arXiv:2511.08090cs.CVcs.AI2025-11被引 2

用扩散模型生成逼真人脸融合图像,提升攻击检测评估真实性

StableMorph: High-Quality Face Morph Generation with Stable Diffusion

  • 基于扩散模型生成高保真人脸融合图像,避免模糊和伪影
  • 生成图像质量媲美真实人脸,且能有效欺骗人脸识别系统
  • 适合用于生物特征安全研究与检测系统评测

人脸融合攻击通过让多人共享同一身份,威胁生物识别系统的完整性。为开发和评估有效的融合攻击检测(MAD)系统,需要高质量、逼真的合成融合图像以反映真实场景挑战。然而,现有生成方法常产生模糊、含伪影或结构不佳的图像,易于被检测,无法代表最具威胁性的攻击。本文提出StableMorph,一种基于现代扩散模型的全新方法,可生成无伪影、细节清晰的完整人脸融合图像,并实现对视觉属性的精准控制。大量实验表明,StableMorph生成的图像在视觉质量上可媲美甚至超越真实人脸,同时仍能有效欺骗人脸识别系统,显著增加现有MAD方案的检测难度,为研究与实际测试设立了新的质量标准。该方法提升了生物特征安全评估的真实性,助力更鲁棒检测系统的研发。

原文摘要 · Abstract (English)

Face morphing attacks threaten the integrity of biometric identity systems by enabling multiple individuals to share a single identity. To develop and evaluate effective morphing attack detection (MAD) systems, we need access to high-quality, realistic morphed images that reflect the challenges posed in real-world scenarios. However, existing morph generation methods often produce images that are blurry, riddled with artifacts, or poorly constructed making them easy to detect and not representative of the most dangerous attacks. In this work, we introduce StableMorph, a novel approach that generates highly realistic, artifact-free morphed face images using modern diffusion-based image synthesis. Unlike prior methods, StableMorph produces full-head images with sharp details, avoids common visual flaws, and offers unmatched control over visual attributes. Through extensive evaluation, we show that StableMorph images not only rival or exceed the quality of genuine face images but also maintain a strong ability to fool face recognition systems posing a greater challenge to existing MAD solutions and setting a new standard for morph quality in research and operational testing. StableMorph improves the evaluation of biometric security by creating more realistic and effective attacks and supports the development of more robust detection systems.

人脸融合扩散模型生物识别安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。