论文标题
面部表现攻击检测的一级知识蒸馏
One-Class Knowledge Distillation for Face Presentation Attack Detection
论文作者
论文摘要
研究社区已经对面部表现攻击检测(PAD)进行了广泛的研究,以增强面部识别系统的安全性。尽管现有方法在测试数据上的分布与培训数据相似的数据方面取得了良好的性能,但在使用看不见的分布数据的应用程序方案中,它们的性能严重降低。在从不同域中绘制培训和测试数据的情况下,典型的方法是应用域适应技术来借助目标域数据来提高面部垫性能。但是,在目标域中收集足够的数据样本,尤其是对于攻击样本一直是一个非平凡的挑战。本文介绍了一个教师学生的框架,以改善具有单级领域适应性面部垫的跨域性能。除了源域数据外,该框架仅利用目标域的几个真实面部样本。在此框架下,对教师网络进行了培训,以提供源域样本,以提供面部垫的歧视性特征表示。对学生网络进行了培训,可以模仿教师网络,并学习类似的代表目标领域的面孔样本。在测试阶段,使用教师网络的表示形式之间的相似性得分用于区分攻击与真正的攻击。为了评估在一级域适应设置下提出的框架,我们设计了两个新协议,并进行了广泛的实验。实验结果表明,我们的方法在单级域适应设置,甚至具有无监督域适应性的最新方法下优于基准。
Face presentation attack detection (PAD) has been extensively studied by research communities to enhance the security of face recognition systems. Although existing methods have achieved good performance on testing data with similar distribution as the training data, their performance degrades severely in application scenarios with data of unseen distributions. In situations where the training and testing data are drawn from different domains, a typical approach is to apply domain adaptation techniques to improve face PAD performance with the help of target domain data. However, it has always been a non-trivial challenge to collect sufficient data samples in the target domain, especially for attack samples. This paper introduces a teacher-student framework to improve the cross-domain performance of face PAD with one-class domain adaptation. In addition to the source domain data, the framework utilizes only a few genuine face samples of the target domain. Under this framework, a teacher network is trained with source domain samples to provide discriminative feature representations for face PAD. Student networks are trained to mimic the teacher network and learn similar representations for genuine face samples of the target domain. In the test phase, the similarity score between the representations of the teacher and student networks is used to distinguish attacks from genuine ones. To evaluate the proposed framework under one-class domain adaptation settings, we devised two new protocols and conducted extensive experiments. The experimental results show that our method outperforms baselines under one-class domain adaptation settings and even state-of-the-art methods with unsupervised domain adaptation.