Spaces:

---

huggingface

/

README

like 22

Running

By Denis Sanchez Leyva Founder, Vertex Coders LLC The traditional perimeter defenses of authentication are collapsing. In an era dominated by advanced Large Language Models (LLMs) and highly volatile autonomous agents, classic challenges like CAPTCHAs are no longer a barrier—they are merely minor execution delays for an automated adversary.If an AI can look at an image, interpret text, and solve complex logic riddles better than a fatigued human, we must shift our authentication paradigm from "What you know" or "What you have" to an entirely new dimension: "How you cognitively execute tasks."At Vertex Coders LLC, we developed DECI (Decentralized Cognitive Identity)—an invisible, continuous behavioral biometrics engine built to expose even the most sophisticated AI mimicry attacks in real time, with sub-50ms latency. Today, we are open-sourcing the production core deployment strategy, hardening metrics, and our latest empirical stress-test results.The Core Thesis: Cognitive DNA and Heavy-Tailed RhythmsWhen humans interact with an interface, their keystroke dynamics are dictated by a unique intersection of biology and cognition. Neuromuscular latency, vocabulary transitions, and momentary lapses of thought form a chaotic but uniquely human signature.Many modern red team bot suites try to bypass behavioral firewalls by introducing artificial noise. Instead of typing at a fixed, robotic interval (e.g., 100ms between keys), they inject jitter modeled after a Gaussian or a Cauchy distribution to mimic human variance.DECI is built defensively to neutralize this exact strain of sophisticated mimicry by analyzing two primary statistical markers in tandem:1. Shannon Entropy ($H$)Human typing behavior is naturally high-entropy due to the sheer unpredictability of micro-pauses. We quantify this irregularity via the classic entropy formula:$$H(X) = -\sum_{i=1}^{n} P(x_i) \log_2 P(x_i)$$Where $P(x_i)$ represents the empirical probability of a specific Inter-Keystroke Latency (IKL) window occurring during the active session. When an automated script runs, its entropy signature collapses significantly ($H \to 0$).2. The Coeficient of Variation ($CV$) BoundaryEven when an advanced script utilizes heavy-tailed distributions like Cauchy to inject realistic outliers (long pauses), it struggles to organically mimic human muscle memory transitions between specific key clusters. We catch this mathematical imperfection using the Coeficient of Variation:$$CV = \frac{\sigma}{\mu}$$Where $\sigma$ is the standard deviation and $\mu$ is the mean of the IKL vector. While a legitimate human operator routinely maintains a $CV > 0.15$ due to complex character pairing latencies, artificial scripts consistently give themselves away with ultra-low, mathematically locked variance ($CV < 0.05$).Architecture of a Zero-Cost, DDoS-Resilient APITo prove that scalable, corporate-grade infrastructure can be achieved without burning through cloud budgets, we deployed the DECI Core Engine inside a containerized Hugging Face Spaces cluster running an embedded Qdrant Vector Database—achieving a structural operating cost of exactly $0.00.┌─────────────────────────────────────────────────────────────┐
│ DECI Production Blueprint │
├─────────────────────────────────────────────────────────────┤
│ │
│ Client Front-End │
│ ┌───────────────────────┐ │
│ │ deci-telemetry.js │ ← Invisible background capture │
│ └───────────┬───────────┘ │
│ │ Secure HTTPS POST │
│ ▼ │
│ ┌───────────────────────────────────────────────────────┐ │
│ │ Hugging Face Spaces Sandbox (Isolated Docker) │ │
│ │ ┌───────────────────┐ │ │
│ │ │ FastAPI Backend │ ← Protected via SlowAPI Cache │ │
│ │ └─────────┬─────────┘ Max 5 requests/min per IP │ │
│ │ │ │ │
│ │ ▼ Real-Time Biometric Matching │ │
│ │ ┌───────────────────┐ │ │
│ │ │ Qdrant Vault │ ← Cognitive DNA Vector Space │ │
│ │ └───────────────────┘ │ │
│ └───────────────────────────────────────────────────────┘ │
│ │
└─────────────────────────────────────────────────────────────┘
Infrastructure Hardening Matrix:Non-Root Execution: The underlying container explicitly drops administrative privileges (USER 1000) at launch, rendering container breakout or remote code execution (RCE) vectors inert.In-Memory Rate Limiting: Using a customized slowapi implementation, the core buffers incoming requests by tracking client IP hashes directly in volatile memory. If an attacker coordinates an automated flooding script, the engine returns a lightweight HTTP 429 Too Many Requests, completely insulating our system resources without needing a bloated external cache tier.Polyglot Parsing Shield: Before a payload is handed off to our Pydantic validation layers, a strict custom HTTP middleware intercepts the raw stream, scanning for multi-language exploit patterns, boundary manipulation attempts, or buffer saturation targets.Empirical Laboratory Results: Finding the "Breakpoint"During live testing conducted on an enterprise-tier workstation, we launched targeted behavioral mimicry attacks using advanced LLM-guided injection scripts against our active cloud node (https://denisijcu-deci-core-api.hf.space).The system was evaluated against varying levels of artificial noise intensity to map out the exact threshold of our defensive boundaries:The Baseline Defeat (Intensity 0.5)We simulated an automated script attempting to execute credentials while applying medium-level Cauchy noise to its keystroke delays.Payload Metric: $CV = 0.0451$, $\text{mean_ikl_ms} = 247.37\text{ms}$.The Engine Verdict: ```json{"session_id": "cloud-test-vertex-001","entropy_score": 0.3747,"score": 0.35,"verdict": "BOT"}* Analysis: Despite attempting to appear slow and deliberate (~247ms between strokes), the linear uniformity of the intervals betrayed the engine. The $CV$ dropped to $0.0451$, driving the total score straight down into absolute BOT territory.

The Breakpoint Discovery (Intensity 0.2)

We systematically reduced the intensity of the artificial distribution down to 0.2, attempting a highly nuanced micro-fluctuation script over a short string.

• Payload Metric: $CV = 0.1560$, $\text{mean_ikl_ms} = 302.63\text{ms}$.
• The Engine Verdict: Score: 0.4250 → SUSPECT.
• Strategic Takeaway: At this ultra-fine intensity, the bot successfully mimicked the human $CV$ barrier ($0.1560$). However, because the execution lacked organic human backspaces and burst adjustments, the engine caught the flaw and instantly triggered a SUSPECT state. This confirms our operational architecture: A bot can fake the tempo, but it cannot fake the organic error rate simultaneously without exposing itself.

Looking Forward: The B2B Invisible Standard

The future of authentication belongs to seamless, frictionless infrastructure. The days of making legitimate users click on fire hydrants and traffic lights are numbered.

By utilizing invisible telemetry capture scripts combined with decentralized, zero-latency vector processing, DECI proves that we can identify automated bad actors on the fly without introducing UX friction for authentic human beings.

The live API node is currently up, running, and hardened for community telemetry gathering. Explore the documentation, integrate the endpoint, and let’s transition together toward an offensive-by-design, defensive-by-nature paradigm.

Join the discussion and view our live production core on Hugging Face: Denisijcu/deci-core-api

Vertex Coders LLC — Miami, Florida Offensive by Design. Defensive by Nature. 🛡️🔥