The security of biometric systems came under scrutiny again after research was presented at Ekoparty, one of the most important cybersecurity conferences in the region.
Researchers from Argentina and Ecuador presented techniques that could defeat liveness detection mechanisms, which are used to verify that a person is actually in front of a camera or authentication device.
The work, called The Glass Perimeter, showed different methods that could affect how these systems work. According to the researchers, the vulnerabilities range from physical alterations to device lenses to interventions at the operating system level.
Companies, government agencies and digital platforms use facial recognition, fingerprints and other biometric tools as identity validation mechanisms.
What the finding implies
The research reopens the debate on the limits of biometrics as a security tool. Although these systems can verify a person's physical characteristics, specialists warn that using them on their own may be insufficient against increasingly sophisticated digital fraud techniques.
In recent years, the development of AI-generated images, voices and faces has also heightened concerns about the ability of traditional systems to detect impersonation attempts.
CertiSur pointed out that a seemingly legitimate identity does not by itself guarantee that a communication comes from whoever claims to have sent it.
The risk goes beyond facial recognition
Specialists maintain that threats to digital identity are not limited to video calls or biometric systems. They can also take the form of spoofed emails, messages that imitate suppliers, or communications that reproduce an organization's visual identity to deceive employees or customers.
According to the Digital Security Perception Report prepared by CertiSur together with D'Alessio, 43% of Argentines surveyed said they had suffered a hack or fraud linked to their digital identity.
Although the survey does not focus exclusively on the business sphere, the figure reflects the growing exposure of users and organizations to incidents related to identity spoofing.
The challenge of verifying where communications come from
Based on these scenarios, cybersecurity experts argue that protecting digital identity requires additional mechanisms to verify the origin of a communication and ensure that the information has not been altered.
The tools used for this purpose include digital certificates, electronic signatures and other authentication systems, which can complement biometric controls depending on the type of transaction and the level of risk involved.
Source:La Voz