Alpha-wolves and Alpha-mammals: Exploring Dictionary Attacks on Iris Recognition Systems
Abstract: A dictionary attack in a biometric system entails the use of a small number of strategically generated images or templates to successfully match with a large number of identities, thereby compromising security. We focus on dictionary attacks at the template level, specifically the IrisCodes used in iris recognition systems. We present an hitherto unknown vulnerability wherein we mix IrisCodes using simple bitwise operators to generate alpha-mixtures - alpha-wolves (combining a set of "wolf" samples) and alpha-mammals (combining a set of users selected via search optimization) that increase false matches. We evaluate this vulnerability using the IITD, CASIA-IrisV4-Thousand and Synthetic datasets, and observe that an alpha-wolf (from two wolves) can match upto 71 identities @FMR=0.001%, while an alpha-mammal (from two identities) can match upto 133 other identities @FMR=0.01% on the IITD dataset.
- CASIA Iris V4 Database. https://hycasia.github.io/dataset/casia-irisv4/. [Online accessed May 2023].
- IIT Delhi Iris Database. https://www4.comp.polyu.edu.hk/~csajaykr/IITD/Database_Iris.htm. [Online accessed Jan 2023].
- pix2pix tensorflow implementation. https://github.com/affinelayer/pix2pix-tensorflow. [Online accessed June 2023].
- UIDAI AADHAR Program. https://uidai.gov.in/en/ecosystem/authentication-devices-documents/biometric-devices.html. [Online accessed August 2023].
- Deepmasterprints: Generating masterprints for dictionary attacks via latent variable evolution. In IEEE 9th International Conference on Biometrics Theory, Applications and Systems (BTAS), pages 1–9, 2018.
- An iris image synthesis method based on pca and super-resolution. volume 4, pages 471– 474, 09 2004.
- John Daugman. How iris recognition works. IEEE Transactions on Circuits and Systems for Video Technology, 14(1):21–30, 2004.
- John Daugman. Iris Recognition at Airports and Border-Crossings, pages 819–825. Springer US, Boston, MA, 2009.
- John Daugman. Information theory and the iriscode. IEEE Transactions on Information Forensics and Security, 11(2):400–409, 2016.
- Image quality assessment: Unifying structure and texture similarity. IEEE Transactions on Pattern Analysis and Machine Intelligence, 44(5):2567–2581, 2022.
- SHEEP, GOATS, LAMBS and WOLVES A Statistical Analysis of Speaker Performance in the NIST 1998 Speaker Recognition Evaluation. 5th International Conference on Spoken Language Processing (ICSLP), 1998.
- Gizem Erdogan. Contact Lenses in Iris Recognition - MS Thesis. Technical report, West Virginia University, 2013.
- The best bits in an iris code. IEEE Transactions on Pattern Analysis and Machine Intelligence, 31(6):964–973, 2009.
- Image-to-Image Translation with Conditional Adversarial Networks. Proc. of Computer Vision and Pattern Recongition, 2017.
- Introduction to Biometrics. Springer Publishing Company, Incorporated, 2011.
- A novel and efficient feature extraction method for iris recognition. ETRI Journal, 29:399–401, 06 2007.
- Personal identification based on iris texture analysis. IEEE Transactions on Pattern Analysis and Machine Intelligence, 25(12):1519–1533, 2003.
- Dictionary attacks on speaker verification. IEEE Transactions on Information Forensics and Security, 18:773–788, 2023.
- Libor Masek. Recognition of human iris patterns for biometric identification - m.s. thesis report. Technical report, School of Computer Science and Software Engineering,University of Western Australia, 2003.
- Dct-based iris recognition. IEEE Transactions on Pattern Analysis and Machine Intelligence, 29(4):586–595, 2007.
- Deep learning for iris recognition: A survey. arXiv, 10 2022.
- IREX V: Guidance for Iris Image Collection. Technical report, NIST Interagency/Internal Report (NISTIR) - 8013, 2014.
- On the feasibility of creating morphed iris-codes. In IEEE International Joint Conference on Biometrics (IJCB), pages 152–157, 2017.
- Secure iris recognition based on local intensity variations. In Aurélio Campilho and Mohamed Kamel, editors, Image Analysis and Recognition, pages 266–275, 2010.
- Design decisions for an iris recognition sdk. In Kevin Bowyer and Mark J. Burge, editors, Handbook of Iris Recognition, Advances in Computer Vision and Pattern Recognition. Springer, second edition edition, 2016.
- Masterprint: Exploring the vulnerability of partial fingerprint-based authentication systems. IEEE Transactions on Information Forensics and Security, 12(9):2013–2025, 2017.
- Image-level iris morph attack. In IEEE International Conference on Image Processing (ICIP), pages 3013–3017, 2021.
- Generating master faces for dictionary attacks with a network-assisted latent space evolution. 16th IEEE International Conference on Automatic Face and Gesture Recognition (FG 2021), pages 01–08, 2021.
- On the (limited) generalization of masterface attacks and its relation to the capacity of face representations. IEEE International Joint Conference on Biometrics (IJCB), pages 1–9, 2022.
- Wolf attack probability: A theoretical security measure in biometric authentication systems. IEICE Transactions on Information and Systems, E91D, 05 2008.
- The biometric menagerie. IEEE Transactions on Pattern Analysis and Machine Intelligence, 32(2):220–230, 2010.
- IFCNN: A General Image Fusion Framework Based on Convolutional Neural Network. Information Fusion, 54:99–118, 2020.
Paper Prompts
Sign up for free to create and run prompts on this paper using GPT-5.
Top Community Prompts
Collections
Sign up for free to add this paper to one or more collections.