论文标题

生成大师面孔,用于对面部识别系统进行狼攻击

Generating Master Faces for Use in Performing Wolf Attacks on Face Recognition Systems

论文作者

Nguyen, Huy H., Yamagishi, Junichi, Echizen, Isao, Marcel, Sébastien

论文摘要

由于其便利性,生物特征验证,特别是面部身份验证,已经变得越来越主流,因此现在是攻击者的主要目标。演示攻击和面部变形是典型的攻击类型。先前的研究表明,基于手指的素食和基于指纹的身份验证方法容易受到狼攻击的影响,其中狼样本与许多注册的用户模板匹配。在这项工作中,我们证明了我们称之为“主脸”的狼(通用)面孔也可以损害面部识别系统,并且在某些情况下可以概括主脸的概念。在指纹域中最近的类似工作的激励中,我们通过在“潜在变量演化”过程中使用最先进的面部发电机样式来产生高质量的主面部。实验表明,即使是使用Internet上可用的预先培训模型的攻击者也有限,也可以启动主面部攻击。除了从攻击者的角度展示性能外,结果还可以用于澄清和改善面部识别系统的性能和硬性面部认证系统。

Due to its convenience, biometric authentication, especial face authentication, has become increasingly mainstream and thus is now a prime target for attackers. Presentation attacks and face morphing are typical types of attack. Previous research has shown that finger-vein- and fingerprint-based authentication methods are susceptible to wolf attacks, in which a wolf sample matches many enrolled user templates. In this work, we demonstrated that wolf (generic) faces, which we call "master faces," can also compromise face recognition systems and that the master face concept can be generalized in some cases. Motivated by recent similar work in the fingerprint domain, we generated high-quality master faces by using the state-of-the-art face generator StyleGAN in a process called latent variable evolution. Experiments demonstrated that even attackers with limited resources using only pre-trained models available on the Internet can initiate master face attacks. The results, in addition to demonstrating performance from the attacker's point of view, can also be used to clarify and improve the performance of face recognition systems and harden face authentication systems.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源