Question

1.Can you think of a way that FRRs problem could be reduced in fingerprint scanning?

2. What role does SPI play in the filtering mechanism for examining packets?

Answer 1

Let us discuss in detail about the FRRs and SPI to understand the solutions for the given problem better:

FRR:

• The full form of FRR is False Rejection Rate and it is actually the rate of rejecting the valid users
• In simple terms, FRR is the ratio of the number of false rejections to the number of identification attempts and it defines the performance factor of the biometric system.
• In other words, False Rejection Rate is the measure in the fingerprint scanning system which describes the security systems which are failed to validate or verify the user through biometric.
• False Rejection Rate does not require to indicate a flaw in the fingerprint scanning system or biometric system because sometimes people won't place the registered fingers properly that will lead in rejecting the member in the identification through biometric or sometimes there will be some dust or dirt that will again cause biometric to reject the member in identification.

So, now coming to the first statement: (the way that FRRs problem could be reduced in fingerprint scanning)

• In order to reduce the FRR (False Rejection Rate) problem, you have to allow the type-2 errors (False Acceptance Rate).
• False Acceptance Rate (FAR) is the rate of accepting the invalid user to the total number of authentications.
• If you won't allow this both errors(FRR and FRR) in biometric systems, then you will be having a strict biometric system. That will result in having a high (False Rejection Rate).
• It is actually a functionality vs security balance, if you are not very much concerned about security, then you can allow FAR such that FRR will be reduced for sure.
• If you are concerned about the data, then you have to allow FRR such that FAR will be reduced.

SPI role in the filtering mechanism for examining packets:

• The full form of SPI in the Fingerprint Scanning system is a Stateful packet inspection.
• Stateful packet inspection (SPI) filtering packets in outgoing communication is simple and requires less cost since the packets from and to are compared against the connection table and allowed if there is a match.
• SPI firewalls will be used for SPI filtering and additionally, it provides the user a facility to add functionalities.
• The additional roles o SPI is enhanced security and increased speed in the communication,
• connection table is the table that is being created while traffic is forwarding through the firewall and stateful inspections of packets create slots in session flow.
• This table contains all the information regarding transmission like destination IP, Source IP, port numbers, etc.,