Skip to content

Remove ATE_IND.1 reference #72

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
woodbe wants to merge 3 commits into
base: working
Choose a base branch
from
Open

Remove ATE_IND.1 reference #72

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
aa12cc3
Remove ATE_IND.1 reference
woodbe Sep 2, 2025
eb16f9b
Update toolbox.adoc
woodbe Sep 2, 2025
f3ec16c
Update toolbox.adoc
woodbe Jan 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 6 additions & 2 deletions toolbox.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
== Introduction
The TOE may be vulnerable to presentation attacks where attackers attempt to subvert the biometric enrolment or verification by presenting the Presentation Attack Instruments (PAIs). There is a wide range of PAIs that can be used, including natural biometric characteristics, such as dead eyes, or artefacts created from copied or faked characteristics. Using natural biometric characteristics is out of scope of <<BIOPP-Module>> evaluation and the evaluator shall only use created artefacts to evaluate the TOE.

The toolbox defines the common artefacts for each biometric modality based on publicly available information (e.g. research papers), experiences and knowledge shared among the BIO-iTC members. The evaluator needs to read the <<BIOSD>> Section 7 as it explains how the evaluator shall use the toolbox during the ATE_IND.1 (Independent testing) and AVA_VAN.1 (Penetration testing) evaluation for Presentation Attack Detection (PAD) in detail. In this evaluation, PAD is being measured using Imposter Attack Presentation Attack Rate (IAPAR), which is a full system review as opposed to a component level review which would evaluate the matching subsystem and PAD subsystem separately.
The toolbox defines the common artefacts for each biometric modality based on publicly available information (e.g. research papers), experiences and knowledge shared among the BIO-iTC members. The evaluator needs to read the <<BIOSD>> Section 7 as it explains how the evaluator shall use the toolbox during the ATE_IND (Independent testing) and AVA_VAN (Penetration testing) evaluation for Presentation Attack Detection (PAD) in detail. In this evaluation, PAD is being measured using Imposter Attack Presentation Attack Rate (IAPAR), which is a full system review as opposed to a component level review which would evaluate the matching subsystem and PAD subsystem separately.

This overview is originally developed for evaluation activities for FIA_MBV_EXT.3, however, the evaluator can apply the same principles to evaluation activities for FIA_MBE_EXT.3.

Expand Down Expand Up @@ -240,7 +240,7 @@ The results of the presentation of artefacts is defined as:

|===

== Guidance for Independent Testing (ATE_IND.1)
== Guidance for Independent Testing (ATE_IND)
For independent testing, this guidance is common for all toolboxes. More specific guidance for a specific biometric modality is provided in each toolbox.

This is in addition to guidance in <<Common guidance for Independent & Vulnerability Testing>>.
Expand Down Expand Up @@ -379,4 +379,8 @@ ISO/IEC 19989 “Information security — Criteria and methodology for security
|October 15, 2024
|Update to support new PAD test levels

|1.3
|September 2, 2025
|Remove specific reference to ATE_IND.1 and AVA_VAN.1 to support EAL2 or higher evaluations

|===