Biometrics Archives - John Sileo, Cyber Security Training

Biometrics are Like Passwords You Leave EVERYWHERE

Biometrics are like passwords, but worse.

Biometrics are like passwords that you leave everywhere (fingerprints, facial recognition, voice patterns), except that unlike passwords, you can’t change them when they’re lost or stolen. It’s easy to change your password, a bit harder to get a new retina. Like passwords, risk goes up as they are stored globally (in the cloud) versus locally (on a physical device).

In addition to the biometrics mentioned above that most of us have come to accept as commonplace, there are many other methods in use or under exploration:

hand geometry
vascular pattern recognition (analyzing vein patterns)
iris scans
DNA
signature geometry (not just the look of the signature, but the pen pressure, signature speed, etc.)
gait analysis
heartbeat signatures

Identity Theft Statistics: Gallup Poll

According to a new Gallup poll of identity theft statistics, 66% of adults worry the most about their identities being stolen.

Gallup trends measuring Americans’ fear of being victims of specific crimes date back several decades, but for each of 10 crimes, the question has been updated annually on Gallup’s Crime survey since 2000. Terrorism was added to the list in 2001, and 2009 marks the first year identity theft has been included. Gallup says the reason for big worries about identity theft might have to do with the high-profile attention lawmakers and identity-protection firms have been placing on it.

Frequent/Occasional Worry About Various Types of Crime

Biometric Identity Theft: Stolen Fingerprints

Identity Theft is a huge and growing problem. According to the recent 2009 Identity Theft Fraud report by Javelin Strategy & Research, victims increased 22% in 2008 to 9.9 million. When businesses are involved, the companies face billions of dollars in theft, millions of dollars in fines and, perhaps most important, the loss of customer trust.

The large impact that identity theft has on individuals lives and corporations’ bottom lines has made inexpensive biometrics look attractive for authenticating employees, customers, citizens, students and any other people we want to recognize. The most recent debate is on whether the pros outweigh the cons. (To see some of the materials that influenced this article, please visit George Tillmann’s excellent article in Computerworld).

Biometrics uses physical characteristics, such as fingerprints, DNA, or retinal patterns to positively verify individuals. These biological identifiers are electronically converted to a string of ones and zeros and stored on file in the authenticator database.