Biometrics vs. biostatistics
What is the difference between biometrics and biostatistics?

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Though biometrics and biostatistics sound like the same thing, they actually are from two different fields. Biometrics is an IT security term, and biostatistics is a term used in the field of biology.

The confusion might be from the use of the word "biometry," which sounds similar to biometrics, interchangeably with biostatistics. But biostatistics, again, also called biometry, is the application of statistics to biology, particularly in the fields of medicine and agriculture.

Further adding to the confusion, biometry used to be called biometrics during the early 20th century and is still called so even now from time to time, particularly by the International Biometric Society, a trade group promoting biostatistics.

That confusion aside, biometrics – as commonly known in the IT security field – is a type of authentication system. Biometrics uses the physical characteristics of an individual, such as their fingerprint, iris, face or voice pattern, to authenticate to a computer system.

Biometrics is one of the three factors of authentication. The three factors are something you know, something you have or something you are. Something you know would be something the user memorizes like a user ID or password. Something you have would be a card or device with authentication credentials that the user carries, like a smart card or one-time password (OTP) token. Biometrics is the third factor, something you are, such as the physical characteristics just mentioned.

The three factors can be used individually, in what is called a single-factor system, or combined in what would be called multifactor authentication. The idea behind multifactor authentication is that it's a multi-layered defense. If a malicious user breaks one factor, they'd still have to break the second or third to gain access.

For more information:

  • Learn what precautions to take if corporate biometric data is stolen.
  • Joel Dubin offers advice on how to choose the right biometric product for your enterprise.
  • This was first published in February 2008