A 3D artefact is a physical or digital object that leaves visible cues in three dimensions, such as depth, texture, reflections, or facial geometry. In biometric security, the term often describes a spoof item, like a mask or model, that may be used to test or evade presentation attack detection.
What a 3D artefact means in biometric security
A 3D artefact is not just a flat printed image or replayed video. It is a physical or digital object that preserves depth, surface texture, reflectance, and facial geometry well enough to interact with three-dimensional sensing and liveness checks. In biometric security, that makes it relevant to spoof testing, presentation attack research, and the design of detection logic.
Because the term describes an object rather than a control, its security significance comes from how faithfully it can reproduce the cues a biometric system expects to see. A weak artefact may be rejected immediately, while a more sophisticated one can expose blind spots in sensors, illumination assumptions, or software models.
How 3D artefacts are used in spoofing and evaluation
In practice, 3D artefacts appear in both offensive and defensive contexts. Attackers may use masks, models, prosthetics, or other crafted objects to impersonate a person, especially where the system relies on face shape, depth, or reflectance as part of authentication. Defenders and testers use the same idea to challenge a biometric system and measure whether it resists presentation attacks under realistic conditions.
The key issue is that three-dimensional realism changes the test surface. Systems that only detect printed-photo spoofing can still be vulnerable to artefacts that preserve pose, contour, or skin-like reflectance. That is why biometric assurance has to consider the full presentation channel, not only the visible image.
Why depth, texture, and geometry matter
3D cues matter because they are harder to fake consistently than a single two-dimensional image. True depth changes how light falls across surfaces, how shadows move with angle, and how facial features align across sensors. Texture and material response also influence whether the object behaves like a real face or a synthetic substitute.
Biometric systems that depend on one cue alone can be brittle. A model that looks convincing in RGB may fail under infrared, structured light, stereo depth, or multimodal comparison. A strong 3D artefact therefore tests whether the system is genuinely verifying a live human presence or only matching patterns that can be reproduced artificially.
What organisations should do with the term
For practitioners, 3D artefact is a useful test concept, not a policy label. It helps teams describe the class of spoof material they are defending against, select the right presentation-attack tests, and interpret why one biometric factor fails while another succeeds. SLSA is not about biometrics, but its build-integrity mindset is a good reminder that security depends on verifying the authenticity of what is being presented, not just the surface appearance.
Common misunderstanding: a 3D artefact is not automatically a successful spoof. Its value lies in whether it can survive the specific sensing and liveness checks in use. Teams should treat it as a way to probe biometric robustness, then adjust detection thresholds, sensor selection, and test cases accordingly.
Risk and Threat Considerations
3D artefacts matter because they can move biometric security from simple replay fraud into more convincing impersonation. When the artefact preserves depth and facial geometry, it can reduce the defender’s ability to distinguish a real person from a crafted object, especially if the system over-relies on a single sensor or a narrow set of cues.
Failure mechanism: the attacker presents a realistic object that satisfies enough geometric or textural checks to pass presentation attack detection, or to degrade confidence until the system falls back to weaker verification paths.
Impact: successful spoofing can lead to account takeover, unauthorized entry, or repeated probing that reveals which biometric cues are actually enforced, making later attacks more targeted.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST SP 800-53 Rev 5, OWASP ASVS, CIS Controls v8 and NIST CSF 2.0 set the governance and control requirements practitioners need to meet.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST SP 800-53 Rev 5 | IA-2 — Identification and Authentication (Organizational Users) | Biometric spoof resistance affects how organizational users are authenticated. |
| SI-4 — System Monitoring | Detection of spoof attempts depends on monitoring biometric anomalies and attack indicators. | |
| Recommendation — Validate biometric authentication flows against presentation attack scenarios before allowing production use. Monitor biometric failures and anomaly patterns for signs of presentation attack attempts. | ||
| OWASP ASVS | V6 — Authentication | Biometric spoofing is an authentication assurance problem in application security. |
| Recommendation — Test authentication controls against spoofable presentation inputs and weak fallback paths. | ||
| CIS Controls v8 | CIS-6 — Access Control Management | Biometric access decisions must be governed so spoof resistance matches privilege sensitivity. |
| Recommendation — Restrict high-value access paths to authentication methods that resist realistic spoofing. | ||
| NIST CSF 2.0 | PR.AA-05 — Identity and Access Management | Biometric verification is part of protecting access decisions from impersonation. |
| Recommendation — Apply identity and access controls that resist impersonation and presentation attacks. | ||
Practitioner Guidance
What to watch for: evaluate biometric controls against artefacts that vary in material, reflectance, posture, and sensor interaction, not just against flat image attacks. If a control is only strong against 2D spoofs, the environment may still be exposed to more advanced presentation methods.
Governance implication: document which presentation attack types were tested, which sensors or modalities were used, and what fallback behaviour is allowed when confidence is uncertain. That makes biometric assurance measurable instead of anecdotal.
Related resources from NHI Mgmt Group
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on November 9, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org