COVERT, Mich.--()--Sensible Vision, the leading supplier of face authentication systems, today commented on a video where a photograph was able to fool the face recognition feature of Android’s Ice Cream Sandwich Operating System. Sensible Vision’s software is not included as a standard feature of Ice Cream Sandwich.
“Passwords can be stolen, guessed or hacked by brute force, fingerprints can be lifted with a simple gummy bear, badges and access cards can be shared, lost or stolen. To minimize these weaknesses, most security experts recommend adding a second factor of authentication.”
Sensible Vision’s FastAccess™ face recognition software is currently in use by over five and a half million users including many in security critical organizations such as hospitals, banks, and enterprise IT. It is also offered as a standard or optional feature on Dell computers.
Photographs and videos should not be recognized as a legitimate user in most situations.
The demonstration video, made by Soya Cincau at the Samsung Galaxy Nexus regional launch event in Jakarta, documents the potential vulnerability of some face recognition solutions.
“By demonstrating the ability to hack into the phone with a photo, Soya Cincau has done consumers a great service by alerting them to a potential security vulnerability. At the same time, it is possible to provide face recognition solutions that address this vulnerability while maintaining the convenience and fun that face recognition offers. Especially for mobile devices such as smartphones, convenience is important as many people currently use little if any security to protect valuable data,” said George Brostoff, CEO of Sensible Vision.
In January 2012, Sensible Vision will be releasing a patent pending mobile version of its face recognition with technology that allows near perfect photo and video rejection.
All Face Recognition Solutions are NOT the Same
Using Sensible Vision’s exclusive and patent-pending Continuous Adaptive Sensing (CAS) recognition routines, FastAccess is far more resistant to picture and video attacks than many other solutions. Even with advanced photo and video rejection technology, however, a successful attack is still possible.
“All security methods, in fact, are susceptible to being bypassed with enough time and effort,” said Brostoff. “Passwords can be stolen, guessed or hacked by brute force, fingerprints can be lifted with a simple gummy bear, badges and access cards can be shared, lost or stolen. To minimize these weaknesses, most security experts recommend adding a second factor of authentication.”
Sensible Vision CTO Cyrus Azar added, “Early on in our development of our PC face recognition, we knew that it was important to address the photo-match issue in an easy to use, robust way that did not impact the user’s workflow. In addition to providing superior photo resistance, Face+Password is an innovation that addresses these goals. Our Enterprise products have had an enhanced version of Face+Password for years.”
Empowering the user by publishing known possible vulnerabilities
Good security software publishes known vulnerabilities and provides solutions. In the case of FastAccess, Sensible Vision documents the likely conditions under which photo or video access may be possible in its product Help files and FAQs, along with specific recommended solutions such as the use of Face+Password when a photo or video attack is likely.
Enterprise versions of FastAccess are available directly from Sensible Vision and through its worldwide network of resellers and systems integrators. A consumer version is available directly from Sensible Vision at https://www.sensiblevision.com/en-us/purchase.aspx and on select Dell laptops. The FastAccess SDK is available for vendors to integrate face recognition directly into their applications.
Coming soon – in January 2012, Sensible Vision will release a new product that offers convenient and secure face recognition for Android and iOS mobile devices.
About Sensible Vision
Headquartered in Covert, Michigan, Sensible Vision Inc. (www.sensiblevision.com) is the leading provider of face recognition for convenience and security when using computers. Sensible Vision’s flagship product, FastAccess™ provides quick and continuous authentication and access control for computers and workstations. Using patent-pending biometric facial recognition, it speeds and simplifies access to the computer in a way that is economical and easy to deploy.