected. A neural network based on kinematic variables differentiates between events from signal and background processes. The data are consistent with the background-only hypothesis, and limits are set on the strength of the tqγ coupling in an effective field theory. These are also interpreted as 95% CL upper limits on the cross section for FCNC tγ production via a left-handed (right-handed) tuγ coupling of 36 fb (78 fb) and on the branching ratio for t→γu of 2.8×10−5 (6.1×10−5). In addition, they are interpreted as 95% CL upper limits on the cross section for FCNC tγ production via a left-handed (right-handed) tcγ coupling of 40 fb (33 fb) and on the branching ratio for t→γc of 22×10−5 (18×10−5). © 2019 The Author(s

Evidence for the production of three massive vector bosons with the ATLAS detector

A search for the production of three massive vector bosons in proton-proton collisions is performed using data at $\sqrt{s} = 13$ TeV recorded with the ATLAS detector at the Large Hadron Collider in the years 2015-2017, corresponding to an integrated luminosity of $79.8$ fb$^{-1}$. Events with two same-sign leptons $\ell$ (electrons or muons) and at least two reconstructed jets are selected to search for $WWW \to \ell \nu \ell \nu qq$. Events with three leptons without any same-flavour opposite-sign lepton pairs are used to search for $WWW \to \ell \nu \ell\nu \ell \nu$, while events with three leptons and at least one same-flavour opposite-sign lepton pair and one or more reconstructed jets are used to search for $WWZ \to \ell \nu qq \ell \ell$. Finally, events with four leptons are analysed to search for $WWZ \to \ell \nu \ell \nu \ell \ell$ and $WZZ \to qq \ell \ell \ell \ell$. Evidence for the joint production of three massive vector bosons is observed with a significance of 4.1 standard deviations, where the expectation is 3.1 standard deviations.Comment: 38 pages in total, author list starting page 22, 6 figures, 5 tables, matching published paper in Phys. Lett. B. All figures including auxiliary figures are available at http://atlas.web.cern.ch/Atlas/GROUPS/PHYSICS/PAPERS/STDM-2017-2

Measurement of the top-quark mass using a leptonic invariant mass in pp collisions at s√ = 13 TeV with the ATLAS detector

A measurement of the top-quark mass (mt) in the tt¯ → lepton + jets channel is presented, with an experimental technique which exploits semileptonic decays of b-hadrons produced in the top-quark decay chain. The distribution of the invariant mass mℓμ of the lepton, ℓ (with ℓ = e, μ), from the W-boson decay and the muon, μ, originating from the b-hadron decay is reconstructed, and a binned-template profile likelihood fit is performed to extract mt. The measurement is based on data corresponding to an integrated luminosity of 36.1 fb−1 of s√ = 13 TeV pp collisions provided by the Large Hadron Collider and recorded by the ATLAS detector. The measured value of the top-quark mass is mt = 174.41 ± 0.39 (stat.) ± 0.66 (syst.) ± 0.25 (recoil) GeV, where the third uncertainty arises from changing the PYTHIA8 parton shower gluon-recoil scheme, used in top-quark decays, to a recently developed setup