Towards the Security Evaluation of Biometric Authentication Systems