Securing Facial Bioinformation by Eliminating Adversarial Perturbations

Falsified faces generated by DeepFake are severe threats to our community. Many smart systems in Industry 4.0, such as electronic payments and identity verification, rely on bioinformation authentication. These applications may compromise with forgeries generated by DeepFake. Notwithstanding many promising results on DeepFake forensics have been reported recently, we are now facing new security challenges brought by antiforensics attacks. With adversarial perturbations injected by antiforensics algorithms, falsified faces could masquerade themselves to disrupt forensics detectors as well as industrial applications. Therefore, to secure biometric data, in particular facial information, we propose a countermeasure against the attacks of DeepFake antiforensics. The proposed model features dual channels and multiple supervisors to capture biological attributes from manifold aspects. After training, the proposed method can purify antiforensics images by eliminating adversarial perturbations. With experimental evaluations, we show that purified faces are highly distinguishable from real ones. The proposed method is justified as a reliable defense tool for protecting facial bioinformation against antiforensics amid Industry 4.0.

Automated summary

Falsified faces generated by DeepFake pose severe threats to our community, especially to smart systems relying on bioinformation authentication. Despite promising results on DeepFake forensics, new security challenges arise from antiforensics attacks. To protect biometric data, particularly facial information, a countermeasure against DeepFake antiforensics attacks is proposed.