We use cookies to ensure that we give you the best experience on our website. You can change your cookie settings at any time. Otherwise, we'll assume you're OK to continue.

Durham University

Research & business

View Profile

Publication details for Dr Ioannis Ivrissimtzis

Abduh, Latifah & Ivrissimtzis, Ioannis (2019), Colour Processing in Adversarial Attacks on Face Liveness Systems, in Vidal, Franck P., Tam, Gary K. L. & Roberts, Jonathan C. eds, Computer Graphics and Visual Computing (CGVC). Bangor, UK, The Eurographics Association, 149-152.

Author(s) from Durham


In the context of face recognition systems, liveness test is a binary classification task aiming at distinguishing between input
images that come from real people’s faces and input images that come from photos or videos of those faces, and presented to
the system’s camera by an attacker. In this paper, we train the state-of-the-art, general purpose deep neural network ResNet for
liveness testing, and measure the effect on its performance of adversarial attacks based on the manipulation of the saturation
component of the imposter images. Our findings suggest that higher saturation values in the imposter images lead to a decrease
in the network’s performance. Next, we study the relationship between the proposed adversarial attacks and corresponding
direct presentation attacks. Initial results on a small dataset of processed images which are then printed on paper or displayed
on an LCD or a mobile phone screen, show that higher saturation values lead to higher values in the network’s loss function,
indicating that these colour manipulation techniques can indeed be converted into enhanced presentation attacks.