Towards more secure biometric readers for effective digital forensic investigation

Zouheir Trabelsi, Mohamed Al-Hemairy, Ibrahim Baggili, Saad Amin

    Research output: Chapter in Book/Report/Conference proceedingConference contribution

    Abstract

    This paper investigates the effect of common network attacks on the performance, and security of several biometric readers. Experiments are conducted using Denial of Service attacks (DoSs) and the ARP cache poisoning attack. The experiments show that the tested biometric readers are vulnerable to DoS attacks, and their recognition performance is significantly affected after launching the attacks. However, the experiments show that the tested biometric readers are secure from the ARP cache poisoning attack. This work demonstrates that biometric readers are easy targets for malicious network users, lack basic security mechanisms, and are vulnerable to common attacks. The confidentiality, and integrity of the log files in the biometric readers, could be compromised with such attacks. It then becomes important to study these attacks in order to find flags that could aid in a network forensic investigation of a biometric device.

    Original languageEnglish
    Title of host publicationDigital Forensics and Cyber Crime - Second International Conference, ICDF2C 2010
    Pages65-77
    Number of pages13
    DOIs
    Publication statusPublished - Dec 1 2011
    Event2nd International Conference on Digital Forensics and Cyber Crime, ICDF2C 2010 - Abu Dhabi, United Arab Emirates
    Duration: Oct 4 2010Oct 6 2010

    Publication series

    NameLecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST
    Volume53
    ISSN (Print)1867-8211

    Other

    Other2nd International Conference on Digital Forensics and Cyber Crime, ICDF2C 2010
    Country/TerritoryUnited Arab Emirates
    CityAbu Dhabi
    Period10/4/1010/6/10

    Keywords

    • Biometrics scanners
    • Denial of service attack (DoS)
    • Fingerprint reader
    • Firewall
    • Forensic investigation
    • Intrusion detection/prevention systems (IDS/IPS)
    • Iris reader

    ASJC Scopus subject areas

    • Computer Networks and Communications

    Fingerprint

    Dive into the research topics of 'Towards more secure biometric readers for effective digital forensic investigation'. Together they form a unique fingerprint.

    Cite this