Greedy-DiM: Greedy Algorithms for Unreasonably Effective Face Morphs
Blasingame, Zander W., Liu, Chen
–arXiv.org Artificial Intelligence
Morphing attacks are an emerging threat to state-of-the-art Face Recognition (FR) systems, which aim to create a single image that contains the biometric information of multiple identities. Diffusion Morphs (DiM) are a recently proposed morphing attack that has achieved state-of-the-art performance for representation-based morphing attacks. However, none of the existing research on DiMs have leveraged the iterative nature of DiMs and left the DiM model as a black box, treating it no differently than one would a Generative Adversarial Network (GAN) or Varational AutoEncoder (VAE). We propose a greedy strategy on the iterative sampling process of DiM models which searches for an optimal step guided by an identity-based heuristic function. We compare our proposed algorithm against ten other state-of-the-art morphing algorithms using the open-source SYN-MAD 2022 competition dataset. We find that our proposed algorithm is unreasonably effective, fooling all of the tested FR systems with an MMPMR of 100%, outperforming all other morphing algorithms compared.
arXiv.org Artificial Intelligence
Jul-2-2024
- Country:
- Europe
- Germany > Brandenburg
- Potsdam (0.04)
- Netherlands > North Holland (0.04)
- Germany > Brandenburg
- North America > United States
- New York > New York County > New York City (0.04)
- Europe
- Genre:
- Research Report > New Finding (0.68)
- Industry:
- Information Technology > Security & Privacy (1.00)
- Technology:
- Information Technology > Artificial Intelligence
- Machine Learning > Neural Networks (1.00)
- Representation & Reasoning > Search (1.00)
- Vision (1.00)
- Information Technology > Artificial Intelligence