[Full-disclosure] Biologger - A Biometric Keylogger

Andy Davis andy.davis at irmplc.com
Thu Sep 6 11:54:49 BST 2007


In this paper we realise a proof-of-concept implementation of a
biometric keylogger, or "Biologger". While conventional keyloggers are
typically used to obtain passwords or encryption keys to circumvent
specific security measures, our Biologger will aim to capture
biometric-related data between a biometric device and other processing
units, to be used and exploited in a number potential attack vectors
against the biometric system, such as manipulation of biometric data and
control signals, as per traditional man-in-the middle attacks.

 

The full paper can be downloaded here:

 

http://www.irmplc.com/index.php/69-Whitepapers

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20070906/65c1e496/attachment.html 


Full-Disclosure is hosted and sponsored by Secunia.