Skip to main content

Biometric Spoofing

'Biometric Spoofing' is defined as 'process of defeating Biometric System with fake Biometric sample'. Yes, inquisitive topic for discussion; but - Spoofing is always serious concern worldwide. Biometric Technology is believed as right fit solution to address security challenges including Spoofing attacks. But, in reality - not all Biometrics would stand fool-proof against advanced Spoofing attacks.
My Post covers readings from my studies and experiments conducted in India, China & UK on Biometrics and latest Market trends. Idea is to highlight deficiencies & vulnerabilities of Biometrics and share tips & techniques for better preparedness for Spoofing.
Biometric Technologies
Some of Biometric Technologies widely used globally:
  • Fingerprint
  • Iris
  • Face
  • Voice
  • Vein
Though there are many other Biometric technologies in research, technologies with lesser market share currently are not taken into consideration for this post.
Market Trends
  • Global Biometrics Market is projected to reach $21.9 billion by 2020 (Source: 6WResearch); $23 billion (Source: Transparency Market Research)
  • In Global Biometrics market, Fingerprint Biometrics has contributed for majority of the market revenues till date
  • Ease of use and low cost of fingerprint based biometrics devices have resulted for their dominance in last 5 years
  • Going forward, Fingerprint biometrics is expected to face tough fight from other biometrics like Iris, Face, Voice etc., technologies and lose market share
  • Focus will be more on higher reliability and accuracy of Biometric Solution design with the advent of Biometric Payments
  • IRIS, Face and Vein are growing rapidly due to lower FAR and FRR as compared to Fingerprint Biometrics Technology
  • Multimodal Biometrics systems is expected to grow rapidly in next 5 years
  • User acceptance of Fingerprint & Face Biometrics is more, where as Vein and Iris are more accurate
Facts
  • Most of the Fingerprint Scanners are prone to hacking
  • Researchers identified over 300 materials (but not limited to) like Silicon Gel, Rubber etc., to create Fingerprint Spoof as shown above
  • Iris - Fake Eye Images, Contact Lens etc., enable hackers to fake Iris sample
  • Face - Very easy to spoof, even just with Photograph. Our experiments proved that cracking 2D face is damn easy
  • Voice - Mimicry, similar voice can spoof with little effort
Tips
Below tips help us to fight against Spoofing and give tough hassles to hackers:
  • Liveness - 'Liveness Detection' of Biometric Sensor feature helps to guard against Spoofing. Algorithms can differentiate 'real' and 'fake' samples using living traits like Fingerprint temperature, pressure, moisture, eye pupil movement etc. Usually, classified as Hardware based technique
  • Multimodal Biometrics - Researches reveal that Biometric Solutions with SixBiometric modals will throw tough challenge to hackers. For practical reasons, many modals may not be always possible due to economics and implementation hassles. But, we noticed that complexity & reliability increases with each additional Biometric modal inclusion to the System. So, another Hardware based technique, more you plan - more robust your System could be!
  • 3D Biometrics - 2D Biometric modals are easier to crack; 3D makes Spoofing difficult due to complexity of algorithms to crack(like 3D Face). Categorized as Software based anti-spoofing technique
  • Fool Proof Enrollment - Necessary care & precautions should be taken during Enrollment process to avoid Fake/faulty samples
  • Server/Database Security - Like above, sound security strategy is inevitable at Server, Database and Network level to protect stored Biometric templates against hacking
  • 3 Way Plan - For efficient anti-spoof mechanism, one should deploy Sensor level, Feature level and Score level anti-spoofing techniques at Sensor, Extractor and Matcher respectively
Image Courtesy - fcw, idiap
Happy to share more inputs going forward. Any views or thoughts? You are most welcome.
Posts are personal.

Comments

  1. UnknownJuly 24, 2019 at 11:13 AM

    nadh garu very informative

    ReplyDelete
  2. securetechAugust 5, 2021 at 10:12 PM

    Hi there to everyone, the contents present at this web page are actually amazing for people knowledge, well, you can also visit Biometric Technology in Nigeria for more Secure Tech related information and knowledge. Keep up the good work.

    ReplyDelete

Post a Comment

Popular posts from this blog

My Start-up Learnings

I am really fortunate to chase my dreams multiple times. Co-founded few Start-up ventures in London (UK) & India during my journey so far. Yes, it was my dream run! My journey was quite exciting filled with pace, fun and memorable landmarks.Besides, my acute study on numerous start ups in India & London has resulted good learning, which is the genesis of this post. Snippets: Business is team sport, alone can't run for long and for big Companies with better network connects score better and can win better 'Fool-proof Execution' is always more important than 'Path breaking, brilliant idea' Scale up is a puzzle, demands dedicated focus and efforts Finance and legal are tough nuts, require expert hand-shake Local legislation is a MUST to follow Reference is key to faster deal closure Focus, focus, focus: for core-competency and competitive edge Cash is king. Cash on hand always has strategic advantage Survival is acid test for initial 2 year...
10 comments
Read more

Behavioral Biometrics

Biometrics is always one of very fascinating domains to watch. I am fortunate to be part of some very exciting landmark programs/studies in UK & India. In my previous post, I shared some thoughts & tips on 'Biometric Spoofing'. Physical Biometrics has dominated the landscape so far, but - we can't ignore the growth & importance of Behavioral Biometrics in times to come. So, this post of mine keeps focus on Behavioral Biometrics coupled with latest trends. Latest trends Research is in progress on new Biometric modals - Hand Geometry, Vein, Retina, Skin, Gait, Signature, Foot, Ear, Odor etc., Currently, though their market share is not significant, still at nascent stage, but - expected to grow in times to come Good research is in progress globally on Behavioral Biometrics - Biometrics based on behavioral traits help identify a person by some measurable activity Behavioral Biometric Solutions are cheaper than using Physical(also called as Physiolog...
3 comments
Read more

'Cold Calling' works in London too!

My post covers my cold calling sales experience in London, UK. It is always interesting to watch ongoing debate on 'Cold Calling' & its relevance in digital era now. 'Cold Calling' - is one of the traditional & widely accepted approaches for 'go to market' (GTM) & carries mixed opinions on execution front. Key steps in the process include: meeting unknown potential Customer directly without any prior reference or appointment, sharing value proposition across the table and push for deal closure. My experience says, ' Cold Calling works well in London (UK) too '. Landed in London with HSMP visa on hand, being new to market, I have used the same process & tips which I picked up & practiced in India during my early days of Professional Sales Career. Interestingly, the core fundamentals won't change even after a decade, irrespective of your work place. However, smart fine-tuning is essential based on product/solution or ...
1 comment
Read more