{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,20]],"date-time":"2026-01-20T09:13:47Z","timestamp":1768900427703,"version":"3.49.0"},"reference-count":43,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2020,1,13]],"date-time":"2020-01-13T00:00:00Z","timestamp":1578873600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2020,1,13]],"date-time":"2020-01-13T00:00:00Z","timestamp":1578873600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100001809","name":"NSFC","doi-asserted-by":"crossref","award":["61672294"],"award-info":[{"award-number":["61672294"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Image Video Proc."],"published-print":{"date-parts":[[2020,12]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Deep neural networks are vulnerable to adversarial samples, posing potential threats to the applications deployed with deep learning models in practical conditions. A typical example is the fingerprint liveness detection module in fingerprint authentication systems. Inspired by great progress of deep learning, deep networks-based fingerprint liveness detection algorithms spring up and dominate the field. Thus, we investigate the feasibility of deceiving state-of-the-art deep networks-based fingerprint liveness detection schemes by leveraging this property in this paper. Extensive evaluations are made with three existing adversarial methods: FGSM, MI-FGSM, and Deepfool. We also proposed an adversarial attack method that enhances the robustness of adversarial fingerprint images to various transformations like rotations and flip. We demonstrate these outstanding schemes are likely to classify fake fingerprints as live fingerprints by adding tiny perturbations, even without internal details of their used model. The experimental results reveal a big loophole and threats for these schemes from a view of security, and enough attention is urgently needed to be paid on anti-adversarial not only in fingerprint liveness detection but also in all deep learning applications.<\/jats:p>","DOI":"10.1186\/s13640-020-0490-z","type":"journal-article","created":{"date-parts":[[2020,2,3]],"date-time":"2020-02-03T14:05:57Z","timestamp":1580738757000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":53,"title":["Adversarial attacks on fingerprint liveness detection"],"prefix":"10.1186","volume":"2020","author":[{"given":"Jianwei","family":"Fei","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6860-647X","authenticated-orcid":false,"given":"Zhihua","family":"Xia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peipeng","family":"Yu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fengjun","family":"Xiao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,1,13]]},"reference":[{"key":"490_CR1","doi-asserted-by":"crossref","unstructured":"Y. Zheng, X. Xu, L. Qi, Deep CNN-assisted personalized recommendation over big data for mobile wireless networks. Wireless Communications and Mobile Computing 2019 (2019)","DOI":"10.1155\/2019\/6082047"},{"key":"490_CR2","doi-asserted-by":"crossref","unstructured":"Y. Zheng, J. Zhu, W. Fang, L.-H. Chi, Deep learning hash for wireless multimedia image content security. Security and Communication Networks 2018 (2018)","DOI":"10.1155\/2018\/8172725"},{"key":"490_CR3","first-page":"5265","volume-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","author":"H Wang","year":"2018","unstructured":"H. Wang et al., in Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. Cosface: large margin cosine loss for deep face recognition (2018), pp. 5265\u20135274"},{"key":"490_CR4","first-page":"5187","volume-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","author":"K Cao","year":"2018","unstructured":"K. Cao, Y. Rong, C. Li, X. Tang, C. Change Loy, in Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. Pose-robust face recognition via deep residual equivariant mapping (2018), pp. 5187\u20135196"},{"key":"490_CR5","first-page":"00873","volume":"1502","author":"Y Sun","year":"2015","unstructured":"Y. Sun, D. Liang, X. Wang, X. Tang, Deepid3: Face recognition with very deep neural networks. arXiv preprint arXiv 1502, 00873 (2015)","journal-title":"arXiv preprint arXiv"},{"key":"490_CR6","first-page":"2138","volume-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","author":"Z Zheng","year":"2019","unstructured":"Z. Zheng, X. Yang, Z. Yu, L. Zheng, Y. Yang, J. Kautz, in Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. Joint discriminative and generative learning for person re-identification (2019), pp. 2138\u20132147"},{"key":"490_CR7","doi-asserted-by":"crossref","unstructured":"Y. Li, C. Huang, C.C. Loy, X. Tang, in European Conference on Computer Vision. Human attribute recognition by deep hierarchical contexts (Springer, 2016), pp. 684\u2013700","DOI":"10.1007\/978-3-319-46466-4_41"},{"key":"490_CR8","first-page":"7644","volume-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","author":"P Li","year":"2019","unstructured":"P. Li, X. Chen, S. Shen, in Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. Stereo r-cnn based 3d object detection for autonomous driving (2019), pp. 7644\u20137652"},{"key":"490_CR9","doi-asserted-by":"crossref","unstructured":"F. Codevilla, M. Miiller, A. L\u00f3pez, V. Koltun, A. Dosovitskiy, in 2018 IEEE International Conference on Robotics and Automation (ICRA). End-to-end driving via conditional imitation learning (IEEE, 2018), pp. 1\u20139","DOI":"10.1109\/ICRA.2018.8460487"},{"key":"490_CR10","first-page":"6199","volume":"1312","author":"C Szegedy","year":"2013","unstructured":"C. Szegedy et al., Intriguing properties of neural networks. arXiv preprint arXiv 1312, 6199 (2013)","journal-title":"arXiv preprint arXiv"},{"key":"490_CR11","first-page":"1097","volume-title":"Advances in neural information processing systems","author":"A Krizhevsky","year":"2012","unstructured":"A. Krizhevsky, I. Sutskever, G.E. Hinton, in Advances in neural information processing systems. Imagenet classification with deep convolutional neural networks (2012), pp. 1097\u20131105"},{"key":"490_CR12","doi-asserted-by":"crossref","unstructured":"Z. Xia, L. Jiang, D. Liu, L. Lu, B. Jeon, BOEW: a content-based image retrieval scheme using bag-of-encrypted-words in cloud computing. IEEE Transactions on Services Computing (2019)","DOI":"10.1109\/TSC.2019.2927215"},{"issue":"1","key":"490_CR13","doi-asserted-by":"publisher","first-page":"27","DOI":"10.32604\/cmc.2019.02688","volume":"58","author":"Z Xia","year":"2019","unstructured":"Z. Xia, L. Lu, T. Qiu, H. Shim, X. Chen, B. Jeon, A privacy-preserving image retrieval based on AC-coefficients and color histograms in cloud environment. Computers, Materials & Continua 58(1), 27\u201344 (2019)","journal-title":"Computers, Materials & Continua"},{"key":"490_CR14","doi-asserted-by":"crossref","unstructured":"Z. Xia, L. Jiang, X. Ma, W. Yang, P. Ji, N. Xiong, A privacy-preserving outsourcing scheme for image local binary pattern in secure industrial internet of things. IEEE Transactions on Industrial Informatics (2019)","DOI":"10.1109\/TII.2019.2913217"},{"key":"490_CR15","doi-asserted-by":"publisher","first-page":"195","DOI":"10.1016\/j.ins.2016.12.030","volume":"387","author":"Z Xia","year":"2017","unstructured":"Z. Xia, N.N. Xiong, A.V. Vasilakos, X. Sun, EPCBIR: an efficient and privacy-preserving content-based image retrieval scheme in cloud computing. Information Sciences 387, 195\u2013204 (2017)","journal-title":"Information Sciences"},{"issue":"1","key":"490_CR16","doi-asserted-by":"publisher","first-page":"276","DOI":"10.1109\/TCC.2015.2491933","volume":"6","author":"Z Xia","year":"2015","unstructured":"Z. Xia, Y. Zhu, X. Sun, Z. Qin, K. Ren, Towards privacy-preserving content-based image retrieval in cloud computing. IEEE Transactions on Cloud Computing 6(1), 276\u2013286 (2015)","journal-title":"IEEE Transactions on Cloud Computing"},{"key":"490_CR17","doi-asserted-by":"crossref","unstructured":"M. Sharif, S. Bhagavatula, L. Bauer, and M. K. Reiter, Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition, in Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security 2016, pp. 1528-1540: ACM.","DOI":"10.1145\/2976749.2978392"},{"key":"490_CR18","first-page":"00349","volume":"1801","author":"M Sharif","year":"2017","unstructured":"M. Sharif, S. Bhagavatula, L. Bauer, M.K. Reiter, Adversarial generative nets: Neural network attacks on state-of-the-art face recognition. arXiv preprint arXiv 1801, 00349 (2017)","journal-title":"arXiv preprint arXiv"},{"key":"490_CR19","volume-title":"Thirty-Second AAAI Conference on Artificial Intelligence","author":"G Goswami","year":"2018","unstructured":"G. Goswami, N. Ratha, A. Agarwal, R. Singh, M. Vatsa, in Thirty-Second AAAI Conference on Artificial Intelligence. Unravelling robustness of deep learning based face recognition against adversarial attacks (2018)"},{"key":"490_CR20","first-page":"138","volume-title":"Practical methods of optimization","author":"H Tang","year":"2004","unstructured":"H. Tang, X. Qin, Practical methods of optimization (Dalian University of Technology Press, Dalian, 2004), pp. 138\u2013149"},{"key":"490_CR21","doi-asserted-by":"crossref","unstructured":"A. Kurakin et al., in The NIPS'17 Competition: Building Intelligent Systems. Adversarial attacks and defences competition (Springer, 2018), pp. 195\u2013231","DOI":"10.1007\/978-3-319-94042-7_11"},{"key":"490_CR22","first-page":"01976","volume":"1808","author":"W Brendel","year":"2018","unstructured":"W. Brendel et al., Adversarial vision challenge. arXiv preprint arXiv 1808, 01976 (2018)","journal-title":"arXiv preprint arXiv"},{"key":"490_CR23","first-page":"6572","volume":"1412","author":"IJ Goodfellow","year":"2014","unstructured":"I.J. Goodfellow, J. Shlens, C. Szegedy, Explaining and harnessing adversarial examples. arXiv preprint arXiv 1412, 6572 (2014)","journal-title":"arXiv preprint arXiv"},{"issue":"8","key":"490_CR24","doi-asserted-by":"publisher","first-page":"1979","DOI":"10.1109\/TPAMI.2018.2858821","volume":"41","author":"T Miyato","year":"2018","unstructured":"T. Miyato, S.-i. Maeda, M. Koyama, S. Ishii, Virtual adversarial training: a regularization method for supervised and semi-supervised learning. IEEE transactions on pattern analysis and machine intelligence 41(8), 1979\u20131993 (2018)","journal-title":"IEEE transactions on pattern analysis and machine intelligence"},{"key":"490_CR25","first-page":"02533","volume":"1607","author":"A Kurakin","year":"2016","unstructured":"A. Kurakin, I. Goodfellow, S. Bengio, Adversarial examples in the physical world. arXiv preprint arXiv 1607, 02533 (2016)","journal-title":"arXiv preprint arXiv"},{"key":"490_CR26","first-page":"2818","volume-title":"Proceedings of the IEEE conference on computer vision and pattern recognition","author":"C Szegedy","year":"2016","unstructured":"C. Szegedy, V. Vanhoucke, S. Ioffe, J. Shlens, Z. Wojna, in Proceedings of the IEEE conference on computer vision and pattern recognition. Rethinking the inception architecture for computer vision (2016), pp. 2818\u20132826"},{"key":"490_CR27","first-page":"2574","volume-title":"Proceedings of the IEEE conference on computer vision and pattern recognition","author":"S-M Moosavi-Dezfooli","year":"2016","unstructured":"S.-M. Moosavi-Dezfooli, A. Fawzi, P. Frossard, in Proceedings of the IEEE conference on computer vision and pattern recognition. Deepfool: a simple and accurate method to fool deep neural networks (2016), pp. 2574\u20132582"},{"key":"490_CR28","first-page":"9185","volume-title":"Proceedings of the IEEE conference on computer vision and pattern recognition","author":"Y Dong","year":"2018","unstructured":"Y. Dong et al., in Proceedings of the IEEE conference on computer vision and pattern recognition. Boosting adversarial attacks with momentum (2018), pp. 9185\u20139193"},{"key":"490_CR29","doi-asserted-by":"crossref","unstructured":"J. Su, D.V. Vargas, K. Sakurai, One pixel attack for fooling deep neural networks. IEEE Transactions on Evolutionary Computation (2019)","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"490_CR30","volume-title":"Robust physical-world attacks on deep learning models","author":"K Eykholt","year":"2018","unstructured":"K. Eykholt et al., Robust physical-world attacks on deep learning models, 2018."},{"key":"490_CR31","doi-asserted-by":"publisher","DOI":"10.1109\/MMSP.2018.8547128","volume-title":"Adversarial attacks on face detectors using neural net based constrained optimization","author":"AJ Bose","year":"2018","unstructured":"A.J. Bose, P. Aarabi, Adversarial attacks on face detectors using neural net based constrained optimization (2018)"},{"key":"490_CR32","volume-title":"A novel weber local binary descriptor for fingerprint liveness detection, IEEE Transactions on Systems, Man, and Cybernetics: Systems","author":"Z Xia","year":"2018","unstructured":"Z. Xia, C. Yuan, R. Lv, X. Sun, N.N. Xiong, Y.-Q. Shi, A novel weber local binary descriptor for fingerprint liveness detection, IEEE Transactions on Systems, Man, and Cybernetics: Systems (2018)"},{"key":"490_CR33","unstructured":"R.F. Nogueira, R. de Alencar Lotufo, R.C. Machado, in 2014 IEEE workshop on biometric measurements and systems for security and medical applications (BIOMS) Proceedings. Evaluating software-based fingerprint liveness detection using convolutional networks and local binary patterns (IEEE, 2014), pp. 22\u201329"},{"issue":"6","key":"490_CR34","doi-asserted-by":"publisher","first-page":"1206","DOI":"10.1109\/TIFS.2016.2520880","volume":"11","author":"RF Nogueira","year":"2016","unstructured":"R.F. Nogueira, R. de Alencar Lotufo, R.C. Machado, Fingerprint liveness detection using convolutional neural networks. IEEE transactions on information forensics and security 11(6), 1206\u20131213 (2016)","journal-title":"IEEE transactions on information forensics and security"},{"issue":"9","key":"490_CR35","doi-asserted-by":"publisher","first-page":"2190","DOI":"10.1109\/TIFS.2018.2812193","volume":"13","author":"T Chugh","year":"2018","unstructured":"T. Chugh, K. Cao, A.K. Jain, Fingerprint spoof buster: Use of minutiae-centered patches. IEEE Transactions on Information Forensics and Security 13(9), 2190\u20132202 (2018)","journal-title":"IEEE Transactions on Information Forensics and Security"},{"issue":"C","key":"490_CR36","doi-asserted-by":"publisher","first-page":"58","DOI":"10.1016\/j.patrec.2016.03.015","volume":"77","author":"S Kim","year":"2016","unstructured":"S. Kim, B. Park, B.S. Song, S. Yang, Deep belief network based statistical feature learning for fingerprint liveness detection \u2606. Pattern Recognition Letters 77(C), 58\u201365 (2016)","journal-title":"Pattern Recognition Letters"},{"issue":"8","key":"490_CR37","doi-asserted-by":"publisher","first-page":"2532","DOI":"10.3390\/s18082532","volume":"18","author":"T Nguyen","year":"2018","unstructured":"T. Nguyen, E. Park, X. Cui, V. Nguyen, H. Kim, fPADnet: small and efficient convolutional neural network for presentation attack detection. Sensors 18(8), 2532 (2018)","journal-title":"Sensors"},{"key":"490_CR38","doi-asserted-by":"crossref","unstructured":"F. Pala, B. Bhanu, in Deep Learning for Biometrics. Deep triplet embedding representations for liveness detection (Springer, 2017), pp. 287\u2013307","DOI":"10.1007\/978-3-319-61657-5_12"},{"key":"490_CR39","first-page":"1139","volume-title":"International conference on machine learning","author":"I Sutskever","year":"2013","unstructured":"I. Sutskever, J. Martens, G. Dahl, G. Hinton, in International conference on machine learning. On the importance of initialization and momentum in deep learning (2013), pp. 1139\u20131147"},{"key":"490_CR40","volume-title":"International Joint Conference on Biometrics","author":"C Kai","year":"2011","unstructured":"C. Kai, E. Liul, L. Pangi, J. Liangi, T. Jie, in International Joint Conference on Biometrics. Fingerprint matching by incorporating minutiae discriminability (2011)"},{"issue":"5","key":"490_CR41","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/0041-5553(64)90137-5","volume":"4","author":"BT Polyak","year":"1964","unstructured":"B.T. Polyak, Some methods of speeding up the convergence of iteration methods. USSR Computational Mathematics and Mathematical Physics 4(5), 1\u201317 (1964)","journal-title":"USSR Computational Mathematics and Mathematical Physics"},{"key":"490_CR42","volume-title":"Iapr International Conference on Biometrics","author":"L Ghiani","year":"2013","unstructured":"L. Ghiani et al., in Iapr International Conference on Biometrics. LivDet 2013 Fingerprint Liveness Detection Competition 2013 (2013)"},{"key":"490_CR43","doi-asserted-by":"publisher","first-page":"110","DOI":"10.1016\/j.imavis.2016.07.002","volume":"58","author":"L Ghiani","year":"2017","unstructured":"L. Ghiani, D.A. Yambay, V. Mura, G.L. Marcialis, F. Roli, S.A. Schuckers, Review of the Fingerprint Liveness Detection (LivDet) competition series: 2009 to 2015. Image and Vision Computing 58, 110\u2013128 (2017)","journal-title":"Image and Vision Computing"}],"container-title":["EURASIP Journal on Image and Video Processing"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13640-020-0490-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1186\/s13640-020-0490-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13640-020-0490-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,1,12]],"date-time":"2021-01-12T00:08:18Z","timestamp":1610410098000},"score":1,"resource":{"primary":{"URL":"https:\/\/jivp-eurasipjournals.springeropen.com\/articles\/10.1186\/s13640-020-0490-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,1,13]]},"references-count":43,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2020,12]]}},"alternative-id":["490"],"URL":"https:\/\/doi.org\/10.1186\/s13640-020-0490-z","relation":{},"ISSN":["1687-5281"],"issn-type":[{"value":"1687-5281","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,1,13]]},"assertion":[{"value":"31 October 2019","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"31 December 2019","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"13 January 2020","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"Not applicable.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}},{"value":"The authors declare that they have no competing interests.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"1"}}