A Physical-World Adversarial Attack for 3D Face Recognition. (arXiv:2205.13412v2 [cs.CV] UPDATED)

The 3D face recognition has long been considered secure for its resistance to
current physical adversarial attacks, like adversarial patches. However, this
paper shows that a 3D face recognition system can be easily attacked, leading
to evading and impersonation attacks. We are the first to propose a physically
realizable attack for the 3D face recognition system, named structured light
imaging attack (SLIA), which exploits the weakness of structured-light-based 3D
scanning devices. SLIA utilizes the projector in the structured light imaging …

3d adversarial attack face recognition physical recognition world