Facial cosmetics have the ability to substantially alter the facial appearance, which can negatively affect the decisions of a face recognition. In addition, it was recently shown that the application of makeup can be abused to launch so-called makeup presentation attacks. In such attacks, the attacker might apply heavy makeup in order to achieve the facial appearance of a target subject for the purpose of impersonation. In this work, we assess the vulnerability of a COTS face recognition system to makeup presentation attacks employing the publicly available Makeup Induced Face Spoofing (MIFS) database. It is shown that makeup presentation attacks might seriously impact the security of the face recognition system. Further, we propose an attack detection scheme which distinguishes makeup presentation attacks from genuine authentication attempts by analysing differences in deep face representations obtained from potential makeup presentation attacks and corresponding target face images. The proposed detection system employs a machine learning-based classifier, which is trained with synthetically generated makeup presentation attacks utilizing a generative adversarial network for facial makeup transfer in conjunction with image warping. Experimental evaluations conducted using the MIFS database reveal a detection equal error rate of 0.7% for the task of separating genuine authentication attempts from makeup presentation attacks.
翻译:面部外观能够大大改变面部外观,这可能会对面部识别的决定产生消极影响。此外,最近还表明,化妆品的应用可能会被滥用,以启动所谓的化容展示攻击;在这类攻击中,攻击者可能会使用重化妆,以达到目标对象面貌的面部外观,以假冒为目的。在这项工作中,我们评估COTS面对识别系统的脆弱性,以利用公开提供的假冒面部假冒数据库(MIFS)进行模拟展示攻击,以进行显示,化妆品展示攻击可能会严重影响面部识别系统的安全。此外,我们提议了一个攻击探测机制,通过分析潜在化妆式攻击和相应目标脸部图像在深度面部表现上的差异,将化妆品展示攻击与真正的认证尝试区分开来,从而将化妆品应用以合成合成生成的化妆品显示系统。 使用MIFS数据库进行的实验性评价显示,对面部外观攻击的检测误率为0.7%,对真实认证尝试进行区分。