@conference {
	title = {AUTHENTICATION OF FINGERPRINT SCANNERS},
	author = {Ivanov, Vladimir I., Baras, John S.},
	year = {2011},
	month = {05/2011},
	abstract = {Fingerprint scanners have unique patterns that can be used to distinguish one scanner from another one. The pattern, which we call scanner pattern, stems from the variability of device characteristics at silicon level and is caused by imperfections of the conversion from the input to the scanner (i.e., the object applied to it) to its output (i.e., the digital image). The scanner pattern is a sufficiently unique and persistent intrinsic characteristic of the fingerprint scanners even to those of the same technology, manufacturer, and model. We propose a simple and extremely accurate algorithm that is able to distinguish the pattern of one scanner from the pattern of another scanner of exactly the same model by extracting the pattern from a single image, acquired with each scanner. In this way, the scanner pattern can be used to enhance the security of a biometric system by authenticating the scanner, used to acquire a particular fingerprint image, and thus detect attacks on the scanner. Combining the biometric authentication with a scanner authentication leads to a two-part authentication, which we call bipartite authentication, that verifies both the identity of the user and the {\textquotedblleft}identity{\textquotedblright} of the fingerprint scanner.},
	address = {Prague, Czech Republic},
	booktitle = {1993 IEEE International Conference on Acoustics, Speech, and Signal Processing (ICASSP 2011)},
	pages = {pp.  1912-1915}
}
@conference {
	title = {Compositional Framework for System Security with Multi-metric Optimization"},
	author = {Baras, John S., Jiang, Tao., Somasundaram, Kiran K., Ivanov, Vladimir I.},
	year = {2010},
	month = {03/2010},
	abstract = {The objective of the proposed research is to develop a compositional framework and methods for~performance vs security tradeoffs via multi-criteria optimization of system security, and therefore it aligns~with problem statement 2: {\textquotedblleft}Security Framework.{\textquotedblright} We propose to study a top-down approach ~for~optimizing (1) the security metric(s) of a composite system viewed as a bivariate function of its~subsystems{\textquoteright} security and performance metrics under given constraints and (2) the composition of~subsystems that provides higher system security than that of the composition of the same subsystems~driven solely by performance maximization. In this way, we reconcile the trade-off between security and~performance by introducing a holistic, multi-objective solution that satisfies both the performance and the~security requirements for the system, by overcoming the problem of compartmentalized security solutions~and thus achieving the {\textquotedblleft}best value{\textquotedblright} of the system. Our framework delineates methods for achieving~provably secure composition of secure subsystems and system components {\textendash} a critical problem area~where almost all current results demonstrate infeasibility of achieving compositional security.},
	address = {Washington DC},
	booktitle = {SERC Security Workshop}
}
@conference {
	title = {Securing the Communication of Medical Information Using Local Biometric Authentication and Commercial Wireless Links},
	author = {Ivanov, Vladimir I., Yu, Paul L., Baras, John S.},
	year = {2009},
	month = {10/2009},
	abstract = {Medical information is extremely sensitive in nature  a compromise, such as eavesdropping or tampering by a malicious third party, may result in identity theft, incorrect diagnosis and treatment, and even death. Therefore, it is important to secure the transfer of the medical information from its source, i.e., the patient, to the system that collects and records it or its technology adoption will face a strong resistance from the users. We consider the scenario where a patient has a portable, wireless medical device that transfers the medical information to a remote server. We decompose this problem into two sub-problems and propose security solutions to each of them: (a) to secure the link between the patient and the portable device, and (b) to secure the link between the portable device and the network. Thus, we push the limits of the network security to the cutting edge: authenticating the user using their biometric information, authenticating the device to the network at the physical layer, and strengthening the security of the wireless link with a key exchange mechanism. The proposed authentication methods can be used for recording the readings of medical data in a central database and for accessing medical records.},
	address = {Kalmar, Sweden},
	booktitle = {International Symposium on Health Information Management Research (ISHIMR 2009)},
	pages = {pp.119-127}
}
@article {
	title = {Authentication of Swipe Fingerprint Scanners},
	author = {Ivanov, Vladimir I., Baras, John S.},
	year = {2017},
	month = {09/2017},
	abstract = {Swipe fingerprint scanners (sensors) can be distinguished based on their scanner pattern{\textemdash}a sufficiently unique, persistent, and unalterable intrinsic characteristic even to scanners of the same technology, manufacturer, and model. We propose a method to extract the scanner pattern from a single image acquired by a widely-used capacitive swipe fingerprint scanner and compare it with a similarly extracted pattern from another image acquired by the same or by another scanner. The method is extremely simple and computationally efficient as it based on moving-average filtering, yet it is very accurate and achieves an equal error rate below 0.1\% for 27 swipe fingerprint scanners of exactly the same model. We also show the receiver operating characteristic for different decision thresholds of two modes of the method. The method can enhance the security of a biometric system by detecting an attack on the scanner in which an image containing the fingerprint pattern of the legitimate user and acquired by the authentic fingerprint scanner has been replaced by another image that may still contain the fingerprint pattern of the legitimate user but has been acquired by another, unauthentic fingerprint scanner, i.e., for scanner authentication.},
	pages = {pp. 2212-2226},
	volume = {Vol. 12},
	number = {No. 9},
	journal = {IEEE Transactions on Information Forensics and Security}
}
@article {
	title = {Authentication of Area Fingerprint Scanners},
	author = {Ivanov, Vladimir I., Baras, John S.},
	year = {2016},
	month = {11/2016},
	abstract = {Each area fingerprint scanner (sensor) has a unique scanner pattern that can~be used to distinguish one scanner from another. The pattern results from im-~perfections in the conversion of the signal acquired from the object applied to the scanner into a digital image. The scanner pattern is a suciently unique,~persistent, and unalterable intrinsic characteristic of the ngerprint scanners~even to those of the same technology, manufacturer, and model. We propose a~model of the image acquisition in widely-used capacitive area ngerprint scan-~ners and a method to extract the pattern from a single image and compare it~with a similarly extracted pattern from another image. The method is very~simple and computationally ecient yet extremely accurate, achieving an equal~error rate in the order of 1e-7 for 22 scanners of exactly the same model, and is~also robust in a wide range of conditions. The scanner pattern can be used to~enhance the security of a biometric system by detecting an attack in which an~image containing the ngerprint pattern of the legitimate user and acquired by~the authentic ngerprint scanner has been replaced by another image that may~still contain the ngerprint pattern of the legitimate user but has been acquired~by another, unauthentic ngerprint scanner, i.e., for scanner authentication.},
	journal = {Submitted to Journal of Pattern Recognition}
}
@article {
	title = {Securing the Communication of Medical Information Using Local Biometric Authentication and Commercial Wireless Links},
	author = {Ivanov, Vladimir I., Yu, Paul L., Baras, John S.},
	year = {2010},
	month = {09/2010},
	abstract = {Medical information is extremely sensitive in nature {\textendash} a compromise, such as eavesdropping or tampering by a malicious third party, may result in identity theft, incorrect diagnosis and treatment, and even death. Therefore, it is important to secure the transfer of medical information from the patient to the recording system. We consider a portable, wireless device transferring medical information to a remote server. We decompose this problem into two sub-problems and propose security solutions to each of them:(1) to secure the link between the patient and the portable device, and(2) to secure the link between the portable device and the network. Thus we push the limits of the network security to the edge by authenticating the user using their biometric information; authenticating the device to the network at the physical layer, and strengthening the security of the wireless link with a key exchange mechanism. The proposed authentication methods can be used for recording the readings of medical data in a central database and for accessing medical records in various settings.},
	pages = {pp.  211-223},
	volume = {Volume 16},
	number = {Number 3},
	journal = {Health Informatics Journal}
}
