Refine
Year of publication
Document Type
- Conference Proceeding (24)
- Article (2)
- Part of a Book (1)
Has Fulltext
- no (27)
Is part of the Bibliography
- yes (27)
Keywords
- Forensics (1)
- Industrial Control Systems (1)
- Information Hiding (1)
- OPC UA (1)
- Process automation (1)
- Steganography (1)
- biometrics (1)
- encrypted domain (1)
- feature extraction (1)
- fingerprint recognition (1)
Institute
The technology-aided support of forensic experts while investigating crime scenes and collecting traces becomes a more and more important part in the domains of image acquisition and signal processing. The manual lifting of latent fingerprints using conventional methods like the use of carbon black powder is time-consuming and very limited in its scope of application. New technologies for a contact-less and non-invasive acquisition and automatic processing of latent fingerprints, promise the possibilities to inspect much more and larger surface areas and can significantly simplify and speed up the workflow. Furthermore, it allows multiple investigations of the same trace, subsequent chemical analysis of the residue left behind and the acquisition of latent fingerprints on sensitive surfaces without destroying the surface itself. In this work, a FRT MicroProf200 surface measurement device equipped with a chromatic white-light sensor CWL600 is used. The device provides a gray-scale intensity image and 3D-topography data simultaneously. While large area scans are time-consuming, the detection and localization of finger traces are done based on low-resolution scans. The localized areas are scanned again with higher resolution. Due to the broad variety of different surface characteristics the fingerprint pattern is often overlaid by the surface structure or texture. Thus, image processing and classification techniques are proposed for validation and visualization of ridge lines in high-resolution scans. Positively validated regions containing complete or sufficient partial fingerprints are passed on to forensic experts. The experiments are provided on a set of three surfaces with different reflection and texture characteristics, and fingerprints from ten different persons.
© (2012) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE).
We analyze StirTrace towards benchmarking face morphing forgeries and extending it by additional scaling functions for the face biometrics scenario. We benchmark a Benford's law based multi-compression-anomaly detection approach and acceptance rates of morphs for a face matcher to determine the impact of the processing on the quality of the forgeries. We use 2 different approaches for automatically creating 3940 images of morphed faces. Based on this data set, 86614 images are created using StirTrace. A manual selection of 183 high quality morphs is used to derive tendencies based on the subjective forgery quality. Our results show that the anomaly detection seems to be able to detect anomalies in the morphing regions, the multi-compression-anomaly detection performance after the processing can be differentiated into good (e.g. cropping), partially critical (e.g. rotation) and critical results (e.g. additive noise). The influence of the processing on the biometric matcher is marginal.
Since its introduction in 2014, the face morphing forgery (FMF) attack has received significant attention from the biometric and media forensic research communities. The attack aims at creating artificially weakened templates which can be successfully matched against multiple persons. If successful, the attack has an immense impact on many biometric authentication scenarios including the application of electronic machine-readable travel document (eMRTD) at automated border control gates. We extend the StirTrace framework for benchmarking FMF attacks by adding five issues: a novel three-fold definition for the quality of morphed images, a novel FMF realisation (combined morphing), a post-processing operation to simulate the digital image format used in eMRTD (passport scaling 15 kB), an automated face recognition system (VGG face descriptor) as additional means for biometric quality assessment and two feature spaces for FMF detection (keypoint features and fusion of keypoint and Benford features) as additional means for forensic quality assessment. We show that the impact of StirTrace post-processing operations on the biometric quality of morphed face images is negligible except for two noise operators and passport scaling 15 kB, the impact on the forensic quality depends on the type of post-processing, and the new FMF realisation outperforms the previously considered ones.
This Paper proposes a novel method for the blind detection of image pre-processing techniques by means of statistical pattern recognition in image forensics. The technique is intended to detect sensor intrinsic pre-processing steps as well as manually applied filters. We have exemplary chosen 6 pre-processing filters with different parameter settings. The concept utilizes 29 image features which are supposed to allow for a reliable model creation during supervised learning. The evaluation of the trained models indicates average accuracies between 82.50 and 94.53%. The investigation of image data from 8 sensors leads to the detection of credible pre-processing filters. Those results adumbrate that our method might be suitable to prove the authenticity of the data origin and the integrity of image data based on the detected preprocessing techniques. The preliminary evaluation for manually applied filters yields recognition accuracies between 39.09% (14 classes) and 53.33% (7 classes).
Steganographic and covert communication is increasingly used for hiding attacks. Often information hiding is used by attackers in advanced persistent threats in order to operate without being noticed. Attackers might use it to hide data exfiltration or control channels for persistent malware. The paper analyzes potential threats to operational technology by investigating different communication protocols towards their suitability as cover channels. Using a generalized network architecture model and the communication flows of nuclear power plants, the attack potential using information hiding is exemplary assessed. An example for a supply chain attack for command injection is given on the foundation of the OPC UA protocol and an off-theshelf programmable logic controller. Subsequently, recommendations for a strategic and operational preparation for operators towards the prevention and detection of information hiding attacks are derived.