Research on Multimodality Face Antispoofing Model Based on Adversarial Attacks

Figure 7

An example of single-modality model attacking the IR image, where (a) represents FGSM attack with the perturbation value of 0.01 and (b) represents DeepFool attack.