A risk analysis approach for biometric authentication technology

International Journal of Network Security

Volumn 2, Issue 1, 2006, Pages 52-63

  Brömme, Arslan ^a  

^a UNIVERSITY OF HAMBURG   (Germany)

Author keywords

Authentication; Biometric authentication technology; Holistic security risk analysis; IT security biometrics; Risk analysis

Indexed keywords

ANALYSIS APPROACH; BIOMETRIC ALGORITHMS; BIOMETRIC AUTHENTICATION; INTEGRATED APPROACH; IT SECURITY; PROCESS MODEL; SECURITY RISK ANALYSIS;

AUTHENTICATION; INFORMATION TECHNOLOGY; RISK ANALYSIS; SECURITY OF DATA; SECURITY SYSTEMS;

BIOMETRICS;

EID: 65949097340     PISSN: 1816353X     EISSN: 18163548     Source Type: Journal    
DOI: None     Document Type: Article

References (35)

1. K. Bhaskar, Computer Security - Threats and Countermeasures, NCC Blackwell, 1993.
2. A. Brömme, "A classification of biometric signatures," in IEEE International Conference on Multimedia & Expo ICME 2003, vol. 3, pp. 17-20, Baltimore, MD, USA, July 6-9, 2003.
3. M. Bishop, Computer Security - Art and Science, Addison-Wesley, 2003.
4. R. M. Bolle, J. H.Connell, S. Pankanti, N. K. Ratha and A. W. Senior, Guide to Biometrics, Springer- Verlag, New York, USA, 2004.
5. A. Brömme, "A discussion on privacy needs and (mis)use of biometric IT-Systems," in IFIP WG 9.6/11.7 Conference on SCITS-II, pp. 145-156, Bratislava, Slovakia, 2001.
6. A. Brömme and C. Busch, "Biometrics and electronic signatures," in (BIOSIG 2003), Conference Proceedings of GI Working Group BIOSIG, Darmstadt, Germany, 2003.
7. A. Brömme, M. Kronberg, O. Ellenbeck, and O. Kasch, "A conceptual framework for testing biometric algorithms within operating systems' authentication," in ACM Symposium on Applied Computing SAC 2002, pp. 273-280, Madrid, Spain, Mar. 11-14, 2002.
8. K. Brunnstein, AGN Oberseminar - Discussion on Risk Analysis of Biometric Technology, 6th Nov. 2003, AGN, Department of Informatics, University of Hamburg, 2003.
9. K. Brunnstein, AGN Projektseminar - Talk on Risk Management, 9th Dec. 2003, AGN, Department of Informatics, University of Hamburg, 2003.
10. Bundesamt für Sicherheit in der Informationstechnik (BSI): Vergleichende Untersuchung biometrischer Identifikationssysteme - BioIS, Bonn, Germany, 2000.
11. K. Brunnstein, "From antiVirus to antiMalware software and beyond: another approach to the protection of customers from dysfunctional system behaviour," in 22nd National Information Systems Security Conference (NISSC) Arlington/Washington, USA, Oct. 18-21,1999.
12. J. G. Daugman, Biometric Personal Identification based on Iris Analysis, U.S. Patent 5,291,560, inventor: J.G. Daugman, assignee: IriScan Inc., filed: 15.07.1991, date of patent: 01.03.1994, 1994.
13. R. C. Dubes, Cluster Analysis and Related Issues, in: C. H. Chen et al. (eds.), Handbook of Pattern Recognition & Computer Vision, 2nd ed., World Scientific, 1999.
14. S. Fischer-Hübner, Privacy-Enhancing Design and Use of IT-Security Mechanisms, habilitation, AGN, Department of Informatics, University of Hamburg, 1999.
15. W. Froehling, Konzept und exemplarische Implementation eines gesicherten Kanals zur Ü bertragung biometrischer Daten, bachelor thesis, supervisors: K. Brunnstein, A. Brömme, AGN, Department of Informatics, University of Hamburg, 2003.
16. General Assembly of the United Nations: Universal Declaration of Human Rights, http://www.un.org/Overview/rights.htm, Dec. 10th, 1948.
17. L. Hong and A. K. Jain, Multimodal Biometrics, in: Jain, Bolle, and Pankanti (eds.), Biometrics: Personal Identification in Networked Society, Kluwer Academic Press, 1999.
18. A. K. Jain, Invited Talk on Biometrics at DAGM 2003, Magdeburg, Germany, 2003.
19. A. K. Jain and R. C. Dubes, Algorithms for Data Clustering, Prentice-Hall, 1988.
20. M. Johns, Anwendungen von Wavelets für die biometrische Authentikation, diploma thesis, supervisors: K. Brunnstein, H.-S. Stiehl, A. Brömme, AGN, Dep. of Inf., Univ. of Hamburg, 2002.
21. K. P. Kossakowski, Information Technology Incident Response Capabilities, doctoral thesis, supervisor: K. Brunnstein, Department of Informatics, University of Hamburg, 2000.
22. M. Kronberg, Implementierung einer Iris-Biometrik in ein Client-Server-Authentisierungssystem, diploma thesis, supervisors: K. Brunnstein, A. Brömme, AGN, Department of Informatics, University of Hamburg, 2002.
23. J. C. Laprie, (ed.), Dependability: Basic Concepts and Terminology in English, French, German, Italian and Japanese, Springer-Verlag, Wien, Austria, 1992.
24. N. G. Leveson, Safeware - System Safety and Computers, Addison-Wesley, 1995.
25. D. Maio, D. Maltoni, R. Cappelli, J. L.Wayman, and A. K. Jain, FVC2002: Second Fingerprint Verification Competition, Biometric System Lab, University of Bologna, Biometric Test Center, San Jose State University, Pattern Recog. and Image Proc. Lab., Michigan State University, 2002.
26. A. J. Mansfield and J. L. Wayman, Best Practices in Testing and Reporting Performance of Biometric Devices, National Physics Laboratory, Middlesex, UK, 2002.
27. N. J. McCormick, Reliability and Risk Analysis, Academic Press, N.Y., USA, 1981.
28. C. Paulsen, Risikoanalyse von biometrischen Systemen, diploma thesis, supervisor: K. Brunnstein, AGN, Department of Informatics, University of Hamburg, 2003.
29. C. P. Pfleeger and S. L. Pfleeger, Security Computing, 3rd edition, Prentice Hall, 2003.
30. P. J. Phillips, P. Grother, R. Micheals, D. M. Blackburn, E. Tabassi, and J. M. Bone, Face Recognition Vendor Test 2002, DARPA, NIST, DoD, NAVSEA, USA, 2003.
31. P. J. Phillips, A. Martin, C. L. Wilson, and M. Przybocki, "An introduction to evaluating biometric systems," IEEE Computer, vol. 33, no. 2, pp. 56-62, Feb. 2000.
32. B. Schneier, "Attack trees," Dr. Dobb's Journ. of Softw. Tools, vol. 24, no. 12, 1999.
33. R. Shirey, Internet Security Glossary, NWG, RFC 2828, The Internet Society, 2000.
34. A. F. Westin, Privacy and Freedom, Atheneum, New York, 1967.
35. E. W. Weisstein, CRC Concise Encyclopedia of Mathematics, Chapman & Hall, 1999.