Risk-Based Authentication (RBA) is a dynamic authentication approach that assesses login attempts based on contextual risk factors. Traditional RBA implementations, such as Freeman et al.’s Naïve Bayes method, provide adaptive security but have limitations in precision and adaptability. In this study, we propose an enhanced RBA method leveraging machine learning to improve risk assessment accuracy. We design and implement MLE-RBA, an ML-empowered RBA system using a LightGBM classifier trained on a user login dataset, incorporating feature engineering, anomaly detection, and data balancing techniques. Our approach is evaluated against Freeman’s method and the SIMPLE heuristic, with performance measured in terms of Equal Error Rate (EER) and other key metrics. Experimental results show that our ML-based approach achieves a lower EER, demonstrating improved authentication accuracy while maintaining usability. Despite its effectiveness, we emphasize that RBA, even when enhanced with ML, should not replace primary authentication mechanisms but rather serve as a supplementary layer to improve security. Our findings contribute to the ongoing development of adaptive authentication strategies, highlighting ML's potential in optimizing RBA systems.
Original languageEnglish
Title of host publicationComputational Science and Its Applications – ICCSA 2025 Workshops
Pages325–339
Number of pages15
DOIs
StatePublished - 28 Jun 2025
Event25th International Conference on Computational Science and Its Applications, ICCSA 2025 - Стамбул, Turkey
Duration: 30 Jun 20253 Jul 2025
http://iccsa.org

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
PublisherSpringer Nature
Volume15894
ISSN (Print)0302-9743

Conference

Conference25th International Conference on Computational Science and Its Applications, ICCSA 2025
Abbreviated titleICCSA
Country/TerritoryTurkey
CityСтамбул
Period30/06/253/07/25
Internet address

    Research areas

  • Cybersecurity, Machine Learning, Risk-Based Authentication

ID: 138833318