about
Light Projection Attacks on Face Recognition (arxiv.org)
2 points by williape on May 5, 2020 | hide | past | pdf | discuss on HN

In plain words: Shines a specially designed light pattern onto an attacker's face to fool face recognition, unlike digital tricks that can't touch real cameras. In tests on 50 people, it fooled two open-source systems and one commercial one, even when the system's inner workings were hidden.

Abstract · Adversarial Light Projection Attacks on Face Recognition Systems: A Feasibility Study

Deep learning-based systems have been shown to be vulnerable to adversarial attacks in both digital and physical domains. While feasible, digital attacks have limited applicability in attacking deployed systems, including face recognition systems, where an adversary typically has access to the input and not the transmission channel. In such setting, physical attacks that directly provide a malicious input through the input channel pose a bigger threat. We investigate the feasibility of conducting real-time physical attacks on face recognition systems using adversarial light projections. A setup comprising a commercially available web camera and a projector is used to conduct the attack. The adversary uses a transformation-invariant adversarial pattern generation method to generate a digital adversarial pattern using one or more images of the target available to the adversary. The digital adversarial pattern is then projected onto the adversary's face in the physical domain to either impersonate a target (impersonation) or evade recognition (obfuscation). We conduct preliminary experiments using two open-source and one commercial face recognition system on a pool of 50 subjects. Our experimental results demonstrate the vulnerability of face recognition systems to light projection attacks in both white-box and black-box attack settings.

Dinh-Luan Nguyen, Sunpreet S. Arora, Yuhang Wu, Hao Yang
arXiv:2003.11145 · cs.CV, cs.LG, eess.IV · submitted Mar 24, 2020 · updated Apr 17, 2020
abstract · pdf · html · To appear in the proceedings of the IEEE Computer Vision and Pattern Recognition (CVPR) Biometrics Workshop 2020 - 9 pages, 8 figures

add comment on HN