Risk
8/28/2013
01:35 PM
Dark Reading
Dark Reading
Slideshows
Connect Directly
RSS
E-Mail
50%
50%

Iris Scans: Security Technology In Action

Iris-based security scans are the stuff of sci-fi movies, but NIST research shows how the technology can now be used in the real world to reliably identify individuals.
Previous
1 of 6
Next


Sci-fi films routinely lead viewers to believe that scanning an individual's iris is a proven way to identify them, but in practice, the results haven't always been 100% dependable. One of the most significant challenges isn't the technology, but how slight changes in the structure of the iris can throw off calculations used in comparing images of the human eye.

The long-term stability of the iris' distinguishing characteristics, critical for biometric identification, had come under question when a recent study of several hundred subjects found that iris recognition becomes increasingly difficult over a period of three years, consistent with an aging effect.

The latest in an ongoing series of studies of iris recognition for biometric identification, however, refutes that. Scientists at the National Institute of Standards and Technology (NIST) have found that the unique characteristics of the iris in the average person do not change for at least nine years. The results of the study, conducted by researchers in NIST's Information Access division, suggest that iris recognition of average individuals will remain viable for decades. They also imply that identity program managers may not need to recapture iris images as frequently, which factors into the total overall cost of maintaining iris recognition systems.

The new study by NIST researchers used two large operational data sets, including one of nearly 8,000 recurrent travelers across the Canadian-American border, involving millions of images. The travelers, like the woman pictured here in a photograph supplied by the Canadian Border Services Agency, use an iris identification system to confirm the individuals' identity. The system is part of a joint Canadian and American program to help people move quickly across the border. The study examined images that had been captured at least four years and up to nine years previously. NIST researchers found no evidence of a widespread aging effect.

NIST has been working with a variety of organizations to help improve the use of iris recognition systems. In that vein, it established the Iris Exchange program in 2008. The program has sought to establish standards for iris recognition, as well as the development and deployment of systems used to capture and identify iris images. Sponsors of the program include the FBI's Criminal Justice Information System Division and the Office of Biometric Identity Management in the Department of Homeland Security.

Previous
1 of 6
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
WKash
50%
50%
WKash,
User Rank: Apprentice
9/3/2013 | 5:27:27 PM
re: Iris Scans: Security Technology In Action
The Canadian Border Services Agency and DHS deserve credit for putting iris recognition systems to the test in the field and sharing the data on how reliable the systems are.
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-4013
Published: 2014-07-14
SQL injection vulnerability in the Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

CVE-2014-4944
Published: 2014-07-14
Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) categoryid or (2) pdfid parameter to wp-admin/admin.php.

CVE-2014-4945
Published: 2014-07-14
Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote attackers to inject arbitrary web script or HTML via an unspecified flag in the basic (1) mailbox or (2) message view.

CVE-2014-4946
Published: 2014-07-14
Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote attackers to inject arbitrary web script or HTML via (1) unspecified flags or (2) a mailbox name in the dynamic mailbox view.

CVE-2013-6117
Published: 2014-07-11
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Marilyn Cohodas and her guests look at the evolving nature of the relationship between CIO and CSO.