Colour Processing in Adversarial Attacks on Face Liveness Systems

Abduh, Latifah; Ivrissimtzis, Ioannis

Abstract

In the context of face recognition systems, liveness test is a binary classification task aiming at distinguishing between input images that come from real people’s faces and input images that come from photos or videos of those faces, and presented to the system’s camera by an attacker. In this paper, we train the state-of-the-art, general purpose deep neural network ResNet for liveness testing, and measure the effect on its performance of adversarial attacks based on the manipulation of the saturation component of the imposter images. Our findings suggest that higher saturation values in the imposter images lead to a decrease in the network’s performance. Next, we study the relationship between the proposed adversarial attacks and corresponding direct presentation attacks. Initial results on a small dataset of processed images which are then printed on paper or displayed on an LCD or a mobile phone screen, show that higher saturation values lead to higher values in the network’s loss function, indicating that these colour manipulation techniques can indeed be converted into enhanced presentation attacks.

Citation

Abduh, L., & Ivrissimtzis, I. (2019, December). Colour Processing in Adversarial Attacks on Face Liveness Systems. Presented at Computer Graphics and Visual Computing (CGVC), Bangor, UK

• Presentation Conference Type: Conference Paper (published)
• Conference Name: Computer Graphics and Visual Computing (CGVC)
• Acceptance Date: Jul 22, 2019
• Publication Date: 2019
• Deposit Date: Sep 13, 2019
• Publicly Available Date: Dec 3, 2020
• Pages: 149-152
• Book Title: Proceedings of Computer Graphics and Visual Computing 2019 (CGVC).
• DOI: https://doi.org/10.2312/cgvc.20191272
• Public URL: https://durham-repository.worktribe.com/output/1141427