In security systems the risk assessment in the sense of common criteria testing is a very relevant topic; this requires quantifying the attack potential in terms of the expertise of the attacker, his knowledge about the target and access to equipment. Contrary to those attacks, the recently revealed morphing attacks against Face Recognition Systems (FRSs) can not be assessed by any of the above criteria. But not all morphing techniques pose the same risk for an operational face recognition system. This paper introduces with the Morphing Attack Potential (MAP) a consistent methodology, that can quantify the risk, which a certain morphing attack creates.
翻译:在安全系统中,共同标准测试意义上的风险评估是一个非常相关的专题;这要求从攻击者的专门知识、他对目标的了解和对设备的利用等方面量化攻击潜力;与这些攻击相反,最近暴露的对面部识别系统变形攻击无法用上述任何标准加以评估;但并非所有变形技术都对操作性面部识别系统构成同样的风险;本文采用按创形攻击潜能(MAP)的一致方法,可以量化某种变形攻击造成的风险。