Morphing attacks are an emerging threat to state-of-the-art Face Recognition
(FR) systems, which aim to create a single image that contains the biometric
information of multiple identities. Diffusion Morphs (DiM) are a recently
proposed morphing attack that has achieved state-of-the-art performance for
representation-based morphing attacks. However, none of the existing research
on DiMs have leveraged the iterative nature of DiMs and left the DiM model as a
black box, treating it no differently than one would a Generative Adversarial
Network (GAN) or Varational AutoEncoder (VAE). We propose a greedy strategy on
the iterative sampling process of DiM models which searches for an optimal step
guided by an identity-based heuristic function. We compare our proposed
algorithm against ten other state-of-the-art morphing algorithms using the
open-source SYN-MAD 2022 competition dataset. We find that our proposed
algorithm is unreasonably effective, fooling all of the tested FR systems with
an MMPMR of 100%, outperforming all other morphing algorithms compared.

提出了一种基于迭代采样过程的扩散变形攻击模型，通过使用基于身份的启发式函数引导的贪婪策略，比较在开源的 SYN-MAD 2022 竞赛数据集上与其他十种最先进的变形算法相比，该算法以异常高的精确度欺骗了所有被测试的人脸识别系统，MMPMR 值达到 100% 以上。