# Intrusion Detection Using Mouse Dynamics

arXiv: https://arxiv.org/abs/1810.04668 · HTML: https://mlsanity.com/paper/1810.04668/

## Key facts

- Cited by 3 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 10 Oct 2018.

## Built on by (most cited first, 3 of 3)

- [Machine and Deep Learning Applications to Mouse Dynamics for Continuous User Authentication](https://mlsanity.com/paper/2205.13646/) (2022)
- [Continuous Authentication Using Mouse Movements, Machine Learning, and Minecraft](https://mlsanity.com/paper/2110.11080/) (2021)
- [Continuous Authentication Using Mouse Clickstream Data Analysis](https://mlsanity.com/paper/2312.00802/) (2023)

## Abstract (arXiv)

Compared to other behavioural biometrics, mouse dynamics is a less explored area. General purpose data sets containing unrestricted mouse usage data are usually not available. The Balabit data set was released in 2016 for a data science competition, which against the few subjects, can be considered the first adequate publicly available one. This paper presents a performance evaluation study on this data set for impostor detection. The existence of very short test sessions makes this data set challenging. Raw data were segmented into mouse move, point and click and drag and drop types of mouse actions, then several features were extracted. In contrast to keystroke dynamics, mouse data is not sensitive, therefore it is possible to collect negative mouse dynamics data and to use two-class classifiers for impostor detection. Both action- and set of actions-based evaluations were performed. Set of actions-based evaluation achieves 0.92 AUC on the test part of the data set. However, the same type of evaluation conducted on the training part of the data set resulted in maximal AUC (1) using only 13 actions. Drag and drop mouse actions proved to be the best actions for impostor detection.