The European Association for Biometrics hosted a lunch talk today dedicated to biometric injection attacks, bringing together practitioners to examine testing methodologies, offensive and defensive techniques, and the resilience standards that regulated identity programs must now meet.
The session, led by Dr. Chris Allgrove of Ingenium Biometric Laboratories, ran from 12:30 to 13:30 CET and addressed what EAB described as “the critical need for biometric system resilience against sophisticated injection attacks.” The program covered both machine-learning-based offensive approaches and AI-driven defense mechanisms, with implications for remote identity verification and know-your-customer onboarding workflows where adversarial tooling has become increasingly accessible.
Injection attacks, in which synthetic or manipulated biometric samples are introduced directly into a verification pipeline, bypassing the physical capture layer, have become a front-line concern for identity programs as the quality of deepfake and AI-generated imagery improves. The EAB session framed resilience testing as a prerequisite for any system operating in regulated contexts where verification failures carry legal or compliance consequences.
The discussion echoes the new standard for assessing biometric injection attacks that formalized how European laboratories evaluate injection resilience, providing a common measurement framework for both vendors and procuring authorities. Industry uptake of that standard has been visible across the supplier landscape, with vendors making public claims about their injection attack defenses with reference to European certification benchmarks.
Testing programs have also documented the challenge empirically. FaceTec’s completion of Level 1–5 liveness and injection attack testing documented the range of resilience assessments now expected of serious market participants. The EAB session reinforced that those assessments are not a one-time certification event but an ongoing operational priority as attack methods evolve.
The EAB program also touched on vendor-level responses to injection threats. Mitek’s work to enhance video verification against injection attacks in the Spanish market – announced just two days before the lunch talk – illustrated the immediate relevance of the topics under discussion to live commercial deployments.
The lunch talk format, which EAB uses regularly to convene practitioners around emerging technical topics, allows for more detailed technical exchange than conference presentations typically permit. Recordings and materials from the February 18 session are available through the EAB event portal.
Sources: EAB Event Program, EAB
–
By the ID Tech Editorial Team
