How is this vulnerability possible? How is FMR linked with human factor vulnerabiltiy? If there is a vulnerability what are ways to safeguard or mitigate such issues?
closed as unclear what you're asking by AJ Henderson, Xander, Steve, S.L. Barth, Matthew Oct 27 '17 at 16:18
Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
The false match rate is the rate at which the wrong person is accepted as the user trying to authenticate. Without changing other components of the system the easy way to reduce the false match rate is to make match criteria stricter.
Biometrics aren't perfect. Different angles, dirt build up on a finger, lighting, background sensor noise, movement etc. mean the signal from the same person can be slightly different.
If you make the criteria stricter not only do you reduce the false match rate but you increase the false non-match rate (when the correct person is rejected). This causes user frustration. Frustrated users find ways around your system - in the same way forcing someone to change their password leads to "password1", "password2"... etc.
If they can turn it off and use something else they do. It can also be indirect - if your users continually have to call in an admin to override a failed auth then it becomes a routine part of the system and they stop verifying the users identity properly.