自监督学习提升人脸变形攻击检测泛化能力,显著降低误检率。
SelfMAD: Enhancing Generalization and Robustness in Morphing Attack Detection via Self-Supervised Learning
- 通过模拟多种变形攻击特征,自监督训练分类器学习通用判别边界。
- 跨攻击方法测试下误检率降低超64%(相比最强无监督模型)。
- 适合需要高鲁棒性的身份认证系统开发者使用。
随着生成模型的发展,人脸变形攻击已成为现有人脸识别系统的重要挑战,可能被用于身份欺诈等恶意行为。当前的变形攻击检测(MAD)方法多依赖于有监督判别模型,在训练中见过的变形技术上表现良好,但面对未见的新攻击方式时性能下降。尽管无监督模型更具泛化性,但通常误检率较高,因难以捕捉细微伪造痕迹。为此,本文提出SelfMAD,一种新型自监督方法,通过模拟多样化变形攻击特征,使分类器在不依赖特定攻击痕迹的情况下学习通用、鲁棒的判别边界,避免过拟合。在多个主流数据集上的大量实验表明,SelfMAD显著优于现有最先进MAD方法:与最强无监督模型相比,交叉攻击设置下误检率(EER)降低超过64%;与最优判别式MAD模型相比,降幅超过66%。代码已开源:https://github.com/LeonTodorov/SelfMAD。
原文摘要 · Abstract (English)
With the continuous advancement of generative models, face morphing attacks have become a significant challenge for existing face verification systems due to their potential use in identity fraud and other malicious activities. Contemporary Morphing Attack Detection (MAD) approaches frequently rely on supervised, discriminative models trained on examples of bona fide and morphed images. These models typically perform well with morphs generated with techniques seen during training, but often lead to sub-optimal performance when subjected to novel unseen morphing techniques. While unsupervised models have been shown to perform better in terms of generalizability, they typically result in higher error rates, as they struggle to effectively capture features of subtle artifacts. To address these shortcomings, we present SelfMAD, a novel self-supervised approach that simulates general morphing attack artifacts, allowing classifiers to learn generic and robust decision boundaries without overfitting to the specific artifacts induced by particular face morphing methods. Through extensive experiments on widely used datasets, we demonstrate that SelfMAD significantly outperforms current state-of-the-art MADs, reducing the detection error by more than 64% in terms of EER when compared to the strongest unsupervised competitor, and by more than 66%, when compared to the best performing discriminative MAD model, tested in cross-morph settings. The source code for SelfMAD is available at https://github.com/LeonTodorov/SelfMAD.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。