Biometric Insecurity

Roger Clarke

Principal, Xamax Consultancy Pty Ltd, Canberra

Visiting Professor, Baker & McKenzie Cyberspace Law & Policy Centre, University of N.S.W.

Visiting Professor, E-Commerce Programme, University of Hong Kong

Visiting Fellow, Department of Computer Science, Australian National University

This Abstract and Slide-Set were prepared for an invited presentation to the AusCERT Conference, Gold Coast, 24 May 2004

Version of 14 May 2004

© Xamax Consultancy Pty Ltd, 2004

This document is at http://www.anu.edu.au/people/Roger.Clarke/DV/AusCERT0405.html

Abstract

Years later, the 11-September-2001 hysteria continues to warp discussions about, and implementations of, security measures. A great deal of activity has been, and remains, misguided, ill-judged, illogical and politically-motivated - in short, deeply unprofessional.

This paper examines one of the worst examples of this pervading unprofessionalism: the enthusiasm for and deployment of biometric technologies that don't work in applications that they're unsuited for. The ongoing manic state of national security agencies has enabled marketers to sell snake-oil with more fervour and less restraint than ever before. Government buyers have suspended their disbelief in ways that are fine in the theatre, but are seriously dangerous to security.

The use of 'biometrics' as a mantra has deflected attention and investment away from security measures that could be effective, in favour of placebos. Biometrics do not, and cannot, deliver security. We are suffering from biometric insecurity.

Supporting Resources

The following PowerPoint slide-sets are available:

• the set for presentation at the AusCERT conference on 24 May 2004
• the full slide-set, as at May 2004
• a set used at the Uni. of Hong Kong in May 2002
• a set used at the Computers, Freedom & Privacy Conference in San Francisco in April 2002

An index is provided to my papers on biometrics topics.

A substantial bibliography is also available.

Navigation

Go to Roger's Home Page.

Go to the contents-page for this segment.

Send an email to Roger

Created: 6 May 2004

Last Amended: 14 May 2004

These community service pages are a joint offering of the Australian National University (which provides the infrastructure), and Roger Clarke (who provides the content).