Why IAD Matters
As biometric systems become central to digital identity, fraudsters are no longer limited to spoofing physical devices. Instead, they’re injecting deepfake videos, manipulated signals, or tampered biometric data directly into software systems — bypassing camera sensors entirely.
Injection Attack Detection (IAD) testing ensures your system can detect and respond to these advanced digital threats.
While PAD focuses on physical spoofing (e.g. masks, printed photos), IAD addresses a more sophisticated class of attacks that enter your system through virtual webcams, APIs, and malware-laced signal inputs.
What We Test
Our IAD testing is based on the CEN/TS 18099 standard — a European technical specification designed to assess the resilience of biometric systems against injection attacks.
We simulate a range of real-world injection scenarios across three attack levels:
- Level 1 – Basic:
Replayed video, screen recording, or browser-based signal replay - Level 2 – Intermediate:
Deepfake injection, synthetic biometric input, signal manipulation - Level 3 – Advanced:
Custom-crafted injections, API tampering, virtual sensor spoofing
Each test evaluates the systems susceptibility to deepfakes and the different methods of attack, focusing on synthetic biometric inputs and manipulated data.
What You’ll Receive
✔️ Structured test plan aligned with CEN/TS 18099
✔️ Injection simulation report detailing attack vectors and outcomes
✔️ Pass/fail results per attack level
✔️ Certificate of Conformity for systems that meet the criteria
✔️ Listing on our certified registry
Who Should Certify?
IAD testing is essential for:
- Facial recognition and age estimation providers
- KYC and onboarding platforms
- Biometric SDK vendors
- Identity providers integrating AV/FAE systems.
- Any system that processes biometric data remotely or via API
Useful links about Injection Attack Detection (IAD) Testing & Certification
Let's get in touch
We’ve worked with customers all over the world in a wealth of sectors, bringing our expertise to retailers, age check providers, gambling companies, entertainment providers and more. Find out how we can help your company safeguard young people and stay compliant.
Explore other services in Age Assurance
Automated continuous monitoring of online merchants that age assurance is in place and working
Find out more
ISO 27566-1 Certification is the new international gold standard for age assurance systems. Developed through the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), it provides a comprehensive framework for assessing whether an age assurance service is safe, effective, privacy-preserving, and interoperable.
Find out more
The PASS card, accredited by the Proof of Age Standards Scheme (PASS), is a trusted proof-of-age document in the UK. Discover its key features, benefits, and how it ensures secure age verification to prevent unlawful transactions. Explore the advantages of PASS scheme accreditation for organizations, enhancing credibility, ensuring legal compliance, and receiving ongoing support from appointed auditors.
Find out more
Our Ambient Lighting Analysis testing service evaluates age check systems under diverse lighting conditions to ensure optimal performance. From low-light hospitality venues to flashing lights in casinos, we ensure your system operates seamlessly in any environment, enhancing reliability and compliance.
Find out more