Security and Accuracy of Fingerprint-Based Biometrics: A Review <s> Number <s> In recent years there has been exponential growth in the use of biometrics for user authentication applications because biometrics-based authentication offers several advantages over knowledge and possession-based methods such as password/PIN-based systems. However, it is important that biometrics-based authentication systems be designed to withstand different sources of attacks on the system when employed in security-critical applications. This is even more important for unattended remote applications such as e-commerce. In this paper we outline the potential security holes in a biometrics-based authentication scheme, quantify the numerical strength of one method of fingerprint matching, then discuss how to combat some of the remaining weaknesses. <s> BIB001 </s> Security and Accuracy of Fingerprint-Based Biometrics: A Review <s> Number <s> Biometric recognition offers a reliable solution to the problem of user authentication in identity management systems. With the widespread deployment of biometric systems in various applications, there are increasing concerns about the security and privacy of biometric technology. Public acceptance of biometrics technology will depend on the ability of system designers to demonstrate that these systems are robust, have low error rates, and are tamper proof. We present a high-level categorization of the various vulnerabilities of a biometric system and discuss countermeasures that have been proposed to address these vulnerabilities. In particular, we focus on biometric template security which is an important issue because, unlike passwords and tokens, compromised biometric templates cannot be revoked and reissued. Protecting the template is a challenging task due to intrauser variability in the acquired biometric traits. We present an overview of various biometric template protection schemes and discuss their advantages and limitations in terms of security, revocability, and impact on matching accuracy. A template protection scheme with provable security and acceptable recognition performance has thus far remained elusive. Development of such a scheme is crucial as biometric systems are beginning to proliferate into the core physical and information infrastructure of our society. <s> BIB002 </s> Security and Accuracy of Fingerprint-Based Biometrics: A Review <s> Number <s> The goal of this chapter is then to present a privacy and security-based assessment methodology to be used to evaluate and compare biometric systems. <s> BIB003
Attacks Attack Points 1 Spoofing-present fake biometric data to sensor 1 2 Exploit similarity, e.g., using face from identical twins 1 3 Zero-effort attempt-attacker uses own biometric sample to impersonate an authorized user 1 Figure 2 . Eight possible attack points to a typical biometric authentication system (adapted from BIB001 ). Here, threats and security issues related to those attack points in different stages of a generic biometric system are listed in Table 1 . In light of the two major concerns mentioned above, in this paper we focus on the investigation of Attacks 1 and 11 (in Table 1 ) from attack categories a and d (labeled by the red circles in Figure 2 ), since they represent the most serious and critical threats to users' security and privacy BIB002 . Table 1 . Threats and security issues related to attack points of a generic biometric system (adapted from BIB003 Alter the information transmitted through a communication channel in order to deny genuine users to access the system 7