Biometric Templates Security Questionnaire

Section A: Biometric System Developer's Background

1. What is your gender? *

Female

Male

2. What is your age bracket? *

20 years and below

21 - 25 years

26 - 30 years

31 - 35 years

36 years and above

3. Have you undertaken any studies, courses in Biometric Systems Development? *

Yes

No

4. How long have you worked as a Biometric Systems Developer? *

1 - 5 years

6 - 10 years

11 - 15 years

16 years and above

5. Which Biometric Systems have you developed before? *

Fingerprints

Face

Iris

Voice

Palm Vein Recognition

Other(s)

If you selected Other(s) *

(Please Specify)

6. In your own understanding based on your experience with biometric systems, do you consider biometrics to be more secure than passwords, PINs or access codes? *

Yes

No

7. How would you rate your knowledge on Data Encryption? *

Excellent(5)

Above Average(4)

Average(3)

Very Poor(2)

Poor(1)

8. Which of the following do you think have been the impediments towards wide scale adoption of biometrics? *

(Select as many as apply)

High Costs of Biometric Hardware & Software

Known Security Flaws

Lack of Expertise to Develop, Implement & Support Biometrics Systems

Accuracy (False Acceptance Rate and False Rejection Rate)

Big data size of Biometric Templates in storage space

Other(s)

If you selected Other(s) *

(Please Specify)

Section B: Biometric Template Security

1. How do you save Biometric Templates for the Systems you develop? *

Folders

Databases

Smart Cards

USB Modules

Other(s)

If you selected Other(s) *

(Please Specify)

2. Are there measures you use to protect Biometric Templates? *

Yes

No

3. Do you have policies in place that emphasize on securing biometric templates before they are stored? *

Yes

No

If your answer to 3 above is No, What measures have you put in place to mitigate Biometric Template attacks in storage? *

4. Which Biometric Template Protection Techniques do you use? *

Feature Transformation

Biometric Encryption

None

If your answer in 4 above is Biometric Encryption, please specify which Biometric Encryption method you use? *

Key Binding

Key Generation Method

5. Which Biometric Encryption scheme(s) do you use in securing Biometric Templates in storage? *

(Select as many as apply)

Fuzzy Vault

Water Marking

RSA and ECC

Fuzzy commitment

Cancellable Biometric

None

Other(s)

If you selected Other(s), *

(Please Specify)

Section C: Efficiency of Encryption Methods

1. With respect to Encryption method used, Please indicate the extent to which you agree or disagree with the following statements. *

SD = Strongly Disagree
D = Disagree
N = Neutral
A = Agree
SA = Strongly Agree

	SD	D	N	A	SA
The risk of hacking into biometric systems is high
The encryption methods I use are fool proof
I am satisfied with the security of biometric templates

2. Would you keep encryption keys in the same storage space with your encrypted biometric templates? *

Yes

No

3. Which of the following practices do you suppose will improve Biometric Encryption? *

(Select as many as apply)

Improving Image Acquisition Process

Making Biometric Encrypton Resilient against attacks

Improving Accuracy and Security of Biometric Encryption Algorithms

Use of Multimodal Biometrics

Develop Biometric Encryption Applications

Other(s)

If you selected Other(s) *

(Please Specify)

4. Would you derive encryption keys from biometric fingerprint templates and use them to protect data in storage? *

Yes

No

5. In your own opinion, do you think encryption keys derived from biometric templates would be more strong and rich in entropy for encrypting data than a combination of passwords and access codes? *

Yes

No

If your answer above is No, *

(Please explain why)

6. Do you foresee in future, encryption of data using biometric encryption keys become a common practice among systems developers? *

Yes

No

Section D: Biometric Templates Security Challenges

1. Do you face any Security Challenges with regards to Biometric Template Security? *

Yes

No

If your answer above is Yes, *

(Please Specify)

2. Which of the following biometric attacks have you ever encountered? *

(Select as many as apply)

Spoofing (Fooling biometric system by using fake finger, face or iris templates)

Replay attacks (Beating sensor by running pre-saved biometric templates)

Substitution attacks (Attacker replacing user's biometric templates with theirs)

Tampering (Feature sets getting modified to obtain high verification scores)

Trojan attacks (e.g. matcher is replaced with a program that always allows access)

Other(s)

If your answer above is Other(s), *

(Please Specify)

3. Has your biometric templates storage area ever been compromised? *

Yes

No

If your answer above is Yes, *

(What measures did you take to prevent a future occurrence of the same?)

4. In your own opinion do you consider saving of biometric templates in databases as being the most ideal choice in preference to other storage areas? *

Yes

No

If your answer above is No, *

(Please Specify why)

5. If your answer in 4 above is Yes, which of the below options would you use to ensure that biometric templates are safely stored in database? *

(Select as many as apply)

Change Database passwords oftenly

Use strong passwords

Reduce levels of access to database

Encrypt biometric templates before saving them in databae

Other(s)

If your answer above is Other(s), *

(Please Specify)

Biometric Templates Security Questionnaire

Section A: Biometric System Developer's Background

1. What is your gender? *

2. What is your age bracket? *

3. Have you undertaken any studies, courses in Biometric Systems Development? *

4. How long have you worked as a Biometric Systems Developer? *

5. Which Biometric Systems have you developed before? *

If you selected Other(s) *

6. In your own understanding based on your experience with biometric systems, do you consider biometrics to be more secure than passwords, PINs or access codes? *

7. How would you rate your knowledge on Data Encryption? *

8. Which of the following do you think have been the impediments towards wide scale adoption of biometrics? *

If you selected Other(s) *

Section B: Biometric Template Security

1. How do you save Biometric Templates for the Systems you develop? *

If you selected Other(s) *

2. Are there measures you use to protect Biometric Templates? *

3. Do you have policies in place that emphasize on securing biometric templates before they are stored? *

If your answer to 3 above is No, What measures have you put in place to mitigate Biometric Template attacks in storage? *

4. Which Biometric Template Protection Techniques do you use? *

If your answer in 4 above is Biometric Encryption, please specify which Biometric Encryption method you use? *

5. Which Biometric Encryption scheme(s) do you use in securing Biometric Templates in storage? *

If you selected Other(s), *

Section C: Efficiency of Encryption Methods

1. With respect to Encryption method used, Please indicate the extent to which you agree or disagree with the following statements. *

2. Would you keep encryption keys in the same storage space with your encrypted biometric templates? *

3. Which of the following practices do you suppose will improve Biometric Encryption? *

If you selected Other(s) *

4. Would you derive encryption keys from biometric fingerprint templates and use them to protect data in storage? *

5. In your own opinion, do you think encryption keys derived from biometric templates would be more strong and rich in entropy for encrypting data than a combination of passwords and access codes? *

If your answer above is No, *

6. Do you foresee in future, encryption of data using biometric encryption keys become a common practice among systems developers? *

Section D: Biometric Templates Security Challenges

1. Do you face any Security Challenges with regards to Biometric Template Security? *

If your answer above is Yes, *

2. Which of the following biometric attacks have you ever encountered? *

If your answer above is Other(s), *

3. Has your biometric templates storage area ever been compromised? *

If your answer above is Yes, *

4. In your own opinion do you consider saving of biometric templates in databases as being the most ideal choice in preference to other storage areas? *

If your answer above is No, *

5. If your answer in 4 above is Yes, which of the below options would you use to ensure that biometric templates are safely stored in database? *

If your answer above is Other(s), *

Any Other Comments? *

Thank you for your Time and accepting to be a Respondent for this Survey.