The document discusses various topics related to biometrics including: 1. Biometrics can be used for physical access control, ATM access, and authenticating transactions over the telephone or from home computers. Fingerprints, iris scans, and facial recognition are some common biometric technologies used. 2. Early biometrics systems from the 1880s involved precise body measurements and physical descriptions but failed by 1903. Modern biometrics use automated methods to recognize individuals based on physiological or behavioral characteristics. 3. Biometrics are part of identity management and can help with security, national security threats, accountability, and optimizing resources. However, biometrics also have limitations like environmental factors affecting performance.

1. E-Security Gulf Group WLL [email_address] Jorge Sebastiao, CISSP CEO Kuwait E-Crime Pragmatic Biometrics

8. Biometrics 2D Biometrics (CCD,IR, Laser, Scanner) 1D Biometrics

9. How: Physiological

10. How: Behavioral

14. Identification vs. Authentication Identification Authentication Determine identity of the person Determines if person is indeed who he claims to be No identity claim M-1 mapping. Cost of computation  #records of users. Identity claim from the user 1-1 mapping. The cost of computation independent of #records Captured biometric signatures from a set of known biometric feature stored in the system Captured biometric signatures may be unknown to the system

16. Part of Identity Mgmt Drivers Business Process (Track Personnel & Assets) National Security Threats (Deter, Prevent) Resource Optimization ($$$, Manpower) Applications Logical Access Physical Access Accountability Foundation Identity Authentication (Vetting and Fixing Identity)

18. Biometric Process Enrollment stage Identification stage Biometric Present Sensor Signal Process Reject Accept Sensor Biometric Present Storage Decision Signal Process

19. Authentication

20. Matching – Probabilistic

21. Biometrics Technologies

22. Biometrics need Tuning False non-matches False matches

23. Biometrics Performance Tests

25. Sample Biometric Attacks

26. Matsumoto Attack-1

27. Matsumoto Attack-2

30. Biometrics-enabled Authentication Applications

36. Part of Security Controls ASSESS ARCHITECT APPLY ADMINISTER Business Risk Controls Maturity

37. Implementation Requires: TPP Technology Process People

38. Always POC+Pilot Implementation

39. ?