Physical-World Optical Adversarial Attacks on 3D Face Recognition. (arXiv:2205.13412v3 [cs.CV] UPDATED)

2D face recognition has been proven insecure for physical adversarial
attacks. However, few studies have investigated the possibility of attacking
real-world 3D face recognition systems. 3D-printed attacks recently proposed
cannot generate adversarial points in the air. In this paper, we attack 3D face
recognition systems through elaborate optical noises. We took structured light
3D scanners as our attack target. End-to-end attack algorithms are designed to
generate adversarial illumination for 3D faces through the inherent or an
additional projector to produce …

adversarial attacks face recognition physical recognition world