Despite the explosion in the application of biometric technologies, there seems to have been surprisingly little serious attention paid to ensuring the security and privacy of these applications, whether as a matter of policy or technological research. Like with most technology, particularly technology available on the open market, there is no way to make its user have benevolent intentions. It is not hard to imagine how the technology could be misused with devastating effect against, for example, people enrolled in the Federal Witness Protection Program, or operatives of covert intelligence agencies.
The MASKS project was created with a goal of establishing some basic principles for the secure handling of biometric data. Our methods for finding such principles are deliberately adversarial, a so-called red team approach. We are trying to understand how to reliably prevent a biometric recognition system from performing as intended. The knowledge gained in such an approach can then be used to thwart deliberate misuse of biometric data, as well as allowing us to improve the reliability of biometric components of our own secure systems.
While the project is currently focused specifically on studying human facial images and the automated systems for recognizing them, we are developing theoretical principles general enough to encompass other biometrics, and possibly other personally identifiable patterns as well, such as shopping habits.
In addition to the information on this page, the published accomplishments of the project can be reviewed in the following papers:
A representative subset of these images were marked up using VisageMap, a facial image segmentation tool developed for the project. The fully annotated versions of selected MASKS photos will be made available for research purposes soon. The source code for VisageMap will also be made available under an open source license.
The details of how the annotation was done and what the first set of results to come from this research have been published as MASKS: Maintaining Anonymity by Sequestering Key Statistics.
Last Modified: November 15, 2009 (04:40:58 PM).