Adversarial Examples to Fool Iris Recognition Systems

Understand

Adversarial examples have recently proven to be able to fool deep learning methods by adding carefully crafted small perturbation to the input space image.

• In this paper, we study the possibility of generating adversarial examples for code-based iris recognition systems.
• Since generating adversarial examples requires back-propagation of the adversarial loss, conventional filter bank-based iris-code generation frameworks cannot be employed in such a setup.
• Therefore, to compensate for this shortcoming, we propose to train a deep auto-encoder surrogate network to mimic the conventional iris code generation procedure.