查看文章

Biometrics is a rapidly developing branch of information technology. Biometric technologies are automated methods and means for identification based on biological and behavioral characteristics of an individual. There are several advantages of biometric technologies compared to traditional identification methods. To take adequate measures against increasing security risks in modern world, countries are considering these advantages and are shifting to new generation identification systems based on biometric technologies. Biometric systems are becoming an important element (gateway) for information security systems. Therefore biometric systems themselves have to satisfy high security requirements. Unfortunately producers of biometric technologies do not always consider security precautions. In publications regarding biometric technologies, drawbacks and weaknesses of these technologies have been discussed. Since biometrics form the technology basis for large scale and very sensitive identification systems (eg passports, identification cards), the problem of adequate evaluation of the security of biometric technologies is a current issue. Based on an analysis of the literature, systematic research on the analysis of the security of these technologies has emerged in last three years. This work proposes an approach for analysis of security vulnerabilities of biometric systems. The proposed approach tries the best to consider the requirements of AVA class (Assurance Vulnerability Assessment) of ISO/IEC 15408-3 and its subclasses AVA_SOF (Strength of Function) and AVA_VLA (Vulnerability Analysis). Since there are different ideas in the …