# Evaluating Deep Learning Models and Adversarial Attacks on Accelerometer-Based Gesture Authentication

arXiv: https://arxiv.org/abs/2110.14597 · HTML: https://mlsanity.com/paper/2110.14597/

## Key facts

- No citing papers in the map yet (data through 14 Oct 2026).
- Builds on 10 of its 29 references that are in the map.
- First posted on arXiv 3 Oct 2021.

## Builds on (most cited first, 10 of 10)

- [Generative Adversarial Networks: An Overview](https://mlsanity.com/paper/1710.07035/) (2017)
- [1D Convolutional Neural Networks and Applications: A Survey](https://mlsanity.com/paper/1905.03554/) (2019)
- [Metrics for Multi-Class Classification: an Overview](https://mlsanity.com/paper/2008.05756/) (2020)
- [Adversarial Attacks on Deep Neural Networks for Time Series Classification](https://mlsanity.com/paper/1903.07054/) (2019)
- [Adversarial Examples in Deep Learning for Multivariate Time Series Regression](https://mlsanity.com/paper/2009.11911/) (2020)
- [Poisoning Attacks with Generative Adversarial Nets](https://mlsanity.com/paper/1906.07773/) (2019)
- [Adversarial Attacks on Remote User Authentication Using Behavioural Mouse Dynamics](https://mlsanity.com/paper/1905.11831/) (2019)
- [Defending Touch-based Continuous Authentication Systems from Active Adversaries Using Generative Adversarial Networks](https://mlsanity.com/paper/2106.07867/) (2021)
- [FCC-GAN: A Fully Connected and Convolutional Net Architecture for GANs](https://mlsanity.com/paper/1905.02417/) (2019)
- [Engineering Gesture-Based Authentication Systems](https://mlsanity.com/paper/1408.6010/) (2014)

## Abstract (arXiv)

Gesture-based authentication has emerged as a non-intrusive, effective means of authenticating users on mobile devices. Typically, such authentication techniques have relied on classical machine learning techniques, but recently, deep learning techniques have been applied this problem. Although prior research has shown that deep learning models are vulnerable to adversarial attacks, relatively little research has been done in the adversarial domain for behavioral biometrics. In this research, we collect tri-axial accelerometer gesture data (TAGD) from 46 users and perform classification experiments with both classical machine learning and deep learning models. Specifically, we train and test support vector machines (SVM) and convolutional neural networks (CNN). We then consider a realistic adversarial attack, where we assume the attacker has access to real users' TAGD data, but not the authentication model. We use a deep convolutional generative adversarial network (DC-GAN) to create adversarial samples, and we show that our deep learning model is surprisingly robust to such an attack scenario.