Records the keystroke timing data and creates a model. Applies learning algorithms and statistical models to differentiate between a valid user and an intruder