arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2401.01102cs.CV

用于人脸反欺骗的具有域对齐的双教师知识蒸馏

Dual Teacher Knowledge Distillation with Domain Alignment for Face Anti-spoofing

Sun Yat-sen University(中山大学);Tencent YouTu Lab(腾讯优图实验室);Nanjing University(南京大学);Harbin Institute of Technology(哈尔滨工业大学);Southern University of Science and Technology(南方科技大学)

Zhe Kong, Wentian Zhang, Tao Wang, Kaihao Zhang, Yuexiang Li, Xiaoying Tang, Wenhan Luo

AI总结:

针对人脸反欺骗泛化与训练不稳定问题,提出域对抗攻击实现域对齐,并利用感知与生成预训练模型构建双教师知识蒸馏框架,显著提升模型泛化能力。

摘要:

人脸识别系统因易受不同呈现攻击而引发担忧,系统安全性已成为日益关键的问题。尽管许多人脸反欺骗(FAS)方法在数据集内场景表现良好,但其泛化能力仍具挑战。为解决此问题,部分方法采用域对抗训练(DAT)提取域不变特征。然而,编码器与域判别器间的竞争会使网络难以训练和收敛。本文提出域对抗攻击(DAA)方法,通过向输入图像添加扰动来缓解训练不稳定问题,使其跨域不可区分并实现域对齐。此外,由于在有限数据和攻击类型上训练的模型难以泛化至未知攻击,我们提出了一种用于人脸反欺骗的双感知与生成式知识蒸馏框架,利用包含丰富人脸先验的预训练人脸相关模型。具体而言,我们采用两个不同的人脸相关模型作为教师,向目标学生模型传递知识。预训练教师模型并非来自人脸反欺骗任务,而是分别来自感知和生成任务,这隐式地增强了数据。通过结合DAA和双教师知识蒸馏,我们开发了用于人脸反欺骗的具有域对齐的双教师知识蒸馏框架(DTDA)。通过大量消融研究及在公共数据集上跨多种协议与最先进方法的比较,验证了所提方法的优势。

英文摘要:

Face recognition systems have raised concerns due to their vulnerability to different presentation attacks, and system security has become an increasingly critical concern. Although many face anti-spoofing (FAS) methods perform well in intra-dataset scenarios, their generalization remains a challenge. To address this issue, some methods adopt domain adversarial training (DAT) to extract domain-invariant features. However, the competition between the encoder and the domain discriminator can cause the network to be difficult to train and converge. In this paper, we propose a domain adversarial attack (DAA) method to mitigate the training instability problem by adding perturbations to the input images, which makes them indistinguishable across domains and enables domain alignment. Moreover, since models trained on limited data and types of attacks cannot generalize well to unknown attacks, we propose a dual perceptual and generative knowledge distillation framework for face anti-spoofing that utilizes pre-trained face-related models containing rich face priors. Specifically, we adopt two different face-related models as teachers to transfer knowledge to the target student model. The pre-trained teacher models are not from the task of face anti-spoofing but from perceptual and generative tasks, respectively, which implicitly augment the data. By combining both DAA and dual-teacher knowledge distillation, we develop a dual teacher knowledge distillation with domain alignment framework (DTDA) for face anti-spoofing. The advantage of our proposed method has been verified through extensive ablation studies and comparison with state-of-the-art methods on public datasets across multiple protocols.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑