Spot Identity Thieves By Analyzing Their Mouse Movement


May 13, 2013
Researchers have used Machine Learning to spot people using false information to answer questions. The hackers behind 2015 breach of the IRS, for example, used personal information they'd previously stolen to answer security questions on the IRS website, and in turn get access to their tax returns. The researchers used 40 respondents, and half were told to answer truthfully, while the other half was given fake identities to memorize and use in the questioning. Keeping track of the respondent's mouse movements when answering the questions, a random question was thrown in; "What is your zodiac sign," it asked. While this question was easy for the truth tellers in the group, the fakers were thrown off.

Pretty cool stuff, I can see it possibly being implemented in the future like some super CAPTCHA on higher security websites. It does make me wonder a bit about people with disabilities though, and would the AI be smart enough to see those nuances in the initial recording of your normal mouse movements. Just be careful of anyone asking "What's your sign?" from now on.

While truth-tellers easily verify questions involving the zodiac, liars do not have the zodiac immediately available, and they have to compute it for a correct verification. The uncertainty in responding to unexpected questions may lead to errors.
That took me about 10 seconds to remember... just not on my radar.

Better would be to use the person's claimed profession and ask even a low-level question of their field.
Machine learning my ass. Yeah when it gets to the question design to be thrown off, the mouse pauses longer, and odds are it then quickly goes up to add a tab and do a search.
Or, like in my case, it depends on which astrological calendar is being referred to. much wrong with astrology star signs that I don't even know where to start....perhaps by the number of zodiac signs (no it's not 12!)
I had to think about it for a minute. I'm not into pagan astrology.

And shouldn't there be some kind of privacy laws regarding recording nuances like mouse movement? How is that different than a keylogger? Holy Orwellian overkill.
If I had to select from symbols like you have in the graphic, I probably wouldn't get it. If it says Aquarius or Pisces, then I'd have no problem.