{"title":"基于PCA和卷积神经网络的人脸变形攻击检测方法","authors":"Imanuddin Razaq, B. K. Shukur","doi":"10.33640/2405-609x.3298","DOIUrl":null,"url":null,"abstract":"Abstract Face recognition is the most extensively utilized security and public safety verification method. In many nations, the Automatic Border Control system uses face recognition to confirm the identification of travelers The ABC system is vulnerable to face morphing attacks; the face recognition systems give acceptance for the traveller, even though the passport photo does not represent the actual image of the person but is a result of the merger of two images. Therefore, it is vital to determine whether the passport image is altering (morph) or actual. This research proposes an improved method to extract features from facial images. The proposed method consists of four phases: In the first stage, morph images were generated using a set of databases of images of real people, used every two images that were similar in general shape or landmarks in producing the morphed image using three types of techniques used in this field (Automatic selection landmark, StyleGAN, and Manual selection landmark). StyleGAN has been relied upon to achieve the best results in producing artefact-free images. In the second phase, a Faster Region Convolution neural network is utilizing for determining and cutting important landmarks area (eyes, nose, mouth, and skin) in the face, where we leave the hair, ears, and image background for every image in the database. In the third phase, the features are extracted using three techniques Principal component analysis, eigenvalue, and eigenvector; a matrix of two-dimensional features is generated with one layer for each technique. Then merge the extracted features (with out s) from each image into one image with three layers. The first layer represents the principal component analysis features, the second the eigenvalue features, and the third the eigenvector features. Finally, the features are introduced into the convolutional neural networks to obtain optimal features. The fourth phase represents the classification process using the Deep Neural Network (DNN) classifier and Support Vector Machine (SVM) second classifier. The DNN classifier achieved an average accuracy of 99.02% compared with SVM, with an accuracy of 98.64%. The power of the proposed work is evident through the FRA and RFF evaluation. Which achieved values as low as possible for DNN FAR 0.018, indicating the error rate in calculating morphed images is actual, and FRR 0.003, meaning the error rate in calculating the actual images is morphed, FAR 0.023, FRR 0.06 for SVM whenever these ratios are less than one, the higher system's accuracy in detection. The AMSL dataset (Accuracy 95.8%, FAR 0.039, FRR 0%) (Accuracy 95.2%, FAR 0.047, FRR 0.98) for DNN and SVM, respectively. It turned out that the training of the proposed network optimized for the features extracted for the landmarks area significantly affects finding the difference and discovering the modified images, even in the case of minor modifications as in the AMSL dataset.","PeriodicalId":17782,"journal":{"name":"Karbala International Journal of Modern Science","volume":" ","pages":""},"PeriodicalIF":0.0000,"publicationDate":"2023-05-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"Improved Face Morphing Attack Detection Method Using PCA and Convolutional Neural Network\",\"authors\":\"Imanuddin Razaq, B. K. Shukur\",\"doi\":\"10.33640/2405-609x.3298\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Abstract Face recognition is the most extensively utilized security and public safety verification method. In many nations, the Automatic Border Control system uses face recognition to confirm the identification of travelers The ABC system is vulnerable to face morphing attacks; the face recognition systems give acceptance for the traveller, even though the passport photo does not represent the actual image of the person but is a result of the merger of two images. Therefore, it is vital to determine whether the passport image is altering (morph) or actual. This research proposes an improved method to extract features from facial images. The proposed method consists of four phases: In the first stage, morph images were generated using a set of databases of images of real people, used every two images that were similar in general shape or landmarks in producing the morphed image using three types of techniques used in this field (Automatic selection landmark, StyleGAN, and Manual selection landmark). StyleGAN has been relied upon to achieve the best results in producing artefact-free images. In the second phase, a Faster Region Convolution neural network is utilizing for determining and cutting important landmarks area (eyes, nose, mouth, and skin) in the face, where we leave the hair, ears, and image background for every image in the database. In the third phase, the features are extracted using three techniques Principal component analysis, eigenvalue, and eigenvector; a matrix of two-dimensional features is generated with one layer for each technique. Then merge the extracted features (with out s) from each image into one image with three layers. The first layer represents the principal component analysis features, the second the eigenvalue features, and the third the eigenvector features. Finally, the features are introduced into the convolutional neural networks to obtain optimal features. The fourth phase represents the classification process using the Deep Neural Network (DNN) classifier and Support Vector Machine (SVM) second classifier. The DNN classifier achieved an average accuracy of 99.02% compared with SVM, with an accuracy of 98.64%. The power of the proposed work is evident through the FRA and RFF evaluation. Which achieved values as low as possible for DNN FAR 0.018, indicating the error rate in calculating morphed images is actual, and FRR 0.003, meaning the error rate in calculating the actual images is morphed, FAR 0.023, FRR 0.06 for SVM whenever these ratios are less than one, the higher system's accuracy in detection. The AMSL dataset (Accuracy 95.8%, FAR 0.039, FRR 0%) (Accuracy 95.2%, FAR 0.047, FRR 0.98) for DNN and SVM, respectively. It turned out that the training of the proposed network optimized for the features extracted for the landmarks area significantly affects finding the difference and discovering the modified images, even in the case of minor modifications as in the AMSL dataset.\",\"PeriodicalId\":17782,\"journal\":{\"name\":\"Karbala International Journal of Modern Science\",\"volume\":\" \",\"pages\":\"\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2023-05-09\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Karbala International Journal of Modern Science\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.33640/2405-609x.3298\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Karbala International Journal of Modern Science","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.33640/2405-609x.3298","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 1
摘要
摘要人脸识别是应用最广泛的安全和公共安全验证方法。在许多国家,自动边境控制系统使用人脸识别来确认旅行者的身份。ABC系统容易受到人脸变形攻击;人脸识别系统为旅行者提供了认可,即使护照照片并不代表个人的实际图像,而是两个图像合并的结果。因此,确定护照图像是变化的(变形的)还是真实的是至关重要的。本研究提出了一种改进的人脸图像特征提取方法。所提出的方法由四个阶段组成:在第一阶段,使用一组真实人物的图像数据库生成变形图像,使用该领域使用的三种类型的技术(自动选择界标、样式GAN和手动选择界标),在生成变形图像时使用每两个总体形状或界标相似的图像。StyleGAN一直被用来在生成无伪影图像方面实现最佳效果。在第二阶段,快速区域卷积神经网络用于确定和切割面部的重要标志区域(眼睛、鼻子、嘴巴和皮肤),在那里我们为数据库中的每个图像留下头发、耳朵和图像背景。在第三阶段,使用主成分分析、特征值和特征向量三种技术提取特征;为每种技术生成具有一层的二维特征矩阵。然后将从每个图像中提取的特征(不包含s)合并为一个具有三层的图像。第一层表示主成分分析特征,第二层表示特征值特征,第三层表示特征向量特征。最后,将特征引入卷积神经网络以获得最优特征。第四阶段表示使用深度神经网络(DNN)分类器和支持向量机(SVM)第二分类器的分类过程。与SVM相比,DNN分类器的平均准确率为99.02%,准确率为98.64%。通过FRA和RFF评估,所提出的工作的威力是显而易见的。对于DNN FAR 0.018(表示计算变形图像的错误率是实际的)和FRR 0.003(表示计算实际图像的错误比率是变形的),当这些比率小于1时,SVM的FAR 0.023、FRR 0.06达到尽可能低的值,系统的检测精度就越高。DNN和SVM的AMSL数据集(准确性95.8%,FAR 0.039,FRR 0%)(准确性95.2%,FAR 0.047,FRR 0.98)。事实证明,针对为地标区域提取的特征进行优化的所提出的网络的训练显著影响了差异的发现和修改后的图像的发现,即使是在AMSL数据集中的微小修改的情况下也是如此。
Improved Face Morphing Attack Detection Method Using PCA and Convolutional Neural Network
Abstract Face recognition is the most extensively utilized security and public safety verification method. In many nations, the Automatic Border Control system uses face recognition to confirm the identification of travelers The ABC system is vulnerable to face morphing attacks; the face recognition systems give acceptance for the traveller, even though the passport photo does not represent the actual image of the person but is a result of the merger of two images. Therefore, it is vital to determine whether the passport image is altering (morph) or actual. This research proposes an improved method to extract features from facial images. The proposed method consists of four phases: In the first stage, morph images were generated using a set of databases of images of real people, used every two images that were similar in general shape or landmarks in producing the morphed image using three types of techniques used in this field (Automatic selection landmark, StyleGAN, and Manual selection landmark). StyleGAN has been relied upon to achieve the best results in producing artefact-free images. In the second phase, a Faster Region Convolution neural network is utilizing for determining and cutting important landmarks area (eyes, nose, mouth, and skin) in the face, where we leave the hair, ears, and image background for every image in the database. In the third phase, the features are extracted using three techniques Principal component analysis, eigenvalue, and eigenvector; a matrix of two-dimensional features is generated with one layer for each technique. Then merge the extracted features (with out s) from each image into one image with three layers. The first layer represents the principal component analysis features, the second the eigenvalue features, and the third the eigenvector features. Finally, the features are introduced into the convolutional neural networks to obtain optimal features. The fourth phase represents the classification process using the Deep Neural Network (DNN) classifier and Support Vector Machine (SVM) second classifier. The DNN classifier achieved an average accuracy of 99.02% compared with SVM, with an accuracy of 98.64%. The power of the proposed work is evident through the FRA and RFF evaluation. Which achieved values as low as possible for DNN FAR 0.018, indicating the error rate in calculating morphed images is actual, and FRR 0.003, meaning the error rate in calculating the actual images is morphed, FAR 0.023, FRR 0.06 for SVM whenever these ratios are less than one, the higher system's accuracy in detection. The AMSL dataset (Accuracy 95.8%, FAR 0.039, FRR 0%) (Accuracy 95.2%, FAR 0.047, FRR 0.98) for DNN and SVM, respectively. It turned out that the training of the proposed network optimized for the features extracted for the landmarks area significantly affects finding the difference and discovering the modified images, even in the case of minor modifications as in the AMSL dataset.