Geoff Lacy

Outline Definition Technology Types of biometrics

FingerprintsIrisRetinaFaceOther

○ Voice, handwriting, DNA As an SA

Definition

“Biometrics is the science and technology of measuring and analyzing biological data.”

http://searchsecurity.techtarget.com/definition/biometrics

How does Biometric tech work? Biometrics do not create a picture to

compare to. Makes use of a template.

○ Creates a template using an distinctive featuresLogin templateChallenge templateSensitivity is based on

how close to the login

template the challenge

template is.

Sensitivity False Accept Rate or False Positive Rate

the probability that the system incorrectly matches the input pattern to a non-matching template in the database.

False Reject Rate or False Negative Ratethe probability that the system fails to detect a match

between the input pattern and a matching template in the database.

Fingerprint

Most common Biometric Optical scanning and Capacitance

scanning Uses minutiae, or distinctive features.

Pros and cons of fingerprint Pros

CheapEasyWidely usedMost people are

comfortable with providing fingerprints

Can’t write down fingerprint or forget it

ConsCan be faked

MythbustersFingerprints can

be damaged

Iris The iris is the colored ring

around the pupil of every eye and no two are alike

Measures the pattern of the colors in the iris

Some ATM’s use this technology

United Arab Emirates IrisGuard's Homeland Security Border Control has been operating in the United Arab Emirates (UAE) since 2001, all customs agencies are equipped with iris scanners.

Pros and cons of Iris

ProsIris recognition is rarely

impeded by glasses or contact lenses

It can be scanned from 10cm to a few meters away.  

The iris remains stable over time as long as there are no injuries and a single enrolment scan can last

The iris is an internal organ that is largely protected by damage and wear by the cornea.

ConsCan be faked

Been faked with a high definition photos of a face

The accuracy of scanners can be affected by changes in lighting

Iris scanners are significantly more expensive than some other forms of biometrics.

http://www.findbiometrics.com/iris-recognition/

Retina Retina is the back of the eye. Measures the pattern of the

veins. The idea for retinal

identification was first conceived by Dr. Carleton Simon and Dr. Isadore Goldstein and was published in the New York State Journal of Medicine in 1935. The idea was a little before its time, but once technology caught up, the concept for a retinal scanning device emerged in 1975.

Pros and cons of Retina

ProsLow occurrence of false

positivesExtremely low (almost

0%) false negative ratesHighly reliable because no

two people have the same retinal pattern

Speedy results: Identity of the subject is verified very quickly

Very difficult to fake○ Requires live tissue

ConsMeasurement accuracy can be

affected by cataracts or severe astigmatism

Not very user friendlyo Scanning procedure is

perceived by some as invasive

o Subject being scanned must be close to the camera optics

High equipment costs

Face Template created from Eigen

Faces.2-D image

A newly emerging trend, claimed to achieve improved accuracies, is three-dimensional face recognition. This technique uses 3D sensors

to capture information about the shape of a face. This information is then used to identify distinctive features on the surface of a face, such as the contour of the eye sockets, nose, and chin

Problems with Privacy People don’t seem to like being identified from

cameras.In January 2001, the city of Tampa, Florida used the

technology to scan the faces of people in crowds at the Super Bowl, comparing them with images in a database of digital mug shots. Tampa then installed cameras equipped with face recognition technology in their Ybor City nightlife district, where they have encountered opposition from people wearing masks and making obscene gestures at the cameras. In late August 2001, a member of the Jacksonville, Florida City Council proposed legislation to keep the technology out of Jacksonville.

http://epic.org/privacy/facerecognition/

Voice, Handwriting, DNA

As a System Admin If you need level three authentication.

Who you areBiometrics is supposed to increase

confidentiality and availability.○ Confidentiality is increased by securing the data

with better authentication techniques. Biometrics is realistically impossible to brute force.

○ Availability is increased because it is easier to log in with a biometric as opposed to a token card or password.

What Security level do you need? Is it within budget?