Cyber Crime News -
[Cached Version]
Published on: 12/10/2000
Last Visited: 3/26/2001
Biometrics is a form of testing to try and figure out a match , and it can have false rejects or false acceptances , says Bill Campbell , a consultant at Eagle's Reach , the security firm he founded about a year ago after leaving Fidelity Investments , where he was director of information security engineering.
The biometrics vendors recognize this weakness , and they will quote the equal error rate for their devices based on their own tests , Campbell notes.It's impossible to compare one vendor's equal error rate against another's because there are no standardized tests.
But the larger question is whether any false rejections or acceptances are tolerable for use with important , and perhaps sensitive , applications.Error rates drop significantly with use of multimode biometrics where the user is required to submit voice and fingerprint , for example , to be processed at the same time , Campbell says.
But there is another problem.Campbell notes that biometrics can be spoofed by hackers.
While it's highly unlikely anyone could spoof a retinal scan , most forms of biometrics are vulnerable to replay attacks , he says.
These attacks could involve the interception of biometrics data , which would be stored and replayed later to get into a system or network.
...
Biometrics is moving forward , Campbell says , pointing out that fingerprint and facialscanning vendor eTrue recently became the first company to adopt a hosted application service provider model for biometrics , storing customers' personal data on the Internet.When you buy their service , they give you the equipment for free , he adds.
NASA employees are said to be among the first customers for eTrue's hosted service for use in logging on to secure networks from home.
Get more information online.DocFinder 3444 www.nwfusion.com.