AS ISO/IEC 30107.3:2024 identically adopts ISO/IEC 30107 3:2023, which establishes principles and methods for performance assessment of presentation of attack detection (PAD) mechanisms as well as reporting of test results and classification of known attack types
Table of contents
Header
About this publication
Preface
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
3.1 Attack elements
3.2 Metrics
3.3 Test roles
4 Abbreviated terms
5 Conformance
6 Presentation attack detection (PAD) overview
7 Levels of evaluation of PAD mechanisms
7.1 Overview
7.2 General principles of evaluation of PAD mechanisms
7.3 PAD subsystem evaluation
7.4 Data capture subsystem evaluation
7.5 Full system evaluation
8 Artefact properties
8.1 Properties of PAIs in biometric impostor attacks
8.2 Properties of PAIs in biometric concealer attacks
8.3 Properties of synthesized biometric samples with abnormal characteristics
9 Considerations in non-conformant capture attempts of biometric characteristics
9.1 Methods of presentation
9.2 Methods of assessment
10 Artefact creation and usage in evaluations of PAD mechanisms
10.1 General
10.2 Artefact creation and preparation
10.3 Artefact usage
10.4 Iterative testing to identity effective artefacts
11 Process-dependent evaluation factors
11.1 Overview
11.2 Evaluating the enrolment process
11.3 Evaluating the verification process
11.4 Evaluating the identification process
11.5 Evaluating offline PAD mechanisms
12 Evaluation using Common Criteria framework
12.1 General
12.2 Common Criteria and biometrics
12.2.1 Overview
12.2.2 General evaluation aspects
12.2.3 Error rates in testing
12.2.4 PAD evaluation
12.2.5 Vulnerability assessment
12.2.5.1 Typical attack scenarios
12.2.5.2 Rating attacks
12.2.5.3 Previous approaches in fingerprint PAD protection profiles
13 Metrics for the evaluation of biometric systems with PAD mechanisms
13.1 General
13.2 Metrics for PAD subsystem evaluation
13.2.1 General
13.2.2 Classification metrics
13.2.3 Non-response metrics
13.2.4 Efficiency metrics
13.2.5 Summary
13.3 Metrics for data capture subsystem evaluation
13.3.1 General
13.3.2 Acquisition metrics
13.3.3 Non-response metrics
13.3.4 Efficiency metrics
13.3.5 Summary
13.4 Metrics for full system evaluation
13.4.1 General
13.4.2 Accuracy metrics
13.4.2.1 Evaluation of verification systems
13.4.2.2 Evaluation of positive identification systems
13.4.2.3 Evaluation of negative identification systems
