通过频域残差分析提升人脸合成攻击检测精度,跨数据集表现更优。
FD-MAD: Frequency-Domain Residual Analysis for Face Morphing Attack Detection
- 利用频域残差分离真实与伪造人脸特征,提升区分能力。
- 在FRLL-Morph上达1.85%平均错误率,MAD22上排名第二。
- 轻量级设计适合实际部署,仅用频谱特征即有效检测。
人脸合成攻击对电子身份注册和边境管控中的面部识别系统构成重大威胁,尤其在单图合成攻击检测(S-MAD)场景下,缺乏可信参考样本。尽管研究众多,现有检测系统在跨数据集情况下仍表现不佳。为此,本文提出一种区域感知的频域残留分析方法,仅基于合成攻击检测开发数据集(SMDD)训练,在挑战性的跨数据集和跨合成设置下显著优于强基线方法。该方法发现不同面部区域在频域中真实与伪造样本可分性高,创新性引入残差频域概念,将信号频率与自然频谱衰减解耦,从而更易区分真假数据;同时结合马尔可夫随机场,从全局与局部多个面部区域融合证据,实现一致决策。在FRLL-Morph和MAD22数据集上的测试显示,该方法平均等错误率(EER)为1.85%(FRLL-Morph),MAD22上排名第二,平均EER为6.12%,且在低攻击呈现分类错误率(APCER)下保持良好真实呈现分类错误率(BPCER)。结果表明,基于结构化区域融合的傅里叶域残差建模是深度S-MAD架构的有力替代方案。
原文摘要 · Abstract (English)
Face morphing attacks present a significant threat to face recognition systems used in electronic identity enrolment and border control, particularly in single-image morphing attack detection (S-MAD) scenarios where no trusted reference is available. In spite of the vast amount of research on this problem, morph detection systems struggle in cross-dataset scenarios. To address this problem, we introduce a region-aware frequency-based morph detection strategy that drastically improves over strong baseline methods in challenging cross-dataset and cross-morph settings using a lightweight approach. Having observed the separability of bona fide and morph samples in the frequency domain of different facial parts, our approach 1) introduces the concept of residual frequency domain, where the frequency of the signal is decoupled from the natural spectral decay to easily discriminate between morph and bona fide data; 2) additionally, we reason in a global and local manner by combining the evidence from different facial regions in a Markov Random Field, which infers a globally consistent decision. The proposed method, trained exclusively on the synthetic morphing attack detection development dataset (SMDD), is evaluated in challenging cross-dataset and cross-morph settings on FRLL-Morph and MAD22 sets. Our approach achieves an average equal error rate (EER) of 1.85\% on FRLL-Morph and ranks second on MAD22 with an average EER of 6.12\%, while also obtaining a good bona fide presentation classification error rate (BPCER) at a low attack presentation classification error rate (APCER) using only spectral features. These findings indicate that Fourier-domain residual modeling with structured regional fusion offers a competitive alternative to deep S-MAD architectures.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。