About

This page contains a single entry from the blog posted on August 9, 2007 11:19 AM.

The previous post in this blog was Why more authentication may be harmful to banks.

The next post in this blog is Identity, Security and Business Risk.

Many more can be found on the main index page or by looking through the archives.

« Why more authentication may be harmful to banks | Main | Identity, Security and Business Risk »

Hacking a biometric authentication system

eWeek has a very interesting slide show "The Security of Biometrics: Two Screws and a Plastic Cover" which I strongly recommending viewing. The slide show shows, step by step, how to hack a biometric system.

One of the weak spots in many biometric systems is the use of Wiegand protocol. As the slide show says "The Wiegand protocol is, Franken said, a) in plain text, b) easily intercepted, c) easily replayed, d) includes output from biometric readers, and e) includes output from even strong crypto contactless smart card readers. This means the output, including all data pertaining to a card holder, can be captured on a hacked system."

Security is only as strong as the weakest link.

Guy
www.authenticationworld.com
guy.huntington@authenticationworld.com

TrackBack

TrackBack URL for this entry:
http://www.authenticationworld.com/cgi-bin/blog/mt-tb.cgi/262

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)