Federated Generalized Face Presentation Attack Detection
- URL: http://arxiv.org/abs/2104.06595v1
- Date: Wed, 14 Apr 2021 02:44:53 GMT
- Title: Federated Generalized Face Presentation Attack Detection
- Authors: Rui Shao, Pramuditha Perera, Pong C. Yuen, Vishal M. Patel
- Abstract summary: We propose a Federated Face Presentation Attack Detection (FedPAD) framework.
FedPAD takes advantage of rich fPAD information available at different data owners while preserving data privacy.
A server learns a global fPAD model by only aggregating domain-invariant parts of the fPAD models from data centers.
- Score: 112.27662334648302
- License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
- Abstract: Face presentation attack detection plays a critical role in the modern face
recognition pipeline. A face presentation attack detection model with good
generalization can be obtained when it is trained with face images from
different input distributions and different types of spoof attacks. In reality,
training data (both real face images and spoof images) are not directly shared
between data owners due to legal and privacy issues. In this paper, with the
motivation of circumventing this challenge, we propose a Federated Face
Presentation Attack Detection (FedPAD) framework that simultaneously takes
advantage of rich fPAD information available at different data owners while
preserving data privacy. In the proposed framework, each data center locally
trains its own fPAD model. A server learns a global fPAD model by iteratively
aggregating model updates from all data centers without accessing private data
in each of them. To equip the aggregated fPAD model in the server with better
generalization ability to unseen attacks from users, following the basic idea
of FedPAD, we further propose a Federated Generalized Face Presentation Attack
Detection (FedGPAD) framework. A federated domain disentanglement strategy is
introduced in FedGPAD, which treats each data center as one domain and
decomposes the fPAD model into domain-invariant and domain-specific parts in
each data center. Two parts disentangle the domain-invariant and
domain-specific features from images in each local data center, respectively. A
server learns a global fPAD model by only aggregating domain-invariant parts of
the fPAD models from data centers and thus a more generalized fPAD model can be
aggregated in server. We introduce the experimental setting to evaluate the
proposed FedPAD and FedGPAD frameworks and carry out extensive experiments to
provide various insights about federated learning for fPAD.
Related papers
- Federated Face Forgery Detection Learning with Personalized Representation [63.90408023506508]
Deep generator technology can produce high-quality fake videos that are indistinguishable, posing a serious social threat.
Traditional forgery detection methods directly centralized training on data.
The paper proposes a novel federated face forgery detection learning with personalized representation.
arXiv Detail & Related papers (2024-06-17T02:20:30Z) - FedSIS: Federated Split Learning with Intermediate Representation
Sampling for Privacy-preserving Generalized Face Presentation Attack
Detection [4.1897081000881045]
Lack of generalization to unseen domains/attacks is the Achilles heel of most face presentation attack detection (FacePAD) algorithms.
In this work, a novel framework called Federated Split learning with Intermediate representation Sampling (FedSIS) is introduced for privacy-preserving domain generalization.
arXiv Detail & Related papers (2023-08-20T11:49:12Z) - Client-specific Property Inference against Secure Aggregation in
Federated Learning [52.8564467292226]
Federated learning has become a widely used paradigm for collaboratively training a common model among different participants.
Many attacks have shown that it is still possible to infer sensitive information such as membership, property, or outright reconstruction of participant data.
We show that simple linear models can effectively capture client-specific properties only from the aggregated model updates.
arXiv Detail & Related papers (2023-03-07T14:11:01Z) - Federated Test-Time Adaptive Face Presentation Attack Detection with
Dual-Phase Privacy Preservation [100.69458267888962]
Face presentation attack detection (fPAD) plays a critical role in the modern face recognition pipeline.
Due to legal and privacy issues, training data (real face images and spoof images) are not allowed to be directly shared between different data sources.
We propose a Federated Test-Time Adaptive Face Presentation Attack Detection with Dual-Phase Privacy Preservation framework.
arXiv Detail & Related papers (2021-10-25T02:51:05Z) - WAFFLe: Weight Anonymized Factorization for Federated Learning [88.44939168851721]
In domains where data are sensitive or private, there is great value in methods that can learn in a distributed manner without the data ever leaving the local devices.
We propose Weight Anonymized Factorization for Federated Learning (WAFFLe), an approach that combines the Indian Buffet Process with a shared dictionary of weight factors for neural networks.
arXiv Detail & Related papers (2020-08-13T04:26:31Z) - Federated Face Presentation Attack Detection [93.25058425356694]
Face presentation attack detection (fPAD) plays a critical role in the modern face recognition pipeline.
We propose Federated Face Presentation Attack Detection (FedPAD) framework.
FedPAD simultaneously takes advantage of rich fPAD information available at different data owners while preserving data privacy.
arXiv Detail & Related papers (2020-05-29T15:56:01Z) - Federated Generative Adversarial Learning [13.543039993168735]
Generative adversarial networks (GANs) have achieved advancement in various real-world applications.
GANs are suffering from data limitation problems in real cases.
We propose a novel generative learning scheme utilizing a federated learning framework.
arXiv Detail & Related papers (2020-05-07T23:06:49Z)
This list is automatically generated from the titles and abstracts of the papers in this site.
This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.