A taxonomy of biometric system vulnerabilities and defences

International Journal of Biometrics

Volumn 5, Issue 2, 2013, Pages 137-159

  Singh, Yogendra Narain ^a   Singh, Sanjay Kumar ^b  

^a INSTITUTE OF ENGINEERING AND TECHNOLOGY   (India)

^b BANARAS HINDU UNIVERSITY   (India)

Author keywords

authentication; biometrics; defences; security; template protection; vitality measures; vulnerabilities

Indexed keywords

AUTHENTICATION; TAXONOMIES;

DEFENCES; SECURITY; TEMPLATE PROTECTION; VITALITY MEASURES; VULNERABILITIES;

BIOMETRICS;

EID: 84877275048     PISSN: 17558301     EISSN: 1755831X     Source Type: Journal    
DOI: 10.1504/IJBM.2013.052964     Document Type: Article

References (57)

1. Adler, A. (2003) 'Sample images can be independently restored from the face recognition templates', Proc. Can. Conf. Elect. Comput. Eng. (CCECE), Montral, QC, Canada, pp.1163-1166.
2. Antonelli, A., Capelli, R., Maio, D. and Maltoni, D. (2006) 'Fake finger detection by skin distortion analysis', IEEE Transactions on Information Forensics Security, Vol. 1, No. 3, pp.360-373. (Pubitemid 44304218)
3. Bairavasundaram, L.N., Goodson, G.R., and Schroeder, B., Dusseau, A.C.A. and Dusseau, R.H.A. (2008) 'An analysis of data corruption in the storage space', Proc. 6th USENIX Conference on File and Storage Technologies, pp.223-238.
4. Baldissera, D., Franco, A., Maio, D. and Maltoni, D. (2006) 'Fake fingerprint detection by odor analysis', Proc. International Conference on Biometric, ICB 2006, LNCS, Vol. 3832, pp.265-272. (Pubitemid 43856380)
5. Bolle, R.M., Connell, J.H. and Ratha, N.K. (2002) 'Biometric perils and patches', Pattern Recognition, Vol. 35, No. 12, pp.2727-2738.
6. Bredin, H. and Chollet, G. (2007) 'Audiovisual speech synchrony measure: application to biometrics', EURASIP Journal on Advances in Signal Processing, Article ID 70186, pp.1-11.
7. Chang, S., Secker, J., Xiao, Q., Reid, B., Bergeron, A. and Almuhtadi, W. (2011) 'Arficial finger detection by spectrum analysis', Int. J. Biometrics, Vol. 3, No. 4, pp.376-389.
8. Chetty, G. and Wagner, M. (2004) 'Liveness verification in audio video speaker authentication', Proc. 10th Australian International Conference on Speech Science & Technology, Sydney, pp.358-363.
9. Chin, C.S., Jin, A.T.B. and Ling, D.N.C. (2006) 'High security iris verification system based on random secret integration', Computer Vision and Image Understanding, Vol. 102, pp.169-177.
10. Clancy, T.C., Kiyavash, N. and Lin, D.J. (2003) 'Secure smartcard-based fingerprint authentication', Proc. 2003 ACM SIGMM Workshop Biometrics Method and Application (WBMA), pp.1-10.
11. Coli, P., Marcialis, G.L. and Roli, F. (2007) 'Power spectrum-based fingerprint vitality detection', Proc. IEEE Workshop on Automatic Identification Advanced Technologies, AutoID, pp.169-173. (Pubitemid 47487113)
12. Daugman, J. (1999) 'Recognizing persons by their iris patterns: countermeasures against subterfuge', in Jain, A.K., Bolle, R. and Pankanti, S. (Eds.): Biometrics: Personal Identification in Networked Society, Kluwer, Cambridge University, Cambridge.
13. Dunstone, T. and Poulton, G. (2011) 'Vulnerability assessment', Biometric Technology Today, No. 5, pp.5-7.
14. Galbally, J., Alonso-Fernandez, F., Fierrez, J. and Ortega-Garcia, J. (2012) 'A high performance fingerprint liveness detection method based on quality related features', Future Generation Computer Systems, Vol. 28, No. 1, pp.311-321.
15. Gray, J. (2001) 'Functionality, availability, agility, manageability, scalability -the new priorities of application design', available at http://www.research.microsoft.com/(accessed on June 2011).
16. Grottke, M., Matias, R. and Trivedi, K.S. (2008) 'the fundamentals of software aging', Proc. IEEE Int'l. Symposium on Software Reliability Engineering, pp.1-6.
17. Hao, F. and Chan, C.W. (2002) 'Private key generation from online handwritten signatures', Information Management & Computer Security, Vol. 10, No. 2, pp.159-164.
18. Hao, F., anderson, R. and Daugman, J. (2006) 'Combining crypto with biometrics effectively', IEEE Trans. on Computers, Vol. 55, No. 9, pp.1081-1088. (Pubitemid 44263808)
19. Higgins, A., Bahler, L. and Porter, J. (1991) 'Speaker verification using randomized phrase prompting', Digital Signal Process., Vol. 1, pp.89-106.
20. Ishikawa, K. (1986) 'Guide to quality control', Asian Productivity Organization, 2nd ed., White Plains, New York.
21. Jain, A.K., Nandkumar, K. and Nagar, A. (2008) 'Biometric template security', EURASIP Journal of Advances in Signal Processing, Article ID 579416, pp.1-17.
22. Jee, H.K., Jung, S.U. and Yoo, J.H. (2006) 'Liveness detection for embedded face recognition system', International Journal of Biomedical Sciences, Vol. 1, No. 4, pp.235-238.
23. Juels, A. and Sudan, M. (2002) 'A fuzzy vault scheme', ISIT 2002, Lausanne, Switzerland, 408p.
24. Kallo, P., Kiss, I., Podmaniczky, A. and Talosi, J. (2001) 'Detector for recognizing the living character of a finger in a fingerprint recognizing apparatus', Dermo Corporation, U.S. Patent No. 6,175,64.
25. Kollreider, K., Fronthaler, H. and Bigun, J. (2005) 'Evaluating liveness by face images and the structure tensor', Proc. Fourth IEEE Workshop on Automatic Identification Advanced Technologies, pp.17-18.
26. Laprie, A.J.C., Randell, B. and Landwehr, C. (2004) 'Basic concepts and taxonomy of dependable and secure computing', IEEE Transactions on Dependable and Secure Computing, Vol. 1, No. 1, pp.11-33. (Pubitemid 40134576)
27. Lapsley, P., Less, J., Pare, D. and Hoffman, N. (1998) 'Anti-fraud biometric sensor that accurately detects blood flow', SmartTouch, LLC, US Patent #5,737,439.
28. Li, J., Wang, Y., Tan, T. and Jain, A.K. (2004) 'Live face detection based on the analysis of Fourier spectra', Biometric Technology for Human Identification, Vol. 5404 of Proceedings of SPIE, Orlando, Fla, USA, pp.296-303.
29. Maltoni, D., Maio, D., Jain, A.K. and Prabhakar, S. (2009) Handbook of Fingerprint Recognition, 2nd ed., Springer Professional Computing.
30. Martinez-Diaz, M., Fierrez, J., Galbally, J. and Ortega-Garcia, J. (2011) 'An evaluation of indirect attacks and countermeasures in fingerprint verification systems', Pattern Recognition Letters, Vol. 32, No. 12, pp.1643-1651.
31. Matsumoto, T. (2004) 'Artificial fingers and irises: importance of vulnerability analysis', Proc. 7th Int'l. Biometrics Conference, London.
32. Matsumoto, T. (2007) 'Assessing the security of advanced biometric systems: finger, vein and iris', Proc. 10th Int'l. Biometrics Conference, London.
33. Matsumoto, T., Matsumoto, H., Yamada, K. and Hoshino, S. (2002) 'Impact of artificial gummy fingers on fingerprint systems', Proc. SPIE, Optical Security and Counterfeit Deterrence Techniques IV, San Jose, USA, Vol. 4677, pp.275-89. (Pubitemid 35229811)
34. Moon, Y.S., Chen, J.S., Chan, K.C., So, K. and Woo, K.C. (2005) 'Wavelet based liveness detection', Electronics Letters, Vol. 41, No. 20, pp.1112-1113.
35. O'Gorman, L. (2003) 'Comparing passwords, tokens, and biometrics for user authentication', Proceedings of the IEEE, Vol. 91 No. 12, pp.2021-2040. (Pubitemid 40890781)
36. Parthasaradhi, S.T.V., Derakhshani, R., Hornak, L.A. and Schuckers, S.A.C. (2005) 'Time-series detection of perspiration as a liveness test in fingerprint devices', IEEE Transactions on Systems Man and Cybernetics C, Vol. 35, No. 3, pp.335-343. (Pubitemid 41194746)
37. Phillips, P.J., Wechsler, H., Huang, J. and Rauss, P.J. (1998) 'the FERET database and evaluation procedure for face recognition algorithms', Image and Vision Computing Journal, Vol. 16, No. 5, pp.295-306. (Pubitemid 128393579)
38. Ratha, N.K., Chikkerur, S., Connell, J.H. and Bolle, R.M. (2007) 'Generating cancelable fingerprint templates', IEEE Trans. Pattern Analysis and Machine Intell., Vol. 29, No. 4, pp.561-572. (Pubitemid 46464397)
39. Ratha, N.K., Connell, J.H. and Bolle, R.M. (2001) 'An analysis of minutiae matching strength', Paper presented at the International Conference of Audio and Video based Biometric Authentication, 6-8 June, Halmstad, Sweden.
40. Reddy, P.V., Kumar, A., Rahman, S.M.K. and Mundra, T.S. (2008) 'A new antispoofing approach for biometric devices', IEEE Transactions on Biomedical Circuits and Systems, Vol. 2, No. 4, pp.328-337.
41. Roberts, C. (2007) 'Biometric attack vectors and defenses', Computers and Security, Vol. 26, No. 1, pp.14-25.
42. Schneier, B. (1999) 'the uses and abuses of biometrics', Communication to ACM, Vol. 42, No. 8, 136p.
43. Schuckers, S.A.C. (2002) 'Spoofing and anti-spoofing measures', Information Security Technical Report, Vol. 7, No. 4, pp.56-62.
44. Singh, Y.N. (2011) 'the challenges of UID environment', Proc. of National Conference UID-2011, Impact of Aadhaar in Governance, Computer Society of India, Lucknow, pp.153-161.
45. Singh, Y.N. and Gupta, P. (2009) 'Biometric method for human identification using electrocardiogram', Proceedings of ICB 2009, Lecture Notes of Computer Science, Vol. 5558, pp.1270-1279.
46. Singh, Y.N. and Gupta, P. (2011) 'Correlation-based classification of heartbeats for individual identification', Journal of Soft Computing, Vol. 15, No. 3, pp.449-460, Springer.
47. Singh, Y.N. and Singh, S.K. (2011) 'Vitality detection from biometrics: state-of-the-art', Proc. World Congress on Information and Communication Technology (WICT), Mumbai, pp.106-111.
48. Singh, Y.N. and Singh, S.K. (2012) 'Bioelectrical signals as emerging biometrics: issues and challenges', ISRN Signal Processing, Article ID 712032, 13p, doi:10.5402/2012/712032.
49. Singh, Y.N., Singh, S.K. and Gupta, P. (2012) 'Fusion of electrocardiogram with unobtrusive biometrics: an efficient individual authentication system', Pattern Recognition Letters, Vol. 33, pp.1932-1941.
50. Soutar, C., Roberge, D., Stoianov, A., Gilroy, R. and Kumar, B.V. (1998) 'Biometric encryption: enrollment and verification procedures', Proc. SPIE, Optical Pattern Recognition IX, Vol. 3386, pp.24-35.
51. Teoh, A.B.J. and Chong, L.Y. (2010) 'Secure speech template protection in speaker verification system', Speech Communication, Vol. 52, pp.150-163.
52. Toth, B. (2005) 'Biometric liveness detection', Information Security Bulletin, Vol. 10, pp.291-297.
53. Uludag, U. and Jain, A.K. (2004) 'Attacks on biometric systems: a case study in fingerprints', Paper presented at the SPIE-EI Security, Steganography and Watermarking of Multimedia Contents VI, 18-22 January, San Jose, CA.
54. US Department of Transportation (1998) 'Audit report: advance automation system', Report AV-1998-113.
55. van der Putte, T. and Keuning, J. (2000) 'Biometrical fingerprint recognition: don't get your fingers burned', Proc. Fourth Working Conference on Smart Card Research and Advanced Applications, Kluwer Academic Publishers, pp.289-303.
56. Wang, Y. and Hatzinakos, D. (2009) 'Sorted index numbers for privacy preserving face recognition', EURASIP Journal on Advances in Signal Processing, Article ID 260148, pp.1-16.
57. Watson, A. (2007) 'Biometrics: easy to steal, hard to regain identity', Nature, Vol. 449, 535p.