Cyber criminals defeat vein authentication by making a fake hand. Protection researchers used 2, five hundred pictures of a palm to generate an exact model out of wax

Cyber-terrorist defeat vein authentication by making a fake hand. Security researchers used 2, five-hundred pictures of a hand to produce an exact model out of wax


Biometric security has moved beyond just fingerprints and encounter recognition to vein-based authentication. Unfortunately, hackers have already figured out a way to crack that, too. Based to Motherboard, security researchers at the Chaos Connection Congress hacking conference in Leipzig, Germany showed a model wax hand that they used to beat a vein authentication system using a wax model hands.

Vein authentication typically uses a computer system to check out the shape, size and location of a individual's veins in their palm. Those patterns have to be recognized each period the machine scans the individual's hand. To be able to fool that security check, the experts took 2, 500 pictures of a hand by using a modified SLR camera that will had the infrared filter removed to better emphasize veins under the skin. They then took all those photos and developed polish hand with the information on the person's veins attractive right in. That polish mock-up was enough to bypass the vein authentication system.

To be very clear, the method used by the security researchers isn't one that an average could easily replicate. Even though the researchers said pictures from as far away because five meters (about 16 feet) are good sufficient, snapping enough to make a reliable model will be a challenge without lots of access to the hand inside question. That is a more extensive cracking process than, say, fingerprint ID that could potentially be hacked basically by lifting a individuals fingerprint from an item they have touched. It still presents an issue of which security systems can become manipulated with cheap plus easily accessible materials.