Forensic-by-Design Framework Using Multimodal Behavioral Biometrics for Mobile Pharmacy Security
DOI:
10.33395/sinkron.v10i4.16852Keywords:
Forensic-by-Design, Insider Threat, Keystroke Dynamics, Multimodal Behavioral Biometrics, Mobile Pharmaceutical Security, Transfer LearningAbstract
In the mobile pharmacy sector, digital transformation increases the exposure of sensitive data and opens up insider threats that are not easily addressed by traditional security mechanisms such as login authentication and encryption, whose traces are only collected after an incident and often do not meet evidentiary standards. In this study we develop a multimodal behavioral biometric framework based on Forensic-by-Design principles to passively and continuously detect user interaction anomalies in mobile pharmacy applications. We develop three modules with hybrid architecture (Long Short-Term Memory network for keystroke dynamics, eXtreme Gradient Boosting for scrolling behavior and time threshold heuristic for detecting input that comes from paste or auto-injection). The keystroke module was tested on the Carnegie Mellon University keystroke benchmark (51 subjects) session disjoint split over 5 training runs and the framework was piloted in a mobile pharmacy application with 12 users and 19 sessions. For the keystroke module using key release intervals equal error rate of 11.1% was obtained (identification accuracy 74.4%) when key hold times and press latencies were added. For copy-paste heuristic requiring three consecutive intervals below 50 ms false positives on 20,400 genuine typing samples dropped from 16.3% to 0%. These results show that the proposed multimodal approach can support forensic readiness of mobile pharmacy applications by generating forensic-relevant interaction traces but more testing on a larger user population is needed to validate the scroll module, fusion layer and external validity of the findings.
Downloads
References
Abuhamad, M., Abusnaina, A., Nyang, D., & Mohaisen, D. (2021). Sensor-Based Continuous Authentication of Smartphones’ Users Using Behavioral Biometrics: A Contemporary Survey. IEEE Internet of Things Journal, 8(1), 65–84. https://doi.org/10.1109/JIOT.2020.3020076
Acien, A., Morales, A., Monaco, J. V., Vera-Rodriguez, R., & Fierrez, J. (2021). TypeNet: Deep Learning Keystroke Biometrics. https://doi.org/10.48550/ARXIV.2101.05570
Akilal, A., & Kechadi, M.-T. (2022). An improved forensic-by-design framework for cloud computing with systems engineering standard compliance. Forensic Science International: Digital Investigation, 40, 301315. https://doi.org/10.1016/j.fsidi.2021.301315
Bankole, F., Taiwo, A., & Claims, I. (2022). An extended digital forensic readiness and maturity model. Forensic Science International: Digital Investigation, 40, 301348. https://doi.org/10.1016/j.fsidi.2022.301348
Dhakal, V., Feit, A. M., Kristensson, P. O., & Oulasvirta, A. (2018). Observations on Typing from 136 Million Keystrokes. Proceedings of the 2018 CHI Conference on Human Factors in Computing Systems, 1–12. https://doi.org/10.1145/3173574.3174220
Estrela, P. M. A. B., Albuquerque, R. D. O., Amaral, D. M., Giozza, W. F., & Júnior, R. T. D. S. (2021). A Framework for Continuous Authentication Based on Touch Dynamics Biometrics for Mobile Banking Applications. Sensors, 21(12), 4212. https://doi.org/10.3390/s21124212
He, Y., Aliyu, A., Evans, M., & Luo, C. (2021). Health Care Cybersecurity Challenges and Solutions Under the Climate of COVID-19: Scoping Review. Journal of Medical Internet Research, 23(4), e21747. https://doi.org/10.2196/21747
Indonesia: Kominfo confirms breach of government health data involving 279M Indonesians. (n.d.). DataGuidance. Retrieved July 4, 2026, from https://www.dataguidance.com/news/indonesia-kominfo-confirms-breach-government-health
Killourhy, K. S., & Maxion, R. A. (2009). Comparing anomaly-detection algorithms for keystroke dynamics. 2009 IEEE/IFIP International Conference on Dependable Systems & Networks, 125–134. https://doi.org/10.1109/DSN.2009.5270346
Knight, T., May, B., Tyson, D., McAuley, S., Letzkus, P., & Enright, S. M. (2022). Detecting drug diversion in health-system data using machine learning and advanced analytics. American Journal of Health-System Pharmacy, 79(16), 1345–1354. https://doi.org/10.1093/ajhp/zxac035
Rauti, S., Carlsson, R., Mickelsson, S., Mäkilä, T., Heino, T., Pirjatanniemi, E., & Leppänen, V. (2024). Analyzing third-party data leaks on online pharmacy websites. Health and Technology, 14(2), 375–392. https://doi.org/10.1007/s12553-024-00819-w
Rizki, M. J. (n.d.). Dugaan Kebocoran Data Kemenkes, RUU PDP Penting Segera Disahkan. hukumonline.com. Retrieved July 4, 2026, from https://www.hukumonline.com/berita/a/kebocoran-data-pribadi-kemenkes-lt61dc13b07180f/
Schmitt, V. (2022). Medical Device Forensics. IEEE Security & Privacy, 20(1), 96–100. https://doi.org/10.1109/MSEC.2021.3127490
Senarath, D., Tharinda, S., Vishvajith, M., Rasnayaka, S., Wickramanayake, S., & Meedeniya, D. (2023). BehaveFormer: A Framework with Spatio-Temporal Dual Attention Transformers for IMU-enhanced Keystroke Dynamics. 2023 IEEE International Joint Conference on Biometrics (IJCB), 1–9. https://doi.org/10.1109/IJCB57857.2023.10448997
Sitova, Z., Sedenka, J., Yang, Q., Peng, G., Zhou, G., Gasti, P., & Balagani, K. (2015). HMOG: New Behavioral Biometric Features for Continuous Authentication of Smartphone Users. https://doi.org/10.48550/ARXIV.1501.01199
Soni, J., & Prabakar, N. (2022). KeyNet: Enhancing Cybersecurity with Deep Learning-Based LSTM on Keystroke Dynamics for Authentication. In J.-H. Kim, M. Singh, J. Khan, U. S. Tiwary, M. Sur, & D. Singh (Eds.), Intelligent Human Computer Interaction (Vol. 13184, pp. 761–771). Springer International Publishing. https://doi.org/10.1007/978-3-030-98404-5_67
Stoumpos, A. I., Kitsios, F., & Talias, M. A. (2023). Digital Transformation in Healthcare: Technology Acceptance and Its Applications. International Journal of Environmental Research and Public Health, 20(4), 3407. https://doi.org/10.3390/ijerph20043407
Stylios, I., Kokolakis, S., Thanou, O., & Chatzis, S. (2021). Behavioral biometrics & continuous user authentication on mobile devices: A survey. Information Fusion, 66, 76–99. https://doi.org/10.1016/j.inffus.2020.08.021
|
How to Cite
Issue
Section
License
Copyright (c) 2026 Bashor Fauzan Muthohirin, Novan Visia Farmasari , Rizky Pamuji
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
Muhammad Khoiruddin harahap
Google Scholar 
Moraref
PKP Index
Garuda Kemdikbud
Indonesia OneSearch
OCLC Worldcat
Dimensions
Index Copernicus
Scilit
