论文标题
用T恤攻击面部识别:数据库,漏洞评估和检测
Attacking Face Recognition with T-shirts: Database, Vulnerability Assessment and Detection
论文作者
论文摘要
面部识别系统被广泛部署用于生物识别验证。尽管如此,众所周知,没有任何保障措施,面部识别系统极易受到演示攻击的影响。为了应对这个安全问题,已经提出了几种用于检测演示攻击的有前途的方法,这些方法显示了现有基准的高性能。但是,一个持续的挑战是表现攻击检测方法的概括是未见和新的攻击类型。为此,我们建议使用100个独特的演示攻击工具提出了1,608个T恤攻击的新T恤面孔攻击(TFPA)数据库。在一项广泛的评估中,我们表明这种攻击可以损害面部识别系统的安全性,并且一些以流行基准训练的最新攻击检测机制无法牢固地推广到新攻击。此外,我们提出了三种用于检测T恤攻击图像的新方法,其中一种依赖于真正的图像深度图和T恤攻击之间的统计差异,这是一种仅根据BONA FIDE RGB图像提取的功能的异常检测方法,以及一种实现竞争性检测性能的融合方法。
Face recognition systems are widely deployed for biometric authentication. Despite this, it is well-known that, without any safeguards, face recognition systems are highly vulnerable to presentation attacks. In response to this security issue, several promising methods for detecting presentation attacks have been proposed which show high performance on existing benchmarks. However, an ongoing challenge is the generalization of presentation attack detection methods to unseen and new attack types. To this end, we propose a new T-shirt Face Presentation Attack (TFPA) database of 1,608 T-shirt attacks using 100 unique presentation attack instruments. In an extensive evaluation, we show that this type of attack can compromise the security of face recognition systems and that some state-of-the-art attack detection mechanisms trained on popular benchmarks fail to robustly generalize to the new attacks. Further, we propose three new methods for detecting T-shirt attack images, one which relies on the statistical differences between depth maps of bona fide images and T-shirt attacks, an anomaly detection approach trained on features only extracted from bona fide RGB images, and a fusion approach which achieves competitive detection performance.