Attacking Face Recognition with T-shirts: Database, Vulnerability Assessment and Detection

• URL: http://arxiv.org/abs/2211.07383v1
• Date: Mon, 14 Nov 2022 14:11:23 GMT
• Title: Attacking Face Recognition with T-shirts: Database, Vulnerability Assessment and Detection
• Authors: M. Ibsen, C. Rathgeb, F. Brechtel, R. Klepp, K. P\"oppelmann, A. George, S. Marcel, C. Busch
• Abstract summary: We propose a new T-shirt Face Presentation Attack database of 1,608 T-shirt attacks using 100 unique presentation attack instruments. We show that this type of attack can compromise the security of face recognition systems and that some state-of-the-art attack detection mechanisms fail to robustly generalize to the new attacks.
• Score: 0.0
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Face recognition systems are widely deployed for biometric authentication. Despite this, it is well-known that, without any safeguards, face recognition systems are highly vulnerable to presentation attacks. In response to this security issue, several promising methods for detecting presentation attacks have been proposed which show high performance on existing benchmarks. However, an ongoing challenge is the generalization of presentation attack detection methods to unseen and new attack types. To this end, we propose a new T-shirt Face Presentation Attack (TFPA) database of 1,608 T-shirt attacks using 100 unique presentation attack instruments. In an extensive evaluation, we show that this type of attack can compromise the security of face recognition systems and that some state-of-the-art attack detection mechanisms trained on popular benchmarks fail to robustly generalize to the new attacks. Further, we propose three new methods for detecting T-shirt attack images, one which relies on the statistical differences between depth maps of bona fide images and T-shirt attacks, an anomaly detection approach trained on features only extracted from bona fide RGB images, and a fusion approach which achieves competitive detection performance.

Related papers

• Contactless Fingerprint Biometric Anti-Spoofing: An Unsupervised Deep Learning Approach [0.0]
  We introduce an innovative anti-spoofing approach that combines an unsupervised autoencoder with a convolutional block attention module. The scheme has achieved an average BPCER of 0.96% with an APCER of 1.6% for presentation attacks involving various types of spoofed samples.
  arXiv  Detail & Related papers  (2023-11-07T17:19:59Z)
• Exploring Decision-based Black-box Attacks on Face Forgery Detection [53.181920529225906]
  Face forgery generation technologies generate vivid faces, which have raised public concerns about security and privacy. Although face forgery detection has successfully distinguished fake faces, recent studies have demonstrated that face forgery detectors are very vulnerable to adversarial examples.
  arXiv  Detail & Related papers  (2023-10-18T14:49:54Z)
• Detecting Adversarial Faces Using Only Real Face Self-Perturbations [36.26178169550577]
  Adrial attacks aim to disturb the functionality of a target system by adding specific noise to the input samples. Existing defense techniques achieve high accuracy in detecting some specific adversarial faces (adv-faces) New attack methods especially GAN-based attacks with completely different noise patterns circumvent them and reach a higher attack success rate.
  arXiv  Detail & Related papers  (2023-04-22T09:55:48Z)
• A Novel Active Solution for Two-Dimensional Face Presentation Attack Detection [0.0]
  We study state-of-the-art to cover the challenges and solutions related to presentation attack detection. A presentation attack is an attempt to present a non-live face, such as a photo, video, mask, and makeup, to the camera. We introduce an efficient active presentation attack detection approach that overcomes weaknesses in the existing literature.
  arXiv  Detail & Related papers  (2022-12-14T00:30:09Z)
• Face Presentation Attack Detection [59.05779913403134]
  Face recognition technology has been widely used in daily interactive applications such as checking-in and mobile payment. However, its vulnerability to presentation attacks (PAs) limits its reliable use in ultra-secure applicational scenarios.
  arXiv  Detail & Related papers  (2022-12-07T14:51:17Z)
• Introduction to Presentation Attack Detection in Face Biometrics and Recent Advances [21.674697346594158]
  The next pages present the different presentation attacks that a face recognition system can confront. We make an introduction of the current status of face recognition, its level of deployment, and its challenges. We review different types of presentation attack methods, from simpler to more complex ones, and in which cases they could be effective.
  arXiv  Detail & Related papers  (2021-11-23T11:19:22Z)
• Robust Physical-World Attacks on Face Recognition [52.403564953848544]
  Face recognition has been greatly facilitated by the development of deep neural networks (DNNs) Recent studies have shown that DNNs are very vulnerable to adversarial examples, raising serious concerns on the security of real-world face recognition. We study sticker-based physical attacks on face recognition for better understanding its adversarial robustness.
  arXiv  Detail & Related papers  (2021-09-20T06:49:52Z)
• On the Generalisation Capabilities of Fisher Vector based Face Presentation Attack Detection [13.93832810177247]
  Face Presentation Attack Detection techniques have reported a good detection performance when they are evaluated on known Presentation Attack Instruments. In this work, we use a new feature space based on Fisher Vectors, computed from compact Binarised Statistical Image Features histograms. This new representation, evaluated for challenging unknown attacks taken from freely available facial databases, shows promising results.
  arXiv  Detail & Related papers  (2021-03-02T13:49:06Z)
• MixNet for Generalized Face Presentation Attack Detection [63.35297510471997]
  We have proposed a deep learning-based network termed as textitMixNet to detect presentation attacks. The proposed algorithm utilizes state-of-the-art convolutional neural network architectures and learns the feature mapping for each attack category.
  arXiv  Detail & Related papers  (2020-10-25T23:01:13Z)
• Anomaly Detection-Based Unknown Face Presentation Attack Detection [74.4918294453537]
  Anomaly detection-based spoof attack detection is a recent development in face Presentation Attack Detection. In this paper, we present a deep-learning solution for anomaly detection-based spoof attack detection. The proposed approach benefits from the representation learning power of the CNNs and learns better features for fPAD task.
  arXiv  Detail & Related papers  (2020-07-11T21:20:55Z)
• Temporal Sparse Adversarial Attack on Sequence-based Gait Recognition [56.844587127848854]
  We demonstrate that the state-of-the-art gait recognition model is vulnerable to such attacks. We employ a generative adversarial network based architecture to semantically generate adversarial high-quality gait silhouettes or video frames. The experimental results show that if only one-fortieth of the frames are attacked, the accuracy of the target model drops dramatically.
  arXiv  Detail & Related papers  (2020-02-22T10:08:42Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.