Biometric Engine
The aspect of a biometric security system that administers the biometric data during the enrollment, capture, extraction, comparison and matching stages of the process. The biometric engine is a software program that works in conjunction with the hardware devices that a biometric system uses.
生物特征引擎
它是生物特征安全系统的一部分，管理这个过程的登记、俘获、提取、比较和匹配各个阶段中的生物特征数据。生物特征引擎是与生物特征系统所用的硬件设备一起工作的软件程序。
Enrollee
In a biometric security system, a person who has a reference template in the system's database.
登录者
在生物特征安全系统中，系统数据库中拥有基准样本的人员。
Impostor
In a biometric security system, a person who submits a biometric sample in an attempt (either intentional or unintentional) to gain access to a system using the identity of another enrollee.
Session Hijacking
假冒者
在生物特征安全系统中，提交生物特征样本，企图利用另一个登录者的身份（有意或无意）进入系统的人。
Session Hijacking
Also referred to as TCP session hijacking, a security attack on a user session over a protected.network. The most common method of session hijacking is called IP spoofing, when an attacker uses source-routed IP packets to insert commands into an active communication between two nodes on a network and disguising itself as one of the authenticated users. This type of attack is possible because authentication typically is only done at the start of a TCP session. Another type of session hijacking is known as a man-in-the-middle attack, where the attacker, using a sniffer, can observe the communication between devices and collect the data that is transmitted.
会话劫持
也叫 TCP会话劫持，它是在受保护的网络上对用户的会话进行安全攻击。会话劫持最常见的方式叫IP欺骗，攻击者利用源路由的IP包，将命令插入网络上两节点之间正在进行的通信中，把自己伪装成一个被认证过的用户。由于通常只在TCP会话开始时进行认证，所以此类攻击是可能的。另一类会话劫持被叫做中间人攻击，攻击者利用探测程序，可以观测到设备之间的通信，并收集发送出去的数据。
文章来源于领测软件测试网 https://www.ltesting.net/
