arXivDaily arXiv每日学术速递 周一至周五更新
今晚才能更新了~~大家休息下再来吧
arXiv 2109.03398cs.CV
收藏

Master Face Attacks on Face Recognition Systems

Graduate University for Advanced Studies, SOKENDAI(综合研究大学院大学);Idiap Research Institute(Idiap研究所);National Institute of Informatics(国立情报学研究所);SOKENDAI(综合研究大学院大学);University of Tokyo(东京大学)

Huy H. Nguyen, Sébastien Marcel, Junichi Yamagishi, Isao Echizen

英文摘要:

Face authentication is now widely used, especially on mobile devices, rather than authentication using a personal identification number or an unlock pattern, due to its convenience. It has thus become a tempting target for attackers using a presentation attack. Traditional presentation attacks use facial images or videos of the victim. Previous work has proven the existence of master faces, i.e., faces that match multiple enrolled templates in face recognition systems, and their existence extends the ability of presentation attacks. In this paper, we perform an extensive study on latent variable evolution (LVE), a method commonly used to generate master faces. We run an LVE algorithm for various scenarios and with more than one database and/or face recognition system to study the properties of the master faces and to understand in which conditions strong master faces could be generated. Moreover, through analysis, we hypothesize that master faces come from some dense areas in the embedding spaces of the face recognition systems. Last but not least, simulated presentation attacks using generated master faces generally preserve the false-matching ability of their original digital forms, thus demonstrating that the existence of master faces poses an actual threat.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑