Saturday, February 20, 2010

Countering Voice Biometrics Hacking

Whenever I give a presentation on voice biometrics, invariably, someone in the audience will bring up the 1992 movie “Sneakers.” You may recall that the main character is able to successfully hack a voice biometrics system by recording the authorized individual and splicing together the pass-phrase “my voice is my password.” Of course, this reference always leads to spirited discussion about the risks of hacking voice biometrics.

Fortunately, there are several methods to counter hacking of voice biometrics systems. In an interview with Canadian Security Magazine, I discussed one such approach. It involves asking users to repeat a series of words or numbers during the enrollment process. When the user subsequently accesses the system, they are prompted to repeat a randomly generated sequence of words or numbers. This method works well, as it’s improbable that a hacker would know the random sequence of words or numbers the user will be asked to repeat.

No comments:

Post a Comment