eCrime security conference Kuwait organized by EEMC. Jorge Sebastiao presented practical biometrics.

1. E-Security Gulf Group WLL [email_address] Jorge Sebastiao, CISSP CEO Kuwait E-Crime Pragmatic Biometrics

8. Biometrics 2D Biometrics (CCD,IR, Laser, Scanner) 1D Biometrics

9. How: Physiological

10. How: Behavioral

14. Identification vs. Authentication Identification Authentication Determine identity of the person Determines if person is indeed who he claims to be No identity claim M-1 mapping. Cost of computation  #records of users. Identity claim from the user 1-1 mapping. The cost of computation independent of #records Captured biometric signatures from a set of known biometric feature stored in the system Captured biometric signatures may be unknown to the system

16. Part of Identity Mgmt Drivers Business Process (Track Personnel & Assets) National Security Threats (Deter, Prevent) Resource Optimization ($$$, Manpower) Applications Logical Access Physical Access Accountability Foundation Identity Authentication (Vetting and Fixing Identity)

18. Biometric Process Enrollment stage Identification stage Biometric Present Sensor Signal Process Reject Accept Sensor Biometric Present Storage Decision Signal Process

19. Authentication

20. Matching – Probabilistic

21. Biometrics Technologies

22. Biometrics need Tuning False non-matches False matches

23. Biometrics Performance Tests

25. Sample Biometric Attacks

26. Matsumoto Attack-1

27. Matsumoto Attack-2

30. Biometrics-enabled Authentication Applications

36. Part of Security Controls ASSESS ARCHITECT APPLY ADMINISTER Business Risk Controls Maturity

37. Implementation Requires: TPP Technology Process People

38. Always POC+Pilot Implementation

39. ?