Engage Goals: EGO0001 Expose
Engage Approach: EAP0002 Detect
Engage Actions: EAC0010 Peripheral Management, EAC0015 Information Manipulation
Name of Element: Deceptive Biometric Authentication
Description of Element:
Goal: Detect attackers attempting to bypass or spoof biometric authentication mechanisms.
Approach: Creating deceptive biometric authentication prompts that capture attacker attempts or redirect them to decoy systems.
Deploy fake biometric authentication prompts that appear to process biometric data but instead capture attacker attempts, log their activities, or redirect them to controlled environments.
Technical Context:
This element requires integration with the biometric authentication system. This can be achieved through custom software development, API hooking, or by manipulating existing biometric authentication configurations. This aligns with the MITRE ATT&CK technique T1110 (Brute Force).
Other:
This element can be combined with deceptive user interfaces or fake error messages to make the decoy biometric prompts more convincing.