Defending against attacks on biometrics-based authentication