Skip to content

Commit 5f559ba

Browse files
authored
Merge pull request #7566 from nabilat/user/nabilat/add-web-caution
[SCOPED] Adding security disclaimer for using the web solution
2 parents 207b98a + 9b03f6c commit 5f559ba

File tree

2 files changed

+6
-2
lines changed

2 files changed

+6
-2
lines changed

articles/ai-services/computer-vision/concept-face-liveness-detection.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,8 @@ We do not store any images or videos from the Face Liveness Check. No image/vide
7474

7575
## Security
7676

77-
We include additional runtime application self-protections (RASP), provided by [GuardSquare]( https://www.guardsquare.com/blog/why-guardsquare), in our Mobile SDKs (iOS and Android).
77+
> [!IMPORTANT]
78+
> It is important for developers to be aware of the security implications when choosing the right solution — either Web or Mobile. While both the Web and Mobile solutions conform to iBeta Level 1 and Level 2 ISO/IEC 30107-3 PAD standards, the Mobile solution includes additional Runtime Application Self-Protections (RASP) provided by [GuardSquare](https://www.guardsquare.com/blog/why-guardsquare), which are not available in the Web solution. Notably, the Web solution has limitations inherent to running in browser environments and may be more vulnerable to certain attacks — for example, those involving virtual cameras — due to browser sandbox restrictions that limit runtime attack detection. We recommend using the Mobile solution whenever possible. If you choose the Web solution, it is critical that you closely follow the [shared-responsibility best practices](./liveness-detection-shared-responsibility.md) and consider implementing additional safeguards and monitoring to mitigate potential runtime attacks.
7879
7980
## Abuse Detection
8081

articles/ai-services/computer-vision/liveness-detection-shared-responsibility.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,10 @@ ms.topic: conceptual
1212

1313
# Shared responsibility for Face liveness detection
1414

15-
It's the shared responsibility between Azure and its customers to build a secure and compliant face liveness solution. You can learn more about Azure's shared responsibility at [Shared responsibility in the cloud](/azure/security/fundamentals/shared-responsibility). Understanding the shared responsibility model is especially important for liveness detection solutions. This document covers three aspects of how to secure and monitor your solution.
15+
It's the shared responsibility between Azure and its customers to build a secure and compliant face liveness solution. You can learn more about Azure's shared responsibility at [Shared responsibility in the cloud](/azure/security/fundamentals/shared-responsibility). Understanding the shared responsibility model is especially important for liveness detection solutions. This document covers various aspects of how to secure and monitor your solution.
16+
17+
> [!IMPORTANT]
18+
> It is important for developers to be aware of the security implications when choosing the right solution — either Web or Mobile. While both the Web and Mobile solutions conform to iBeta Level 1 and Level 2 ISO/IEC 30107-3 PAD standards, the Mobile solution includes additional Runtime Application Self-Protections (RASP) provided by [GuardSquare](https://www.guardsquare.com/blog/why-guardsquare), which are not available in the Web solution. Notably, the Web solution has limitations inherent to running in browser environments and may be more vulnerable to certain attacks — for example, those involving virtual cameras — due to browser sandbox restrictions that limit runtime attack detection. We recommend using the Mobile solution whenever possible. If you choose the Web solution, it is critical that you closely follow the guidance in this document and consider implementing additional safeguards and monitoring to mitigate potential runtime attacks.
1619
1720
## Secure the connections
1821

0 commit comments

Comments
 (0)