Biometric attack vectors and defences

Computers and Security

Volumn 26, Issue 1, 2007, Pages 14-25

  Roberts, Chris ^a  

^a UNIVERSITY OF OTAGO   (New Zealand)

Author keywords

Attack vector; Biometric; Countermeasures; Defences; Identification; Security; Threat

Indexed keywords

BIOSENSORS; COMPUTER CRIME; RISK ASSESSMENT; SECURITY OF DATA;

BIOMETRIC SENSORS; RISK-BASED SYSTEMS; SPOOFING APPROACHES;

PATTERN RECOGNITION;

EID: 33846817469     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2006.12.008     Document Type: Article

References (37)

1. Adler Andy. Reconstruction of source images from quantized biometric match score data. University of Ottawa, [accessed 25.11.05].
2. AS/NZS 4360:2004 risk management, Standards New Zealand, [accessed 01.09.06].
3. Bartlow Nick, Cukic Bojan. The vulnerabilities of biometric systems - an integrated look and old and new ideas. Technical report, West Virginia University; 2005a.
4. Bartlow Nick, Cukic Bojan. Biometric system threats and countermeasures: a risk-based approach. In: Biometric Consortium Conference, ; September 2005b.
5. Biometric Device Protection Profile, UK Government Biometrics Working Group, Draft issue 0.82-5, ; September 2001 [accessed 13.10.06].
6. Biometrics security technical implementation guide version 1. Release 2. Defense information systems agency for the US department of defense, ; 23 August 2004 [accessed 13.09.05].
7. Bromba Manferd. On the reconstruction of biometric raw data from template data, M.U.A. Bromba, Bromba GmbH ; July 2003 [accessed 14.08.06].
8. Check Body, Thalheim Lisa, Krissler Jan, Ziegler Peter-Michael. Biometrie (Translated from the original German by Robert W. Smith) c't magazine 2002;114. [accessed 05.02.06].
9. Chetty Girija, Wagner Michael. Audio-video biometric systems with liveness checks, University of Canberra, [accessed 03.09.06].
10. Clarkson University Engineer Outwits High-Tech Fingerprint Fraud, Clarkson University, ; 10 December 2005 [accessed 19.12.05].
11. ®, [accessed 10.09.06].
12. Computer Crime and Security Survey, University of Otago, ; 2005 [accessed 08.09.06].
13. Computer Security Resource Center, National Institute of Standards and Technology, [accessed 10.09.06].
14. CSI/FBI annual surveys, computer security institute, 1996 to 2006, .
15. Cybersecurity operations handbook. 1st ed. (2003), Elsevier Digital Press, Rittinghouse and Hancock. 1-55558-306-7
16. Evaluation criteria for IT security - Parts 1, 2 & 3: International Organization for Standardization, [accessed 10.09.06].
17. Harrison A. Hackers claim new fingerprint biometric attack. SecurityFocus (13 August 2003). http://www.securityfocus.com/print/news/6717 [accessed 13.08.06]
18. Information Security Management Systems, International Organization for Standardization, [accessed 10.09.06].
19. Information security standard. BSI management systems, [accessed 10.09.06].
20. Integrated risk management framework (IRMF), the treasury board of Canada secretariat (TBS), ; April 2001 [accessed 01.09.06].
21. ISO/IEC 27001:2005, Information technology - security techniques - information security management systems - requirements, [accessed 10.02.06].
22. IT infrastructure library, Hompage, [accessed 10.02.06].
23. Jain Anil K, Uludag Umut. IEEE transactions on pattern analysis and machine intelligence, vol. 25, No. 11, November 2003. [accessed 08.09.06].
24. Jain A.K., Ross A., and Uludag U. Biometric template security: challenges and solutions. Proceedings of the 13th European signal processing conference (9EU-SIPCO) (2005), Antalya, Turkey. [accessed 03.09.06]
25. Jain Anil K, Pankanti Sharath, Prabhakar Salil, Hong Lin, Ross Arun, Wayman James L. In: Proceedings of international conference on pattern recognition (ICPR) Cambridge, UK, Aug. 2004. Michigan State University/IBM T. J. Watson Research Center/DigitalPersona Inc./Siemens Corporate Research/West Virginia University/San Jose State University. [accessed 05.02.06].
26. Liveness detection in biometric systems, Biometrics information resource, [accessed 05.02.06].
27. Martinez-Diaz M, Fierrez-Aguilar J, Alonso-Fernandez F, Ortega-Garcia J, Siguenza, JA. Hill-climbing and brute-force attacks on biometric systems: a case study in match-on-card fingerprint verification, Universidad Autonoma de Madrid, [accessed 03.09.06].
28. Matsumoto T., Matsumoto H., Yamada K., and Hoshino S. Proceedings of SPIE. Optical security and counterfeit deterrence techniques IV vol. #4677 (24-25 January 2002), Graduate School of Environment and Information Sciences Yokohama National University, Japan. http://cryptome.org/gummy.htm [accessed 29.09.05]
29. Nessus vulnerability scanner. Tenable network security, [accessed 10.09.06].
30. Ratha N.K., Connell J.H., and Bolle R.M. Enhancing security and privacy in biometrics-based authentication systems. IBM Systems Journal 40 3 (2001). http://domino.research.ibm.com/tchjr/journalindex.nsf/a3807c5b4823c53f85256561006324be/dd12e71773f23bcb85256bfa00685d76?OpenDocument [accessed 01.09.06]
31. Risk Management Guide for Information Technology Systems. Special publication 800-30, National Institute of Standards and Technology, [accessed 01.09.06].
32. Site security handbook, RFC 2196, Internet engineering task force, [accessed 10.09.06].
33. Soutar Colin. Biometric systems security, Bioscrypt Inc., [accessed 03.09.06].
34. Study report on biometrics in E-authentication Ver 0.2. InterNational Committee for Information Technology Standards, ; February 2006 [accessed 08.09.06].
35. Wayman J.L. Technical testing and evaluation of biometric devices. [Michigan State University]. In: Jain A.K., Bolle R., and Pankanti S. (Eds). Biometrics - personal identification in networked society (1999), Kluwer Academic Publisher.
36. Wills D., and Lees M. Six biometric devices point the finger at security. Network Computing (1 June 1998). http://www.networkcomputing.com/910/910r1.html [accessed 29.01.06]
37. Yeung Minerva M, Pankanti Sharath. Verification watermarks on fingerprint recognition and retrieval, [accessed 08.09.06].