BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

IA-05(17) Presentation Attack Detection for Biometric Authenticators

NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
first version loaded IA part of IA-5

Title

Presentation Attack Detection for Biometric Authenticators

Control

Employ presentation attack detection mechanisms for biometric-based authentication.

Discussion

Biometric characteristics do not constitute secrets. Such characteristics can be obtained by online web accesses, taking a picture of someone with a camera phone to obtain facial images with or without their knowledge, lifting from objects that someone has touched (e.g., a latent fingerprint), or capturing a high-resolution image (e.g., an iris pattern). Presentation attack detection technologies including liveness detection, can mitigate the risk of these types of attacks by making it difficult to produce artifacts intended to defeat the biometric sensor.

Related controls

ac-7

Assessment objective

IA-05(17) presentation attack detection mechanisms are employed for biometric-based authentication.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).