Elucidating dynamic features to discriminate between signature disguise and signature forgery behavior