Robustness of Facial Recognition to GAN-based Face-morphing Attacks

• URL: http://arxiv.org/abs/2012.10548v1
• Date: Fri, 18 Dec 2020 23:06:20 GMT
• Title: Robustness of Facial Recognition to GAN-based Face-morphing Attacks
• Abstract summary: We identify two new, GAN-based methods that an attacker may already have in his arsenal. Each method is evaluated against state-of-the-art facial recognition (FR) algorithms. We demonstrate that improvements to the fidelity of FR algorithms do lead to a reduction in the success rate of attacks provided morphed images.
• Score: 3.3734683025502723
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Face-morphing attacks have been a cause for concern for a number of years. Striving to remain one step ahead of attackers, researchers have proposed many methods of both creating and detecting morphed images. These detection methods, however, have generally proven to be inadequate. In this work we identify two new, GAN-based methods that an attacker may already have in his arsenal. Each method is evaluated against state-of-the-art facial recognition (FR) algorithms and we demonstrate that improvements to the fidelity of FR algorithms do lead to a reduction in the success rate of attacks provided morphed images are considered when setting operational acceptance thresholds.

Related papers

• Find the Differences: Differential Morphing Attack Detection vs Face Recognition [3.4709432024347247]
  We argue that face recognition and differential morphing attack detection (D-MAD) in principle perform very similar tasks.<n>We show that currently used decision thresholds inherently lead to FR systems being vulnerable to morphing attacks.<n>We propose using FR systems that are already in place for morphing detection and introduce a new evaluation threshold that guarantees an upper limit to the vulnerability to morphing attacks.
  arXiv  Detail & Related papers  (2026-04-16T07:48:32Z)
• Arc2Morph: Identity-Preserving Facial Morphing with Arc2Face [4.395715188789422]
  Face morphing attacks are one of the most challenging threats to face recognition systems used in electronic identity documents.<n>We propose a novel face morphing technique based on Arc2Face, an identity-conditioned face foundation model.<n> Experimental results show that the proposed deep learning-based approach achieves a morphing attack potential comparable to that of landmark-based techniques.
  arXiv  Detail & Related papers  (2026-02-18T16:11:11Z)
• MorphGuard: Morph Specific Margin Loss for Enhancing Robustness to Face Morphing Attacks [0.0]
  We propose a novel approach for training deep networks for face recognition with enhanced robustness to face morphing attacks.<n>Our method modifies the classification task by introducing a dual-branch classification strategy that effectively handles the ambiguity in the labeling of face morphs.<n>Our strategy has been validated on public benchmarks, demonstrating its effectiveness in enhancing robustness against face morphing attacks.
  arXiv  Detail & Related papers  (2025-05-15T17:00:16Z)
• UniForensics: Face Forgery Detection via General Facial Representation [60.5421627990707]
  High-level semantic features are less susceptible to perturbations and not limited to forgery-specific artifacts, thus having stronger generalization. We introduce UniForensics, a novel deepfake detection framework that leverages a transformer-based video network, with a meta-functional face classification for enriched facial representation.
  arXiv  Detail & Related papers  (2024-07-26T20:51:54Z)
• Quadruplet Loss For Improving the Robustness to Face Morphing Attacks [0.0]
  Face Recognition Systems are vulnerable to sophisticated attacks, notably face morphing techniques. We introduce a novel quadruplet loss function for increasing the robustness of face recognition systems against morphing attacks.
  arXiv  Detail & Related papers  (2024-02-22T16:10:39Z)
• Exploring Decision-based Black-box Attacks on Face Forgery Detection [53.181920529225906]
  Face forgery generation technologies generate vivid faces, which have raised public concerns about security and privacy. Although face forgery detection has successfully distinguished fake faces, recent studies have demonstrated that face forgery detectors are very vulnerable to adversarial examples.
  arXiv  Detail & Related papers  (2023-10-18T14:49:54Z)
• Fused Classification For Differential Face Morphing Detection [0.0]
  Face morphing, a presentation attack technique, poses significant security risks to face recognition systems. Traditional methods struggle to detect morphing attacks, which involve blending multiple face images. We propose an extended approach based on fused classification method for no-reference scenario.
  arXiv  Detail & Related papers  (2023-09-01T16:14:29Z)
• RAF: Recursive Adversarial Attacks on Face Recognition Using Extremely Limited Queries [2.8532545355403123]
  Recent successful adversarial attacks on face recognition show that, despite the remarkable progress of face recognition models, they are still far behind the human intelligence for perception and recognition. In this paper, we propose automatic face warping which needs extremely limited number of queries to fool the target model. We evaluate the robustness of proposed method in the decision-based black-box attack setting.
  arXiv  Detail & Related papers  (2022-07-04T00:22:45Z)
• Restricted Black-box Adversarial Attack Against DeepFake Face Swapping [70.82017781235535]
  We introduce a practical adversarial attack that does not require any queries to the facial image forgery model. Our method is built on a substitute model persuing for face reconstruction and then transfers adversarial examples from the substitute model directly to inaccessible black-box DeepFake models.
  arXiv  Detail & Related papers  (2022-04-26T14:36:06Z)
• Robust Physical-World Attacks on Face Recognition [52.403564953848544]
  Face recognition has been greatly facilitated by the development of deep neural networks (DNNs) Recent studies have shown that DNNs are very vulnerable to adversarial examples, raising serious concerns on the security of real-world face recognition. We study sticker-based physical attacks on face recognition for better understanding its adversarial robustness.
  arXiv  Detail & Related papers  (2021-09-20T06:49:52Z)
• MIPGAN -- Generating Strong and High Quality Morphing Attacks Using Identity Prior Driven GAN [22.220940043294334]
  We present a new approach for generating strong attacks using an Identity Prior Driven Generative Adversarial Network. The proposed MIPGAN is derived from the StyleGAN with a newly formulated loss function exploiting perceptual quality and identity factor. We demonstrate the proposed approach's applicability to generate strong morphing attacks by evaluating its vulnerability against both commercial and deep learning based Face Recognition System.
  arXiv  Detail & Related papers  (2020-09-03T15:08:38Z)
• Temporal Sparse Adversarial Attack on Sequence-based Gait Recognition [56.844587127848854]
  We demonstrate that the state-of-the-art gait recognition model is vulnerable to such attacks. We employ a generative adversarial network based architecture to semantically generate adversarial high-quality gait silhouettes or video frames. The experimental results show that if only one-fortieth of the frames are attacked, the accuracy of the target model drops dramatically.
  arXiv  Detail & Related papers  (2020-02-22T10:08:42Z)
• On the Robustness of Face Recognition Algorithms Against Attacks and Bias [78.68458616687634]
  Face recognition algorithms have demonstrated very high recognition performance, suggesting suitability for real world applications. Despite the enhanced accuracies, robustness of these algorithms against attacks and bias has been challenged. This paper summarizes different ways in which the robustness of a face recognition algorithm is challenged.
  arXiv  Detail & Related papers  (2020-02-07T18:21:59Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.