Biometrics
Ingneium offers a range of biometric testing services including for performance, bias, presentation attack detection and injection attack detection testing
Biometric testing refers to the assessment and measurement of systems that evaluate the unique physical or behavioural characteristics of an individual for the purpose of identification or authentication
Security testing
- Biometric security testing helps organisations and technology developers ensure their biometric solutions are robust and resistant to potential threats. This testing involves two primary methods: presentation attack detection (PAD) and injection attack testing.
- A presentation attack is a deliberate attempt to mimic another person’s biometric characteristic at the sensor itself. For example, an attacker might use a photograph to fool a facial recognition system or a fabricated fingerprint to deceive a fingerprint scanner. PAD testing evaluates how well the biometric system can detect and reject these fraudulent attempts.
- Injection attack testing involves bypassing the biometric sensor entirely. Instead of presenting a fake biometric to the sensor, an attacker attempts to inject forged biometric data directly into the system’s data stream, tricking the system into thinking a legitimate biometric has been captured. This tests the system’s resilience against threats that don’t rely on physical access to the sensor.
Performance testing
- Biometric performance testing helps organisations and technology developers ensure that their biometric solutions are accurate, reliable and fit for purpose
- The evaluation of system performance and the assessment of overall system reliability are important to biometric systems to make sure that they meet the requirements of the use case and application in which they are being implemented
- Performance testing can also help uncover bias and ensure a system is equitable across all demographics
Types of testing projects
Standardised testing
National Protective Security Authority (NPSA)
- Biometric-enabled physical access control for critical national infrastructure
FIDO Alliance
- Biometric component and remote digital identity onboarding testing
MOSIP
- Testing of biometric and enrolment products for identity schemes
Ingenium's testing framework
Presentation attack detection testing
- A range of comprehensive presentation attack detection (PAD) testing services, designed to rigorously assess the security of biometric systems
Our Approach to Injection Attack Detection
- Ingenium provides a tiered suite of biometric data injection attack testing programs, with five distinct levels to meet a variety of security needs.
Ingenium performance testing
- A standardised testing service, designed to rigorously assess the performance of biometric systems
- Test program can include demographic differential or bias-focussed evaluation
Ingenium quality testing
- Standardised testing service, designed to evaluate biometric systems input variables
Research and development
We work with customers to research and develop new and novel attacks, update and modify existing attacks to work in new ways against new applications, and exercise the security features of biometric systems to demonstrate the systems strengths and weaknesses within the market.
