{"id":74884,"date":"2026-09-11T16:06:32","date_gmt":"2026-09-11T19:06:32","guid":{"rendered":"https:\/\/a3aengenharia.com\/?post_type=articles&p=74884"},"modified":"2026-09-11T16:06:32","modified_gmt":"2026-09-11T19:06:32","slug":"biometric-liveness-anti-spoofing-pad-presentation-attacks-access-control","status":"publish","type":"articles","link":"https:\/\/a3aengenharia.com\/en-us\/content\/technical-articles\/biometric-liveness-anti-spoofing-pad-presentation-attacks-access-control\/","title":{"rendered":"Biometric Liveness and Anti-Spoofing: PAD, Presentation Attacks, and Design Criteria"},"content":{"rendered":"\n

Liveness and anti-spoofing are mechanisms used to reduce the risk of a biometric system accepting an artificial, replayed, or manipulated presentation as if it were a genuine characteristic from a person who is actually present. In standards terminology, the more precise concept is Presentation Attack Detection (PAD)<\/strong>: detection of attacks performed at the capture device during presentation and acquisition of the biometric characteristic.<\/p>\n\n\n\n

In access control, PAD does not replace FAR\/FMR, FRR\/FNMR, 1:1 verification, 1:N identification, multifactor authentication, authorization, or the physical barrier itself. It addresses a different threat. A matcher may distinguish genuine users from zero-effort impostors very effectively and still be vulnerable to a photograph, screen replay, mask, fingerprint replica, or another artifact presented to the sensor.<\/p>\n\n\n\n

For that reason, specifying only \u201cbiometrics with liveness\u201d is insufficient. A technically verifiable design must define the threat model, biometric modality, capture conditions, performance criteria, test evidence, failure behavior, and the method of verification during FAT, SAT, and commissioning. The objective is not to promise invulnerability, but to control a measurable risk without unduly degrading the experience of legitimate users.<\/p>\n\n\n\n

Liveness, Anti-Spoofing, and PAD Are Not the Same Thing<\/h2>\n\n\n\n

\u201cLiveness\u201d is the most widespread commercial and operational term used to indicate that a sample appears to come from a live and present person. \u201cAnti-spoofing\u201d is a broader expression used for mechanisms intended to hinder or detect falsification. The ISO\/IEC 30107 family uses Presentation Attack Detection<\/strong> because the standards problem is not limited to \u201cproving life\u201d: the focus is on detecting presentations made to the capture device with the intent of interfering with the biometric subsystem.<\/p>\n\n\n\n

This distinction prevents an imprecise specification. An algorithm may look for eye movement, texture, depth, spectral response, tissue properties, or other indicators, but the design should not procure a particular technological \u201ctrick.\u201d It should procure verifiable performance against presentation classes relevant to the risk<\/strong>.<\/p>\n\n\n\n

Term<\/td>Typical use<\/td>Interpretation limitation<\/td><\/tr>
Liveness<\/td>Assess signals associated with a live presence<\/td>May suggest a narrower scope than the actual risk<\/td><\/tr>
Anti-spoofing<\/td>Prevent or detect falsification<\/td>Broad term that does not by itself define testing and acceptance methods<\/td><\/tr>
PAD<\/td>Detect presentation attacks at the capture point<\/td>Does not cover every threat to the biometric system<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

ISO\/IEC 30107-1:2023 limits PAD to attacks that occur at the capture device during presentation and acquisition of the biometric characteristic. Data injection after the sensor, API compromise, template theft, database tampering, administrative-credential compromise, or controller bypass belong to other attack surfaces. A product with robust PAD therefore still depends on appropriate architecture, cybersecurity, and access policies.<\/p>\n\n\n\n

The complete guide to access-control systems<\/a> positions biometrics within the broader chain of identification, authentication, authorization, decision, and actuation. PAD is an additional layer in that chain, not a substitute for the others.<\/p>\n\n\n\n

A presentation attack occurs at the capture point<\/h3>\n\n\n\n

A presentation attack occurs when a characteristic or artifact is presented to the sensor in order to induce an improper response. For facial systems, the threat class may include two- or three-dimensional presentations. For fingerprint systems, it may include materials capable of reproducing characteristics relevant to the sensor. Other modalities have their own attack surfaces.<\/p>\n\n\n\n

The design requirement should not become a catalog of attack recipes. What matters is defining, at an appropriate level of detail, which presentation families are plausible for the asset, how critical the access is, and what evidence will demonstrate compatible resistance<\/strong>.<\/p>\n\n\n\n

Position of PAD in the biometric access-control decision chain<\/title>