Security Basics mailing list archives

Re: Biometric Access logs


From: Kurt Buff <kurt.buff () gmail com>
Date: Mon, 2 Mar 2009 11:27:45 -0800

What biometric technology is used - fingerprint, retina scan, hand
geometry, or something else?

You have a few choices, IMHO:

1) couple the biometrics with a standard swipe card

2) get biometric data set up for all employees and visitors who might
conceivably be able to come near the server room

3) get a camera setup that records failed login attempts (or even all
attempts), so that you can get a face associated with the login
attempt. This may require more than one camera, depending on your
requirements.

Kurt

On Mon, Mar 2, 2009 at 04:24, John <tornado579 () gmail com> wrote:
Hi All,

Request you to give your views on the following issue.

We have Biometric access controlled server room door for better security.
There is no doubt that Biometric proovides enhanced protection. But the
issue with this access control mechanism is that it is not possible to
review and analyze denied attempt logs since the logs only shows that
access was denied, but to whom and other details are obvisouly not shown
because only few users from IT department only have the access to the server
room.
It is not like Swipe cards based Access control where all the employees are
registered with the access control system.
In that it becomes easily possible to trace who tried to access what and
when.

We faced issue in the audit because of this and auditor insisted that the
review and analysis of the logs for the Biometric controlled area needs to
be done.

What can be done in this scenario like this? Please give in your comments.

Thanks.




Current thread: