The recognition process of all types of biometrics relies on the probabilistic judgment of variable physical and / or behavioral features of human beings. However, an authentication system requires the recognition result from authenticating the right person deterministically. But, biometrics recognition is inherently probabilistic and hence unreliable. Biometrics recognition can not yield a deterministic "yes/no" result as text passwords/PINs. Thus, biometrics can lower security.
Hello,
That's interesting. While biometrics lower security to some extent due to its probabilistic nature it can still be a valuable (and convenient) component of a robust security system when used in conjunction with other authentication methods. So, it's a risk assessment issue and whether risks are understood and appropriate security controls are implemented.
Thank you
Biometrics can actually enhance security by providing an additional layer of authentication. While biometric recognition is probabilistic, meaning that there is a small chance of false positives or false negatives, it is still a highly accurate form of identification. When used in conjunction with other forms of authentication, such as passwords or PINs, biometrics can greatly increase the security of a system. Additionally, biometric data is unique to each individual and cannot be easily replicated or stolen, making it a secure method of identification.
I don't think it that it lowers security, as despite certain traits in the biometrics being repetitive, repetition of a combination of traits, that are unique to an individual with access privileges for example, are being increasingly rare, for example, if we would be looking at a match of n bio metrical traits, we would have to scan 4^n finger prints. Now of course all this is based on ridgeology and is slightly different when different means of biometrical identification are used, but the gist remains the same.
I appreciate the valuable time you spent writing your thoughtful answers.
Rachid Ait Maalem Lahcen, You mentioned it correctly: "and convenient."
Yashar Salami, You mentioned correctly: "false positives or false negatives."
Indeed, biometrics is not a fallacy; biometrics bear recognizable features of human beings.
Biometrics has so many security-lowering features!
A probabilistic recognition process can NOT be used to yield a deterministic "yes/no" result like a text password/PIN.
Moreover, biometrics spoofs are so easy to make.
How can biometrics improve security?
With more than a decade of hands-on research with different biometrics modalities, I realized biometrics is convenient, but biometrics can lower security. Biometrics has inherent security-lowering problems!
Please read my brief review article, "Biometrics is Not a Fallacy, But Can Lower Security." https://www.linkedin.com/pulse/biometrics-fallacy-can-lower-security-debesh-choudhury-phd/
Thank you so much.
- Badges
- Science topic
- Similar topics
- Psychology