1. A method comprising: denying access to a resource in response to a score value of a legitimate user, based on timing information of key-press and key-release events entered by the legitimate user being below a threshold value of a keystroke dynamics template of the legitimate user, wherein the events are presses and releases of keys of a keyboard by one person; then as a result of denying, identifying the key-press and key-release events entered by the legitimate user as key-press and key-release events entered by an imposter; then as a result of denying, applying a non-biometric secondary type of authentication after denying access to the resource based on the score value; then as a result of applying, granting access to the resource based only on the non-biometric secondary type of authentication authenticating the legitimate user; and then incorporating the timing information of key-press and key-release events entered by the legitimate user and identified as key-press and key-release events entered by an imposter, into the keystroke dynamics template of the legitimate user after denying access to the resource.