Poisoning attacks to compromise face templates
- 1 June 2013
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- No. 23764201,p. 1-7
Abstract
Adaptive biometric systems update clients' templates during operation to account for natural changes over time (e.g., aging of biometric templates). Recently, it has been shown that this update can be exploited by an attacker to compromise the clients' templates: by presenting a proper sequence of fake biometric traits to the sensor, the attacker may eventually impersonate the targeted clients without any fake trait, and even force the system to deny access to them. This attack has however been shown only for PCA-based face verification, with one template per client, under worstcase assumptions about the attacker's knowledge of the sys-tem. In this paper, we show that it can be successful even in the case of multiple templates per client, for different matchers, and under more realistic scenarios, and validate it by experiments to highlight its practical relevance.Keywords
This publication has 5 references indexed in Scilit:
- Adversarial Machine LearningIEEE Internet Computing, 2011
- The Biometric MenagerieIEEE Transactions on Pattern Analysis and Machine Intelligence, 2008
- Casting out Demons: Sanitizing Training Data for Anomaly Sensors2008 IEEE Symposium on Security and Privacy (SP 2008), 2008
- Biometric Template SecurityEURASIP Journal on Advances in Signal Processing, 2008
- Input space versus feature space in kernel-based methodsIEEE Transactions on Neural Networks, 1999