Fingerprint Readers: Vulnerabilities to Front- and Back- end Attacks

Fingerprints, one of the most common biometrics used for security today, face unique challenges for acceptance, not the least of which is the threat of permanent identity theft. The concept of stealing fingerprints for replay attacks is a popular one and has been validated as a realistic vulnerability. The technology used for sensors and fingerprint processing has matured but vulnerabilities still persist as described in this paper. Matsumoto's 80% success rate for replay attacks may not be as achievable today but his methodology can still bypass modern fingerprint sensor technology. Additionally, the ever-present risk of insecure software poses just as much of a risk. This paper addresses the maturity of modern fingerprint sensors and their resilience to both front-and back-end biometric attacks.