论文标题

针对理性攻击者的未知表现攻击检测

Unknown Presentation Attack Detection against Rational Attackers

论文作者

Khodabakhsh, Ali, Akhtar, Zahid

论文摘要

尽管在过去十年中,在演示攻击检测和多媒体取证领域取得了令人印象深刻的进展,但这些系统仍然容易受到现实生活中的攻击。现有解决方案的一些挑战是检测未知攻击,在对抗环境中执行的能力,很少的学习和解释性。在这项研究中,这些限制是通过依赖游戏理论观点来建模攻击者与检测器之间的相互作用的。因此,提出了一个新的优化标准,并定义了一组要求,以改善这些系统在现实生活中的性能。此外,提出了一种新的检测技术,它使用基于发电机的特征集提出了对任何特定攻击物种的偏见。为了进一步优化已知攻击的性能,提出了一种新的损失函数所构成的分类保证金最大化损失(C-Marmax),该损失(C-Marmax)逐渐改善了针对最强大的攻击的性能。拟议的方法在已知和未知的攻击检测案例中针对理性攻击者提供了最先进的攻击,并实现了最新的攻击,并实现了更加平衡的性能。最后,研究了所提出的方法的少量学习潜力,以及其提供像素级解释性的能力。

Despite the impressive progress in the field of presentation attack detection and multimedia forensics over the last decade, these systems are still vulnerable to attacks in real-life settings. Some of the challenges for existing solutions are the detection of unknown attacks, the ability to perform in adversarial settings, few-shot learning, and explainability. In this study, these limitations are approached by reliance on a game-theoretic view for modeling the interactions between the attacker and the detector. Consequently, a new optimization criterion is proposed and a set of requirements are defined for improving the performance of these systems in real-life settings. Furthermore, a novel detection technique is proposed using generator-based feature sets that are not biased towards any specific attack species. To further optimize the performance on known attacks, a new loss function coined categorical margin maximization loss (C-marmax) is proposed which gradually improves the performance against the most powerful attack. The proposed approach provides a more balanced performance across known and unknown attacks and achieves state-of-the-art performance in known and unknown attack detection cases against rational attackers. Lastly, the few-shot learning potential of the proposed approach is studied as well as its ability to provide pixel-level explainability.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源