用Arc2Face生成保身份的逼真人脸融合攻击,威胁护照识别系统。
Arc2Morph: Identity-Preserving Facial Morphing with Arc2Face
- 基于身份条件的Arc2Face模型生成人脸融合图像。
- 在多个数据集上攻击成功率接近传统人工标记方法。
- 适合研究人脸识别安全与对抗样本的学者参考。
人脸融合攻击被广泛认为是电子身份文件中人脸识别系统的重大挑战之一。这类攻击利用了多个国家在护照注册过程中缺乏受控活体采集环节的漏洞。本文提出一种基于Arc2Face的新颖人脸融合技术,该模型能从紧凑的身份表示中生成逼真的人脸图像。通过在两个大规模封闭式人脸融合攻击检测数据集上对比多种前沿融合方法,并在两个新构建的源自FEI和ONOT的数据集上测试,实验结果表明,所提深度学习方法的攻击潜力可与传统基于关键点的技法相媲美。这些发现证实了该方法在生成融合图像时有效保留并管理身份信息的能力。
原文摘要 · Abstract (English)
Face morphing attacks are widely recognized as one of the most challenging threats to face recognition systems used in electronic identity documents. These attacks exploit a critical vulnerability in passport enrollment procedures adopted by many countries, where the facial image is often acquired without a supervised live capture process. In this paper, we propose a novel face morphing technique based on Arc2Face, an identity-conditioned face foundation model capable of synthesizing photorealistic facial images from compact identity representations. We demonstrate the effectiveness of the proposed approach by comparing the morphing attack potential metric on two large-scale sequestered face morphing attack detection datasets against several state-of-the-art morphing methods, as well as on two novel morphed face datasets derived from FEI and ONOT. Experimental results show that the proposed deep learning-based approach achieves a morphing attack potential comparable to that of landmark-based techniques, which have traditionally been regarded as the most challenging. These findings confirm the ability of the proposed method to effectively preserve and manage identity information during the morph generation process.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。