Abstract
Face morphing attacks present an emerging threat to the face recognition system. On top of that, printing and scanning the morphed images could obscure the artifacts generated during the morphing process, which makes morphed image detection even harder. In this work, we investigate the impact that printing and scanning has on morphing attacks through a series of heterogeneous tests. Our experiments show that we can increase the possibility of a false match by up to 5.64% for DiM and 16.00% for StyleGAN2 when providing an image that has been printed and scanned, regardless it is morphed or bona fide, to a Face Recognition (FR) system. Likewise, using Frechet Inception Distance (FID) metric, strictly print-scanned morph attacks performed on average 9.185% stronger than non-print-scanned digital morphs.
Abstract (translated)
面部变形攻击对面部识别系统构成了一个新兴的威胁。此外，打印和扫描变形后的图像可能掩盖在变形过程中产生的伪影，这就使得变形图像检测变得更加困难。在这项工作中，我们通过一系列异质测试研究了打印和扫描对变形攻击的影响。我们的实验结果表明，在提供已打印和扫描的图像的情况下，我们可以将伪匹配可能性增加至DiM的5.64%和StyleGAN2的16.00%。同样，使用弗雷歇感知距离（FID）度量，平均而言，打印扫描的变形攻击比非打印扫描的数字变形攻击强9.185%。
URL
https://arxiv.org/abs/2404.06559
