Topic starter
10/06/2026 12:57 am
TL;DR: Biometric systems can pass presentation attack tests and still fail against injection attacks, a gap highlighted by CEN/TS 18099 and iProov’s 40-day evaluation, which found no successful injection method could be established under Ingenium Level 4 testing. The real issue is that proof of resistance now depends on independent, standards-aligned validation, not vendor claims.
Editorial analysis by NHI Mgmt Group, based on content published by iProov: “CEN/TS 18099: The Standard That Proves Injection Attack Resilience”.
Key questions
Q: What breaks when biometric systems are not tested against injection attacks and forged media?
A: When biometric systems are not tested for injection resistance, attackers can feed synthetic or manipulated media into the verification flow and bypass trust checks.
Q: Why do organisations need independent validation for biometric injection resistance?
A: Because vendor-led testing is often proprietary and not comparable across solutions, which makes it weak as a procurement or audit input.
Q: How should organisations evaluate biometric controls for both spoofing and injection risk?
A: They should assess presentation attack detection and injection attack resilience separately, because the controls and test methods are different.
Practitioner guidance
- Separate presentation and injection assurance Write procurement criteria that distinguish PAD evidence from injection attack resilience, and reject claims that collapse the two into one capability.
- Require independent lab proof Ask for the test standard, the accredited lab, and the evaluation level before accepting any biometric resistance claim in risk reviews.
- Map biometric testing to the threat path Check whether the control blocks attack delivery, detects malicious payloads, or only handles visible spoofs at the capture layer.
Bottom line: Biometric controls can pass presentation-attack testing and still fail to prove resistance to injection attacks that bypass the capture layer.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
11/06/2026 2:33 am
Injection attack resilience is now a separate assurance domain, not an extension of presentation attack detection. The standards gap is structural: ISO/IEC 30107 evaluates what reaches the camera, while CEN/TS 18099 evaluates what enters the pipeline. A control can satisfy PAD requirements and still fail against deepfake injection because the threat model changed from spoofing a sensor to subverting the data path. Practitioners should treat these as different assurance questions, not adjacent ones.
A few things that frame the scale:
- 91.6% of secrets remain valid five days after the targeted organisation is notified, showing a critical gap in remediation procedures, according to Ultimate Guide to NHIs.
- 79% of organisations have experienced secrets leaks, and 77% of those incidents resulted in tangible damage, according to Ultimate Guide to NHIs.
A question worth separating out:
Q: What should procurement teams ask before accepting deepfake resistance claims?
A: They should ask which independent lab tested the control, against which standard, and at what assurance level. They should also confirm whether the test covered injection attacks as well as presentation attacks, because the two failure modes are not interchangeable. If the answer is vague, the control is unverified rather than proven.
👉 Read our full editorial: CEN/TS 18099 exposes the biometric injection validation gap
12/06/2026 4:07 am
Biometric assurance now fails at the validation layer, not just the matcher layer. The article shows that a system can satisfy presentation-attack testing and still remain unproven against injection attacks. That is a governance failure because procurement teams may mistake one certification for end-to-end identity assurance. The practitioner conclusion is that biometric trust decisions must be anchored to the specific attack path being tested, not to generic fraud-resistance language.
A question worth separating out:
Q: What should organisations ask before trusting biometric verification in identity programmes?
A: Ask which standard was used, which accredited lab performed the evaluation, and what level of resistance was demonstrated. If those details are missing, the claim is not independently verified in a way that supports high-confidence identity assurance or procurement approval.
👉 Read our full editorial: CEN/TS 18099 exposes the biometric injection validation gap
This post was modified 1 day ago by NHI Mgmt Group