Abstract:Face anti-spoofing (FAS) is significant for the security of face recognition systems. neural networks (NNs), including convolutional neural network (CNN) and vision transformer (ViT), have been dominating the field of the FAS. However, NN-based methods are vulnerable to adversarial attacks. Attackers could insert adversarial noise into spoofing examples to circumvent an NN-based face-liveness detector. Our experiments show that the CNN or ViT models could have at least an 8% equal error rate (EER) increment when encountering adversarial examples. Thus, developing methods other than NNs is worth exploring to improve security at the system level. In this paper, we have proposed a novel solution for FAS against adversarial attacks, leveraging a deep forest model. Our approach introduces a multi-scale texture representation based on local binary patterns (LBP) as the model input, replacing the grained-scanning mechanism (GSM) used in the traditional deep forest model. Unlike GSM, which scans raw pixels and lacks discriminative power, our LBP-based scheme is specifically designed to capture texture features relevant to spoofing detection. Additionally, transforming the input from the RGB space to the LBP space enhances robustness against adversarial noise. Our method achieved competitive results. When testing with adversarial examples, the increment of EER was less than 3%, more robust than CNN and ViT. On the benchmark database IDIAP REPLAY-ATTACK, a 0% EER was achieved. This work provides a competitive option in a fusing scheme for improving system-level security and offers ff ers important ideas to those who want to explore methods besides CNNs. To the best of our knowledge, this is the first attempt at exploiting the deep forest model in the problem of FAS, with the consideration of adversarial attacks.

FASS: Face Anti-Spoofing System Using Image Quality Features and Deep Learning

Deep Learning for Face Anti-Spoofing: A Survey

A Cascade Face Spoofing Detector Based on Face Anti-Spoofing R-CNN and Improved Retinex LBP

Face Anti-Spoofing with Human Material Perception

Learning Deep Forest for Face Anti-Spoofing: an Alternative to the Neural Network Against Adversarial Attacks

Self-Attention and MLP Auxiliary Convolution for Face Anti-Spoofing

Advanced Face Anti-Spoofing with Depth Segmentation.

AdvFAS: A robust face anti-spoofing framework against adversarial examples

Multi-modal Face Anti-spoofing Using Multi-fusion Network and Global Depth-wise Convolution

Defaek: Domain Effective Fast Adaptive Network for face anti-spoofing

Face Anti-Spoofing Using Feature Distilling and Global Attention Learning

Face Anti-spoofing Algorithm Based on Depth Feature Fusion

Face anti-spoofing based on multi-modal and multi-scale features fusion

Face anti-spoofing using patch and depth-based CNNs

A MobileFaceNet-Based Face Anti-Spoofing Algorithm for Low-Quality Images

Face Anti-spoofing Based on Client Identity Information and Depth Map.

Face Anti-spoofing with a Noise-Attention Network Using Color-Channel Difference Images.

Face Anti-Spoofing Via Interaction Learning with Face Image Quality Alignment

An Effective Face Anti-Spoofing Method via Stereo Matching

Face anti-spoofing with cross-stage relation enhancement and spoof material perception

Deep Representations Based on Sparse Auto-Encoder Networks for Face Spoofing Detection.