IPhone X Face ID a Facial Biometrics Catalyst?

Apples new multi-factor authentication technology receives mixed reviews in separate surveys.

Apples iPhone X is expected to arrive at
Apple Stores on Friday
, but some security professionals are uneasy about the trustworthiness of its new facial recognition feature.
Facial recognition biometrics has been around for decades but hasnt taken off. But Apples Face ID in the iPhone X has the potential to spur adoption of facial biometric for multi-factor authentication in the enterprise, akin to how ApplesTouch ID has spurred fingerprint biometrics in mobile device management systems, security experts say.
Employee adoption of new technology, however, often informs enterprise adoption, experts say.
Meanwhile, two new, separate surveys, show that the degree that end-users and security professionals trust Apples Face ID is mixed.
Face ID Faceoff
According to Bitglasss BYOD and Identity
report
released today - a survey of more than 200 IT and security professionals - 60% have reservations about Apples Face ID. Top concerns among 40% of respondents include the accuracy of face detection, while 30% worry about its ability to prevent unauthorized access.
Even though it works similar as Touch ID, everyone has concerns with the new technology, says Salim Hafid, Bitglass project manager. I expect organizations that allow Touch ID will allow Face ID, but there will be a wait-and-see approach for a lot of organizations.
In addition to the Bitglass survey, other infosec experts in a Wired
post
recently
questioned the security
of Face ID. In September, Apple issued a
whitepaper
on its Face ID technology.
But a majority of end-users, or employees, expect Face ID to be effective for multifactor authentication of users. According to a Secret Double Octopus
survey
of 522 employees at midsized- to large enterprises, 81% of respondents expect Face ID to be trustworthy in its accuracy in facial recognition.
We were extremely surprised by these results, since no users have yet tried the iPhone X and used Face ID, says Amit Rahav, vice president of marketing for Secret Double Octopus.
However, 73% of survey respondents say they would prefer the facial recognition feature over passwords in a work environment. That result is comparable to the 70% of respondents who say Face ID will be extremely or very trustworthy, according to the survey.
Although Face ID may be viewed as viable for multifactor authentication, the National Institute of Standards and Technology (NIST) in its digital identity
guidelines
issued earlier this year noted biometrics, in general, should not be used for single authentication. Biometrics, when employed as a single factor of authentication, do not constitute acceptable secrets for digital authentication — but they do have their place in the authentication of digital identities, the NIST guidelines said.
Mark Clifton, CEO of Princeton Identity, says some efforts are currently underway for incorporating facial recognition in an enterprise environment. If you look at the past, Apples Touch ID was a big boom for the biometrics industry, Clifton says. You see a lot of enterprises and DHS [Department of Homeland Security] doing trials with facial recognition in airports, and of this nature.
Currently, fingerprints are the most popular form of biometric two-factor authentication, but facial recognition is growing fast, followed by iris-recognition, Clifton says. These modalities will all move forward as consumer come forward and use them.
Ant Allan, a Gartner analyst, says hes skeptical of Face IDs impact on the use of biometrics for multifactor authentication in enterprises.
I can say that the bottom line is, [Face ID] makes little difference from Touch ID, Allan says. Whatever its inherent superiority, the lowest common denominator is still the device passcode, which remains as a way of unlocking your iPhone.
That said, however, Clifton says he has seen a change in the past year in the number of mobile users who rely on phone biometrics.
At a conference I attended a year ago, there were 500 attendees, and when asked how many used the biometrics on their phone, maybe 30% to 40% raised their hand, Clifton recalls. Now, at the sameconference a couple weeks agowhen asked the same question, 100% said they used it. I think phones have definitely been a catalyst.
Related Content:
Researchers Hack Faces In Biometric Facial Authentication Systems
Experts Weigh Pros, Cons of FaceID Authentication in iPhone X
Behavioral Biometrics On The Rise At RSA Conference
Join Dark Reading LIVE for two days of practical cyber defense discussions. Learn from the industry’s most knowledgeable IT security experts. Check out the INsecurity
agenda here
.

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps