AD-DP: Device-Aware Anomaly Detection for Securing WebAuthn Passkey Authentication

• Item type: Symposium(1)
• 公開日: 2025-10-20
• タイトル / 言語: ja
• タイトル: AD-DP: Device-Aware Anomaly Detection for Securing WebAuthn Passkey Authentication
• タイトル / 言語: en
• タイトル: AD-DP: Device-Aware Anomaly Detection for Securing WebAuthn Passkey Authentication
• 言語: eng
• キーワード / 主題Scheme: Other
• 資源タイプ / 資源タイプ識別子: http://purl.org/coar/resource_type/c_5794
• 資源タイプ: conference paper
• 著者所属: 立命館大学
• 著者所属: LY Corporation ／ 立命館大学
• 著者所属: LY Corporation
• 著者所属: 立命館大学
• 著者所属(英): Ritsumeikan University
• 著者所属(英): LY Corporation / Ritsumeikan University
• 著者所属(英): LY Corporation
• 著者所属(英): Ritsumeikan University
• 著者名: Khin, Win Myat Mon; 山口, 修司; 五味, 秀仁; 上原,哲太郎
• 著者名(英): Khin Win Myat Mon; Shuji Yamaguchi; Hidehito Gomi; Tetsutaro Uehara
• 論文抄録(英) / 内容記述タイプ: Other
• 論文抄録(英) / 内容記述: The evolution of FIDO2/WebAuthn from device-bound credentials to cloud-synced passkeys has opened new attack surfaces that traditional cryptographic checks cannot detect. In particular, attackers can exploit by using valid passkeys from unassociated or malicious devices and enabling Man-in-the-Middle (MitM) threats such as those shown in the CTAP Hijacking attack academic paper. This paper introduces AD-DP (Anomaly Detection through Device Profiling), a server-side enhancement designed to close this security gap. AD-DP framework establishes a trusted relationship between users, credentials, and devices by profiling authentication behavior over time. It enables Relying Parties(RPs) to detect anomalous device usage before completing WebAuthn flows, providing an additional layer of real-time defense without modifying the standard protocol. We present the rationale for the design, the architectural components, and an evaluation plan. Our proposal addresses a critical gap in WebAuthn authentication by enabling servers to assess the legitimacy of the authenticating device, not just the credential, within existing authentication flows.
• 書誌情報: コンピュータセキュリティシンポジウム2025論文集; p. 1470-1476, 発行日 2025-10-20
• 出版者 / 言語: ja
• 出版者: 情報処理学会