Europol warns of risks from biometric identification systems

Biometric identification technology, including fingerprint scanning, facial, iris and voice recognition, is becoming an essential part of modern identity authentication systems.

With the ability to provide a fast, convenient, and difficult-to-forge method of personal verification, biometrics are increasingly used to protect electronic devices, online accounts, and even financial transactions.

Thanks to the uniqueness and stability of biological features such as fingerprints or faces, this technology is often considered a stronger layer of security than traditional passwords.

However, along with those benefits, biometrics also poses many worrying risks. Europol recently published an in-depth report warning about the security threats associated with this technology.

The report points out that biometric identification systems can be exploited by cybercriminals through sophisticated techniques such as impersonating legitimate users or evading detection by security systems.

One of the notable attack methods is the presentation attack which is on the rise.

This is a form of attack on biometric identification system, in which the attacker presents (displays) a fake biometric characteristic such as fake fingerprint, face mask, voice recording to fool the system and impersonate the legitimate user.

For example, fingerprints can be copied using silicone molds that mimic the surface of human skin. Even digital copies of fingerprints can be printed in 2D, 2.5D or 3D thanks to the development of printing technology and digital modeling.

Not only that, facial recognition systems can be fooled by sophisticated silicone masks, specialized makeup, or even real-time face editing software and deepfake technology, which has been used to create extremely difficult-to-distinguish fake voices or images.

“The misuse of biometric technology demands a response from law enforcement agencies. We need to ensure we remain at the forefront of the fight against crime and maintain the resilience of our security systems,” said Catherine De Bolle, executive director of Europol.

To proactively respond to these risks, Europol calls on law enforcement agencies to increase cooperation with technology experts to analyze, predict and prevent new forms of attacks that may occur.

Investing in training, awareness, threat monitoring, and developing effective countermeasures is essential. In addition, monitoring of biometric-related security incidents is also needed to promptly alert and adjust the system.

The Europol report also highlights the important role of biometric tracking in criminal investigations, from data extraction to suspect profiling.

“This information allows investigators to accurately assess any identity establishment and access management data they encounter during an investigation,” the report said.

Clearly, while biometrics offers many breakthroughs in security and identity verification, ensuring the safety and protection of systems against attacks is becoming a top priority for authorities around the world.