Browse Definitions :
Definition

image replay attack

An image replay attack is the use of a picture to fool an authentication method.

Image replay attacks are most commonly used by an attacker trying to gain entry to a system protected by less-than-secure biometric authentication technology implementations. The method has been used successfully against low-end fingerscanners, iris scanners and facial recognition systems.

In the simplest cases, image replay attacks involve a printed image of the subject used for authentication. An attacker might, for example, present a picture of an authorized user to a facial recognition system. Extra measures can be implemented in facial recognition and iris scans to foil printed or static images, however; such measures include requiring the user to wink, blink or speak.

More sophisticated image replay attack methods may involve recorded video and audio playback to defeat these measures. Methods of defeating these attacks exist as well, however. Video and audio are typically out of sync to a detectable degree when played back from a file. Security algorithms have been created to detect the discrepancy and prevent these attacks.

Making biometric authentication methods secure from image replay attacks can't rely on the methods used to detect data replay attacks. (The opposite is also true.) When security is important, it is advisable for administrators to be aware of both attack methods and counter measures.

This was last updated in December 2014

Continue Reading About image replay attack

SearchCompliance

  • information governance

    Information governance is a holistic approach to managing corporate information by implementing processes, roles, controls and ...

  • enterprise document management (EDM)

    Enterprise document management (EDM) is a strategy for overseeing an organization's paper and electronic documents so they can be...

  • risk assessment

    Risk assessment is the identification of hazards that could negatively impact an organization's ability to conduct business.

SearchSecurity

  • honeypot (computing)

    A honeypot is a network-attached system set up as a decoy to lure cyber attackers and detect, deflect and study hacking attempts ...

  • spam trap

    A spam trap is an email address that is used to identify and monitor spam email.

  • cracker

    A cracker is someone who breaks into someone else's computer system, often on a network; bypasses passwords or licenses in ...

SearchHealthIT

SearchDisasterRecovery

  • risk mitigation

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • call tree

    A call tree is a layered hierarchical communication model that is used to notify specific individuals of an event and coordinate ...

  • Disaster Recovery as a Service (DRaaS)

    Disaster recovery as a service (DRaaS) is the replication and hosting of physical or virtual servers by a third party to provide ...

SearchStorage

  • storage virtualization

    Storage virtualization is the pooling of physical storage from multiple storage devices into what appears to be a single storage ...

  • erasure coding

    Erasure coding (EC) is a method of data protection in which data is broken into fragments, expanded and encoded with redundant ...

  • continuous data protection

    Continuous data protection (CDP), also known as continuous backup, is a backup and recovery storage system in which all the data ...

Close