iTC Meeting Minutes 2026 02 17 - biometricITC/cPP-biometrics GitHub Wiki

Agenda

Attendees

  • Brian Wood

  • Greg Fiumara

  • Greg Ott

  • Huy Nguyen

  • Naruki Kai

  • Douglas Kalmus

  • Jim Arnold

Record of Decisions

  • none

Action Items

The following toolboxes will be updated by:

  • Vein - Naruki

  • Eye - Douglas

  • Face - Naruki

  • Fingerprint - Brian

Minutes

The call quickly reviewed the task list. There were no changes.

The discussion moved to the AP table discussion.

The initial focus was on a proposed set of examples used for the Face by Naruki. This is being proposed to ISO, and covers 6 separate examples. Several are drawn from our own toolboxes and are updated to show how the new tables would impact them. There was not a lot of discussion about these, other than an agreement that these should be used to change how our own toolbox attacks are set. This was broadly agreed in the call as the direction to go.

This led to a discussion of the current AP table itself, and the question was why these numbers since they are different than the current published ones, especially in that knowledge and expertise are different with lower values being shown for expertise, and TOE knowledge having values (instead of not applicable), which is similar to needing access to the biometric characteristics. Brian pointed out that these come from the newer Injection Attack table and that the goal is to have a single table for all attack types. This means that we may choose different values for our attacks, but having one common table simplifies things overall.

Huy stated that since this table isn’t yet published by ISO, we may face questions about the values and why. Brian stated this was acceptable, encouraged even, and that tables would be updated as appropriate.

The next topic then moved on to the fingerprint implications as it was asked whether actual samples could be created inside of an hour, or if 12 hours should be used as the default for exploitation. This should be fine given the values currently in use.

At the end of the discussion, people volunteered for updating the existing toolboxes based on the new AP table for the next call in 2 weeks.

The call ended at 10:50am EST.

⚠️ **GitHub.com Fallback** ⚠️