Fingerprints being the most widely employed biometric trait, due to their high acceptability and low sensing cost, have replaced the traditional methods of human authentication. Although, the deployment of these biometrics-based recognition systems is accelerating, they are still susceptible to spoofing attacks where an attacker presents a fake artifact generated from silicone, candle wax, gelatin, etc. To safeguard sensor modules from these attacks, there is a requirement of an anti-deception mechanism known as fingerprint spoof detectors (FSD) also known as anti-spoofing mechanisms. A lot of research work has been carried out to design fingerprint anti-spoofing techniques in the past decades and currently, it is oriented towards deep learning (DL)-based modeling. In the field of fingerprint anti-spoofing, since the 2014, the paradigm has shifted from manually crafted features to deep features engineering. Hence, in this study, we present a detailed analysis of the recent developments in DL based FSDs. Additionally, we provide a brief comparative study of standard evaluation protocols that include benchmark anti-spoofing datasets as well as performance evaluation metrics. Although significant progress has been witnessed in the field of DL-based FSDs, still challenges are manifold. Therefore, we investigated these techniques critically to list open research issues along with their viable remedies that may put forward a future direction for the research community. The majority of the research work reveals that deep feature extraction for fingerprint liveness detection demonstrates promising performance in the case of cross-sensor scenarios. Though convolution neural network (CNN) models extract deep-level features to improve the classification accuracy, their increased complexity and training overhead is a tradeoff between both the parameters. Furthermore, enhancing the performance of presentation attack detection (PAD) techniques in the cross-material scenario is still an open challenge for researchers.

Abstract With time smart services have become more domineering than ever before however, the pertinent security considerations fade to correspond with growing heterogeneity in the internet of things (IoT) devices and new technologies coupled with resource constraints, crafting IoT‐based systems more susceptible to cyber‐attacks. To ensure a secure IoT environment, pro‐active security mechanisms, like scanning vulnerabilities and prioritizing to remediate them timely, should be embedded in the system. Motivated by the facts, we in this paper, highlight the state of the art of several works trading with a common vulnerability scoring system (CVSS), its limitations, and the emendations recommended to conclude its maturity. CVSS is an industry standard that has been adopted worldwide to quantify the vulnerabilities in organizations for IT and IoT‐based systems. The vulnerabilities mathematical score coalesces with environmental knowledge for finding attack paths and apt score for prioritization. The specific functionality and exclusive dynamics of IoT and cyber‐physical systems in comparison to traditional computer networks, make the legacy cyber‐security exemplars unfit for these advanced networks. This paper studies the relevance of CVSS for smart systems and present an intelligent vulnerability quantification framework for IoT systems grounded on the CVSS v3.1 framework with threat intelligence and machine learning models. Further by applying blockchain technology in the proposed framework, the issues concerning security, lack of trust, and privacy possibly will resolve by hiring a smart contract.