MorDIFF: Recognition Vulnerability and Attack Detectability of Face Morphing Attacks Created by Diffusion Autoencoders

02/03/2023
by   Naser Damer, et al.
0

Investigating new methods of creating face morphing attacks is essential to foresee novel attacks and help mitigate them. Creating morphing attacks is commonly either performed on the image-level or on the representation-level. The representation-level morphing has been performed so far based on generative adversarial networks (GAN) where the encoded images are interpolated in the latent space to produce a morphed image based on the interpolated vector. Such a process was constrained by the limited reconstruction fidelity of GAN architectures. Recent advances in the diffusion autoencoder models have overcome the GAN limitations, leading to high reconstruction fidelity. This theoretically makes them a perfect candidate to perform representation-level face morphing. This work investigates using diffusion autoencoders to create face morphing attacks by comparing them to a wide range of image-level and representation-level morphs. Our vulnerability analyses on four state-of-the-art face recognition models have shown that such models are highly vulnerable to the created attacks, the MorDIFF, especially when compared to existing representation-level morphs. Detailed detectability analyses are also performed on the MorDIFF, showing that they are as challenging to detect as other morphing attacks created on the image- or representation-level. Data and morphing script are made public.

READ FULL TEXT

page 1

page 3

research
08/20/2021

ReGenMorph: Visibly Realistic GAN Generated Face Morphing Attacks by Attack Re-generation

Face morphing attacks aim at creating face images that are verifiable to...
research
12/18/2020

Robustness of Facial Recognition to GAN-based Face-morphing Attacks

Face-morphing attacks have been a cause for concern for a number of year...
research
02/17/2023

LDFA: Latent Diffusion Face Anonymization for Self-driving Applications

In order to protect vulnerable road users (VRUs), such as pedestrians or...
research
01/10/2023

Diffusion Models For Stronger Face Morphing Attacks

Face morphing attacks seek to deceive a Face Recognition (FR) system by ...
research
11/30/2021

A Face Recognition System's Worst Morph Nightmare, Theoretically

It has been shown that Face Recognition Systems (FRSs) are vulnerable to...
research
08/23/2020

Vulnerability of Face Recognition Systems Against Composite Face Reconstruction Attack

Rounding confidence score is considered trivial but a simple and effecti...
research
02/24/2022

Analyzing Human Observer Ability in Morphing Attack Detection – Where Do We Stand?

While several works have studied the vulnerability of automated FRS and ...

Please sign up or login with your details

Forgot password? Click here to reset