CHIMERA Attack Workbench.
Synthesizing composite "Frankenstein" sessions. By splicing genuine human fragments at pause boundaries (velocity ≈ 0), attackers bypass single-channel ML while corrupting cross-modal synchrony.
How CHIMERA Synthesizes Bypasses
Donor Selection
Selects 3 distinct human sessions to prevent single-source trajectory fingerprinting.
Pause Segmentation
Cuts mouse paths at stationary dwell points (v ≈ 0) to avoid jerk spikes.
Spatial Retarget
Translates and scales coordinates to match target input form bounding boxes.
Micro-Jitter
Applies 0.90x–1.15x retiming to defeat historical duplicate matching.
Keystroke Overlay
Grafts an independent foreign typing cadence onto the spliced timeline.
Configure Attack Parameters
Initial ballistic approach toward form field.
Spliced at velocity ≈ 0 pause dwell boundary.
Independent typing cadence overlaid on timeline.
Why Spliced Attacks Bypass Single-Channel ML
Individual Fragments are 100% Genuine
Because every donor fragment came from a real human, intra-channel metrics (micro-tremor, speed distributions) pass statistical normality checks.
Cuts Occur at Natural Pauses
CHIMERA detects moments where mouse velocity is zero ($v \approx 0$). Splicing here generates zero acceleration or jerk spikes.
The Fatal Cross-Modal Desync
While each channel looks human in isolation, their cross-modal timing violates Card-Moran-Newell KLM single-attentional bounds, which CORROBORATE catches.