A Methodology for Prevention of Biometric Presentation Attacks
Emanuela Marasco, Mohamed Elemam Shehab, Bojan Čukić · 2016
Given their widespread use for authentication, biometric systems are a key target for Presentation Attacks (PAs). A presentation attack is an attempt to circumvent a biometric system by simulating the trait of an authorized person and presenting it to the sensor. Social dimension of biometric authentication nourishes the interest in spoofing attacks. Depending on motivation and availability of resources, general users become potential attackers. There is a strong need for extensive vulnerability analysis of biometric authentication systems to aid the implementation of appropriate countermeasures. One of the methodologies for analyzing system security is based on attack trees (ATs). In ATs, attacks against a system are represented in a tree structure that helps the designer understand different ways in which the system may be attacked as well as who the attackers may be, including their abilities, motivation, and goals. Security analysts may use attack trees to identify attack patterns, which in turn can serve system designers to implement more effective defense mechanisms.