TY - JOUR
T1 - SCPAD
T2 - An approach to explore optical characteristics for robust static presentation attack detection
AU - Dang, Chen
AU - Xia, Zhaoqiang
AU - Dai, Jing
AU - Gao, Jie
AU - Li, Lei
AU - Feng, Xiaoyi
N1 - Publisher Copyright:
© 2023, The Author(s), under exclusive licence to Springer Science+Business Media, LLC, part of Springer Nature.
PY - 2024/2
Y1 - 2024/2
N2 - Presentation attack detection approaches have achieved great progress on various attack types while adversarial learning technology has become a new threat to these approaches. Now few works are devoted to developing a robust detection method for both physical spoofing faces and digital adversarial faces. In this paper, we find that fake face images from printed photos and replayed videos have a different optical characteristic from the real ones, and the adversarial samples generated by various attacking methods retain this characteristic. By exploring this characteristic, we propose the Spectral Characteristic Presentation Attack Detection (SCPAD), a new approach that detects presentation attacks by reconstructing the color space of input images, which also performs well on adversarial samples. More specifically, a new HSCbb color space is manually constructed by studying the difference in albedo intensity between real faces and fake faces. Then the difference between real and spoofing faces can be effectively magnified and modeled by color texture features with the shallow convolutional network. The experimental results show that our proposed method consistently outperforms the state-of-the-art methods on adversarial faces and also achieves competitive performance on fake faces.
AB - Presentation attack detection approaches have achieved great progress on various attack types while adversarial learning technology has become a new threat to these approaches. Now few works are devoted to developing a robust detection method for both physical spoofing faces and digital adversarial faces. In this paper, we find that fake face images from printed photos and replayed videos have a different optical characteristic from the real ones, and the adversarial samples generated by various attacking methods retain this characteristic. By exploring this characteristic, we propose the Spectral Characteristic Presentation Attack Detection (SCPAD), a new approach that detects presentation attacks by reconstructing the color space of input images, which also performs well on adversarial samples. More specifically, a new HSCbb color space is manually constructed by studying the difference in albedo intensity between real faces and fake faces. Then the difference between real and spoofing faces can be effectively magnified and modeled by color texture features with the shallow convolutional network. The experimental results show that our proposed method consistently outperforms the state-of-the-art methods on adversarial faces and also achieves competitive performance on fake faces.
KW - Adversarial robustness
KW - Color space
KW - Frequency domain analysis
KW - Interpretability
KW - Optical characteristics
KW - Presentation attack detection(PAD)
UR - http://www.scopus.com/inward/record.url?scp=85163278528&partnerID=8YFLogxK
U2 - 10.1007/s11042-023-15870-4
DO - 10.1007/s11042-023-15870-4
M3 - 文章
AN - SCOPUS:85163278528
SN - 1380-7501
VL - 83
SP - 14503
EP - 14520
JO - Multimedia Tools and Applications
JF - Multimedia Tools and Applications
IS - 5
ER -