This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links

Version management

Difference between version and

At line 1 added 25 lines
!!! Overview
[{$pagename}] ([SOFA-B]) includes variables for:
* [False Match Rate] ([FMR])
* [False Non-Match Rate] ([FNMR])
* [Presentation Attack Detection Error Rate] ([PADER])
* [Effort|Attack Effort] required to perform the [attack].
[{$pagename}] attempts to provide a starting point for the overall [Strength of Function for Authenticators] [framework] by identifying the ways in which [biometric] [authenticator] strength can be measured and evaluated. It focuses on three core concepts: False Match Rate, Presentation Attack Detection Error Rate, and Effort .
!! Match Rate Interdependence
[False Match Rate] ([FMR]) and [False Non-Match Rate] ([FNMR]) are interdependent: adjusting the [biometric] system to decrease one of these rates will increase the other.
When two [biometric] samples are compared, a [biometric] system will generate a similarity score. For example, a range of similarity scores may be 1 (for low similarity) to 100 (an exact match). The [binary] match or non-match decision is made based on where this score falls with respect to a decision threshold:
* a value above the threshold is considered a match
* a value below the threshold is considered a non-match.
Setting this threshold is a [Risk Assessment] decision because it results in errors, as some number of true match scores will fall below the threshold, while some true non-matches will fall above it. Changing the decision threshold to a higher value will decrease false matches, but it will also increase false non-matches. In other words, the [False Match Rates] and [False Non-Match Rates] are interdependent: adjusting the [biometric] system to decrease one of these rates will increase the other.
[{$pagename}] for [Opportunistic Attacks], the statistic that is of interest is the [False Match Rates] because it is a measure of the [degree of difficulty|Attack Effort] to find an [imposter] that randomly matches a legitimate [user]. [False Non-Match Rates] is a measure of [User Experience], signifying how often a legitimate user will be rejected. However, when [False Match Rate] is measured, it is necessarily measured at an [False Non-Match Rates] level because the two statistics are interdependent.
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [Strength of Function for Authenticators|https://pages.nist.gov/SOFA/ |target='_blank'] - based on information obtained 2017-12-12-
* [#2] - [Biometrics & Password - FA, FR & Threshold|https://www.slideshare.net/HitoshiKokumai/biometrics-password-fa-fr-threshold|target='_blank'] - based on information obtained 2017-12-13-