...Biometrics and Privacy Strayer University SEC 305 Biometrics implements a process used to identify or authenticate an individual’s identity using a physical or behavioral characteristic. The goal is to provide access control at the logical and physical levels. An individual's voice, fingerprint, iris, and hand geometry are examples of physical characteristics. Behavioral characteristics could include signature or writing style. The implementation of a biometrics system requires coordination between the individual and the organization or business implementing the technology. During the enrollment process an individual provides a sample of a biometric: a fingerprint, an iris scan, voice recording, and so on. The sample, taken multiple times for the sake of accuracy, is averaged and stored within a database, token, or smartcard as a compressed digital representation of the sample. When a live sample of a biometric is presented to the system it is compared to the recorded information, or template, provided during the enrollment process and a match is determined to within an acceptable threshold value. This response determines an individual’s right to gain access to a privileged area, data, or just a PC. The advantage to a biometric is that it doesn’t change. It goes where you go, so it’s difficult to lose. It’s also very difficult to forge or fake. In some cases, it is next to impossible. It provides a very strong access control security...
Words: 738 - Pages: 3
...ACCESS CONTROL IN SUPPORT OF INFORMATION SYSTEMS SECURITY TECHNICAL IMPLEMENTATION GUIDE Version 2, Release 2 26 DECEMBER 2008 Developed by DISA for the DoD UNCLASSIFIED Access Control in Support of Information Systems STIG, V2R2 26 December 2008 DISA Field Security Operations Developed by DISA for the DoD This page is intentionally blank. ii UNCLASSIFIED Access Control in Support of Information Systems STIG, V2R2 26 December 2008 DISA Field Security Operations Developed by DISA for the DoD TABLE OF CONTENTS Page SUMMARY OF CHANGES...................................................................................................... IX 1. INTRODUCTION................................................................................................................. 1 1.1 1.2 1.3 1.4 1.5 1.6 1.7 2. Background ..................................................................................................................... 1 Authority ......................................................................................................................... 2 Scope............................................................................................................................... 3 Writing Conventions....................................................................................................... 3 Vulnerability Severity Code Definitions ........................................................................ 4 STIG Distribution .......
Words: 38488 - Pages: 154
...Evolution of Biometrics kody Saylor Computer security Keisha Nelson December 10, 2013 Biometrics is the use of individual’s physical or behavioral characteristics to uniquely identify them for authentication or identifications purposes. Types of biometrics include: fingerprints, hand geometry, retina and iris patterns, facial recognition, and signature, voice, and keystroke patterns. There has been an evolution between man and machine. Technology has grown in leaps and bounds and today, flesh and machine have been fused together as one. There have been many science fiction novels and movies of chip implantation representing quick identification to a mainframe. Biometric technology has taken the form of this fantasy and turned it into an immeasurable reality. There are potential benefits of an integrated biometrics-based identification system include but not limited to: * The cost of administration. * The reliability of identification. * Access to information held by organizations. * The accuracy and quality of research and statistics. * The level of technical security of communications. In America, there has been a huge debate over whether or not security is taking away our freedom. One instance of security verses freedom is about the recent legislation regarding driver’s licenses incorporating biometric technology. Biometrics is “the statistical study of biological phenomena” (American Heritage Dictionary) or more commonly known as “a technology...
Words: 1485 - Pages: 6
...An example of authentication most people are familiar with is their e-mail login. For instance, Gmail requires a person’s Gmail address and individual password to access his or her Gmail account. However, there are numerous types of authentication outside the common username and password. Furthermore, authentication is used in numerous areas of a system to re-verify a user’s identity when he or she is accessing a new area of the system, accessing encrypted data types, and securing the preservation of a system. This paper evaluates the different authentication types, their applications, and additional security measures for securing a system and its data. Types of Authentication According to Whitman and Mattford (2010), there are four types of authentication mechanisms, which are: * Something a person knows (passwords or passphrases) * Something a person has (such as cryptographic tokens or smartcards) * Something a person is (a fingerprint, retina or iris scan, or hand topography or geometry * Something a person produces (such as voice or pattern recognition) The level of access control associated with a system and the data contained on the system is determined by legislation (varies geographically) governing data, and control policies developed and implemented by the entity who owns or controls the data. Passwords and passphrases, or something a person knows, are potentially the most commonly recognized forms of authentication. Specific examples of password...
Words: 1415 - Pages: 6
...services become increasingly network-delivered and database-driven, the physical security market presents a compelling incremental growth opportunity for Cisco that we believe can exceed the billion dollar annual revenue threshold in the next 35 years. The physical security industry has been undergoing a paradigm shift toward convergence, whereby previously disjointed functions of IT security and physical security are experiencing greater formal cooperation. Organizations continue to implement more IP-based video surveillance cameras and building access controls both to upgrade capabilities and to reduce operational costs. Deploying IP-based security upgrades capabilities and reduces operational costs. Through the IP network a security system can assign priority to data and automatically discover new nodes such as IP cameras and control sensors, eliminating the time and effort of manual provisioning. Shifting building access controls from isolated networks to existing IP networks that house data, voice, and video can improve incident detection and assessment, authenticating both the user and device to provide efficient integrity checks. • Video Surveillance: The video surveillance market, which we estimate to be approximately $10 billion in size, should grow at a 10% CAGR over the next several years — a comparable growth profile to the similarly sized enterprise telephony market over the last decade. More than 20% of global video surveillance sales are now IP-based and this segment...
Words: 10724 - Pages: 43
...Biometric: Biometric means identification of humans by their characteristics of traits. There’re different types of biometric. It includes fingerprint, retina scanner, etc….. It is used to identify access control in computer science. It also very useful physiology. And also to study behavioral characteristics of a person. As it is very useful in various fields, such as medical science, computer science, banking, Immigration and so on, it becomes commercialized. Retina scanner is a technique named biometric that uses to identify the unique patterns on a person’s retina. The scan used by biometric technique can examine the pattern of blood vessels out the back of the eye. It can trace a standardized path on the retina and identify the pattern of variation that is converted to computer code and stored in a data base. For example, it is mostly used in World Trade Centre’s Server room and Immigration and Check –point data saving Centre. Where can we use simplest Biometric Scanner device… A biometric retina scanner is one of the simplest biometric scanner devices that you can use in your office. The need for retina scanning is rapidly increasing and you will find that many high class banks and corporations will actually use these retina scanner devices as a means of enhancing safety in the building. If you are looking for ways to keep your property safe, you may find that a biometric retina scanner is exactly what you need to increase the security and make it...
Words: 602 - Pages: 3
...BIOMETRICS SCANNING BY ADAM RUDDY AIU ONLINE 05 MAY 2012 Biometrics creates a digital copy of identifing markers in your finger prints, signature and voice commands. without these markes being detected the system will not open up or allow the user to access any information until they meet the security requirements. Biometrics uses a 348 byte sensory system to help store and generate the required sensory log needed to operate at full potential. Choosing to us biometrics you can rest assure that your security is to knotch because with biometrics you get protection agains fraud, fakes and even mistaken identitys. There has been zero breaches in the biomertics security in the hundreds of installations of over many years. Biometrics als o allows users to add a duress finger or signature that when enter will automaticaly contact the local authorities. To gain access to the system the user my place there finger on the sensor until instructed to remove it. If they are usi ng the signature biometrics security system then they have t o sign on the line and wait for verification. Finger fraud protection delivers percise, prorietary finger print recognition information that does not allow the use of fake fingers or fingers with distortion or obstructions. The finger scanner identifys several distinctive areas in t he finger that are not likely to change given general day t o day operations. By identifing somany markers if there ever was a time where someone might have had an...
Words: 665 - Pages: 3
...for the Course in Project Procurement Your College 2011 Letter of Transmittal This research report was submitted by Your Nam and Your Nams under the direction of the instructor listed below. It was submitted to Your College and approved in partial fulfillment of the requirements for the course in Project Procurement. ______________________________________ _______________________________ Date Course Instructor Abstract Assessment of the Opportunity to Introduce Fingerprint Scanning Identification Technology at Associated Bank. Your Nam, , A. 2011: Research Proposal, Your College, Project Procurement. Key Terms: access control, biometrics, convenience sampling, customer perceptions, fingerprint identification, in-house research, long-term customer, quantitative research, quota sampling, respondent, security. This research was designed to study the acceptance of fingerprint scanning technology among customers and employees. This project addressed the need for fingerprint scanning technology at Associated Bank to reduce the need for photo identification when receiving cash back at the end of a transaction. The purpose of the study was to determine the level of acceptance of the fingerprint identification technology at Associated Bank by both customers and employees. The following objective was offered: compare the acceptance of fingerprint scanning technology...
Words: 4138 - Pages: 17
...Axia College Material Appendix B Information Security Policy Student Name: Brice Washington Axia College IT/244 Intro to IT Security Instructor’s Name: Professor Smith Date: 11/7/2011 Table of Contents 1. Executive Summary 1 2. Introduction 1 3. Disaster Recovery Plan 1 3.1. Key elements of the Disaster Recovery Plan 1 3.2. Disaster Recovery Test Plan 1 4. Physical Security Policy 1 4.1. Security of the facilities 1 4.1.1. Physical entry controls 1 4.1.2. Security offices, rooms and facilities 1 4.1.3. Isolated delivery and loading areas 2 4.2. Security of the information systems 2 4.2.1. Workplace protection 2 4.2.2. Unused ports and cabling 2 4.2.3. Network/server equipment 2 4.2.4. Equipment maintenance 2 4.2.5. Security of laptops/roaming equipment 2 5. Access Control Policy 2 6. Network Security Policy 3 7. References 3 Executive Summary Due in Week Nine: Write 3 to 4 paragraphs giving a bottom-line summary of the specific measureable goals and objectives of the security plan, which can be implemented to define optimal security architecture for the selected business scenario. With advancements in technology there is a need to constantly protect one’s investments and assets. This is true for any aspect of life. Bloom Design is growing and with that growth we must always be sure to stay on top of protecting ourselves...
Words: 4226 - Pages: 17
...Remote Access Control Policy Definition The following are types of Remote Access Control Policy I would like to put into place to make sure our company’s data is secure. We need to get the right security measures so the correct people can have access to the data they need to do their job. I would start by setting up a Remote Authentication Dial-In User Service (RADIUS), a VPN, Firewall, Local Biometrics, RSA – F.O.B. by using a security key carried by the employee or set it up on the local server. I would start in the Main office that is located in Phoenix, AZ by install a RADUIS, this is a client/server protocol that runs in the application layer and will connect all the employee and visitor to the server. In the main office, we need to set up a database with all username and passwords for the employees’. At all the satellite facilities, we need to set up the proper VPN, Firewall protection as well as setting up some type of biometric logon system or a random number generator where a user will be given a security key and they will need to input that when they log on to the system. We need to set up the password system to reset every 3 months and set up a password remembrance. For the mobile devices that the sales department will need, I would suggest to encrypt the local hard drives if stolen and set up biometric thumb scanner as well as a security key require to log on to their...
Words: 266 - Pages: 2
...Richman Investments | Richman Internet Infrastructure Security Management Upgrade | ITT Technical Institute NT2580 Course Project | | Jason R Spitler | 5/30/2014 | Based on the premises that Richman has 5000 employees throughout the main office and several branch offices, this document dictates research solutions and details the appropriate access controls including policies, standards, and procedures that define who users are, what they can do, which resources they can access, and which operations they can perform on a system. | Final Project I. Richman Internet Infrastructure Security Management Upgrade A. Purpose Based on the premises that Richman has 5000 employees throughout the main office and several branch offices, this document dictates research solutions and details the appropriate access controls including policies, standards, and procedures that define who users are, what they can do, which resources they can access, and which operations they can perform on a system. II. Basic Authentication Procedures and Standards, (Who users are.) A. Trinity-Three-factor Authentication Method replaces Basic Authentication It is my view the Administrator’s responsibility is to provide secure communications by adding layers of security at all levels to assure the amount of protection for company’s valuable assets. Richman will provide its employees a new method of authentication I call Trinity. It is a three-factor authentication method requiring updated laptops...
Words: 1901 - Pages: 8
...parts I will have to take into account while designing a Remote Access Control Policy for Richman Investments. These three parts (Identification, Authentication and Authorization) will not be all for the Remote Access Control Policy, I will need to include the appropriate access controls for systems, applications and data access. I will also need to include my justification for using the selected access controls for systems, applications and data access. The first part I need to implement for this Remote Access Control Policy is Identification, which is defined in this sense as: physical keys or cards, smart cards, and other physical devices that might be used to gain access to something. What needs to be done for the Remote Access Control Policy is a group member policy needs to be setup which uniquely identifies each user. Users should be identified by rank with higher ranking users requiring more authentications. Each individual user should be assigned to a group based on rank with special permissions. Using this system for Identification will make our company more secure in day to day operations. The second part I need to implement for this remote access control policy is Authentication, which is defined as: what you know or passwords, numeric keys, PIN numbers, secret questions and answers. For remote access, there must be proof that the person is who they say they are every time they attempt to access a workstation with a retry limit. This is to help thwart any hacking...
Words: 364 - Pages: 2
...“Biometric attendance in the workplace is a threat to privacy”. How far do you agree? (30 marks) Ref - http://www.biometrics.org/html/introduction.html Biometrics are automated methods of recognizing a person based on a physiological or behavioral characteristic. Among the features measured are; face, fingerprints, hand geometry, handwriting, iris, retinal, vein, and voice. Biometric technologies are becoming the foundation of an extensive array of highly secure identification and personal verification solutions. As the level of security breaches and transaction fraud increases, the need for highly secure identification and personal verification technologies is becoming apparent. Biometric-based solutions are able to provide for confidential financial transactions and personal data privacy. The need for biometrics can be found in federal, state and local governments, in the military, and in commercial applications. Enterprise-wide network security infrastructures, government IDs, secure electronic banking, investing and other financial transactions, retail sales, law enforcement, and health and social services are already benefiting from these technologies. Biometric-based authentication applications include workstation, network, and domain access, single sign-on, application logon, data protection, remote access to resources, transaction security and Web security. Trust in these electronic transactions is essential to the healthy growth of the global economy...
Words: 665 - Pages: 3
...F Access Control Policy Student Name: Charles Williams University of Phoenix IT/244 Intro to IT Security Instructor’s Name: Tarik Lles Date: December 4, 2011 Access Control Policy Due in Week Seven: Outline the Access Control Policy. Describe how access control methodologies work to secure information systems Access control is used to restrict operations, which authorized users can perform. Access control does exactly what it says, it controls what access an authorized user can have. A reference monitor is used for access control and follows instructions from an authorization database. These authorizations are controlled and administered by a security administrator who sets the access controls based on the companies’ security policies, which are defined by the organization. The decision of which access controls to use would be based on the organizational policy and two accepted standards of practice, which includes separation of duties and least privilege (Kurzban, 2011). 1 Authentication Describe how and why authentication credentials are used to identify and control access to files, screens, and systems. Include a discussion of the principles of authentication such as passwords, multifactor authentication, biometrics, and single-sign-on. Today, when using a computer system, a number of computer services are provided to many users simultaneously, so it is important to ensure that authorized users will be granted access to the...
Words: 1663 - Pages: 7
...the outer and middle layers of the system, also known as the perimeter and external layer. Controls found within this layer include windows, protective lighting, intrusion detection systems, signs, barriers, locks, access control, and surveillance, all of which protect organizational assets (ASIS International, 2008). The value of the assets protected will determine the internal security protection required. An organization’s security plan will primarily address their perimeter security, external security, and access control. During this process internal security is often not addressed and no security measures are put into place (Curtis & McBride, 2011). To ensure an organization has a comprehensive security plan they must implement protective measures into their internal security plan. These protective measures include access requirements, reinforced walls and doors, biometric locks, safes and vaults, closed circuit television, and intrusion detection systems (ASIS International, 2008). Access/Entry Control and Recommendations Access control, just like any other security layer, is an important function of any security plan. It is also important to any business, especially those in the design, development, and construction phases. Access control is part of the detection and delay functions found within the physical protection systems (PPS). The object of access and entry control as describe by Garcia (2008) is to permit authorized personnel to enter and exit, detect and...
Words: 1788 - Pages: 8
