Independent testing by BixeLab achieved CEN/TS 18099 Substantial-level validation with zero successful attacks across 900 attempts and a false rejection rate of just 0.67%.
IDEMIA Public Security, the leading provider of secure and trusted biometric-based solutions, today announced that its WebCapture SDK has successfully completed an independent assessment designed to test its ability to detect and block increasingly sophisticated biometric fraud attacks, including deepfakes and AI-generated identities.
The assessment, conducted by Bixelab, an independent testing firm, evaluated whether attackers could trick the system by injecting fake biometric data into the identity verification process. Across 900 attack attempts, none successfully bypassed the system. These tests included 10 different injection attack instrument species across multiple attack methods, including deepfakes, face swaps, replay attacks, morphing, and avatar reenactment attacks. BixeLab concluded that, within the defined evaluation scope, WebCapture SDK v3.38 satisfied the requirements of CEN/TS 18099:2024 aligned Level 2 (Substantial) assessment for the tested injection attack instruments and methods.
"As deepfakes and injection attacks become more sophisticated and accessible, independent testing is increasingly important to ensure biometric systems can withstand real-world threats," said Ted Dunstone, CEO of BixeLab. "Testing against recognized standards such as CEN/TS 18099 provides organizations with objective evidence that these protections work in practice."
In addition to blocking fraudulent attempts, the technology maintained strong performance for genuine users. During the bona fide baseline testing, only two classification errors were observed across 300 legitimate user transactions, resulting in a bona fide classification error rate (BPCER) of 0.67%.
"As AI-driven fraud continues to evolve, organizations need confidence that their identity verification systems can keep pace," said Virginie Flam, SVP and Global Head of Smart Biometrics, IDEMIA Public Security. "This independent validation demonstrates our commitment to helping organizations protect against emerging threats while maintaining a simple experience for legitimate users."
The evaluation was performed in alignment with CEN/TS 18099 framework at the substantial assurance level, a leading industry standard for assessing resistance to biometric injection attacks. The results demonstrated strong protection against a wide range of known attack methods.
As fraudsters increasingly use AI-generated content to impersonate real people, organizations are looking for stronger defenses against deepfakes and other synthetic identity attacks. IDEMIA Public Security's identity verification technology combines biometric liveness detection with advanced fraud prevention capabilities to help ensure that the person completing an identity verification process is physically present and authentic. The independent evaluation provides evidence of the solution's resistance to the biometric injection attack methods and instruments tested.
By combining trusted biometrics, advanced liveness detection, and fraud prevention capabilities, IDEMIA Public Security helps organizations verify identities with confidence while delivering secure, seamless digital experiences.
Product Adopted:Biometrics