Face recognition attack test

Abstract

Disclosed in one or more embodiments of the present description are a face recognition attack testing method and system. The method comprises: determining at least one first pose of a test terminal; determining a plurality of second poses of a target terminal, wherein a target application is installed in the target terminal; adjusting the target terminal to the plurality of second poses; acquiring a recognition result of a test action played back on the test terminal, wherein the test action is recognized at each second pose by the target application; and if the recognition result indicates that the recognition is successful, determining an attack pose on the basis of the second pose corresponding to the recognition result and the first pose.

Description

Face recognition attack test Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a face recognition attack testing method and system. Background Art

[0002] Face recognition authentication methods generally fall into two categories: silent single-frame authentication and interactive authentication with gestures (blinking, opening the mouth, shaking the head, nodding, etc.). Generally speaking, interactive authentication methods offer a higher level of security than silent authentication. When testing facial recognition applications with interactive gestures, manual authentication has traditionally been employed. This involves testers performing actions based on the facial recognition application's prompts to attack the application. Manual authentication is inefficient and incurs significant testing costs.

[0003] Summary of the Invention

[0004] One or more embodiments of this specification describe a face recognition attack testing method and system, which can complete face attack testing in an automated manner, thereby improving testing efficiency.

[0005] According to a first aspect, a face recognition attack test method is provided, which includes the following steps: determining at least one first posture of a test terminal; determining multiple second postures of a target terminal, wherein the target terminal has a target application installed; adjusting the target terminal to the multiple second postures; obtaining recognition results of a test action played by the target application on the test terminal in each of the second postures; if the recognition result is a successful recognition result, determining an attack posture based on the second posture and the first posture corresponding to the recognition result.

[0006] As an optional implementation scheme of the method described in the first aspect, the attack posture includes distance data and angle data; the attack posture is determined based on the second posture and the first posture corresponding to the successful recognition result, specifically including: based on the second posture and the first posture corresponding to the successful recognition result, determining the relative distance between the test terminal and the target terminal, and obtaining the distance data; based on the second posture and the first posture corresponding to the successful recognition result, determining the three-dimensional motion posture of the test terminal relative to the target terminal, and obtaining the angle data based on the three-dimensional motion posture.

[0007] As an optional implementation of the method described in the first aspect, test action data is pre-stored in the test terminal; the test terminal plays the test action, specifically including: in response to the received test task, collecting the face recognition interface image of the target application in real time; extracting action prompt information from the face recognition interface image; determining the test action based on the action prompt information and playing it.

[0008] As an optional implementation of the method described in the first aspect, test action data is pre-stored in the test terminal; obtaining the recognition result of the test action played by the target application to the test terminal in each of the second postures, specifically including: the test terminal plays the test action in a preset playback order; for each test action, controlling the target terminal to traverse the multiple second postures, and obtaining the recognition result of the test action by the target application in each of the second postures.

[0009] According to a second aspect, another face recognition attack test method is provided, which is applied to a face recognition attack test system, wherein the face recognition attack test system includes: a robotic arm, a test terminal, a target terminal and a control terminal; the test terminal is configured to play a test action at at least one first posture in response to a test task issued by the control terminal; the robotic arm is configured to adjust the target terminal to a plurality of second postures preset by the test task in response to the test task issued by the control terminal; the target terminal is arranged on the robotic arm and has a target application installed, and is configured to recognize the test action through the target application when moving to each of the second postures; the control terminal is used to generate the test task and issue it to the robotic arm and the test terminal; and determine the attack posture based on the second posture and the first posture corresponding to the successful recognition result of the test action by the target application.

[0010] As an optional implementation scheme of the method described in the second aspect, the attack posture includes distance data and angle data; the control end is specifically used to determine the relative distance between the test terminal and the target terminal based on the second posture and the first posture corresponding to the successful recognition result, and obtain the distance data; based on the second posture and the first posture corresponding to the successful recognition result, determine the three-dimensional motion posture of the test terminal relative to the target terminal, and obtain the angle data based on the three-dimensional motion posture.

[0011] As an optional implementation of the method described in the second aspect, test action data is pre-stored in the test terminal; the test terminal is specifically used to respond to the test task issued by the control terminal, collect the face recognition interface image of the target application in real time; extract action prompt information from the face recognition interface image; determine the test action based on the action prompt information and play it.

[0012] As an optional implementation of the method described in the second aspect, test action data is pre-stored in the test terminal; the test terminal is specifically used to play the test actions in a preset playback order; the control end is specifically used to adjust the posture of the target terminal through the robotic arm for each test action, so that the target terminal traverses the multiple second postures, and obtains the recognition result of the test action by the target application in each of the second postures.

[0013] According to a third aspect, a face recognition attack test system is provided, comprising: a robotic arm, a test terminal, a target terminal and a control terminal; the test terminal is configured to play a test action at at least one first posture in response to a test task issued by the control terminal; the robotic arm is configured to adjust the target terminal to a plurality of second postures preset by the test task in response to the test task issued by the control terminal; the target terminal is arranged on the robotic arm and is installed with a target application, and is configured to identify the test action through the target application when moving to each of the second postures; the control terminal is used to generate the test task and issue it to the robotic arm and the test terminal; and determine the attack posture based on the second posture and the first posture corresponding to the successful recognition result of the test action by the target application.

[0014] As an optional implementation of the system described in the third aspect, the robotic arm includes a controller, a driver and an actuator; the control end is specifically used to determine the control instructions based on the multiple second postures and the preset motion path of the target terminal; the controller is configured to execute the control instructions and control the driver to adjust the posture of the target terminal to the multiple second postures.

[0015] According to a fourth aspect, an evaluation method is provided, which includes: determining at least one target terminal, wherein the at least one target terminal has at least one target application installed; using the face recognition attack test method as described in the first aspect, testing the target application to determine the attack posture of the target application; based on the attack posture, playing a preset attack action through the test terminal, and obtaining the recognition result of the attack action by the target application; determining the evaluation result of the target application based on the total number of attacks of the attack action and the number of successful recognitions in the recognition result.

[0016] The face recognition attack testing method and system provided by one or more embodiments of this specification can automatically complete face recognition attack testing, effectively reduce labor costs, and efficiently discover security vulnerabilities in interactive face scanning. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate one or more embodiments of this specification or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments recorded in this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0018] FIG1 is a flowchart of a face recognition attack testing method provided by one or more embodiments of this specification;

[0019] FIG2 is a schematic diagram of the structure of a face recognition attack testing system provided by one or more embodiments of this specification;

[0020] FIG3 is a schematic diagram of the structure of a robotic arm provided by one or more embodiments of this specification;

[0021] FIG4 is a flowchart of another face recognition attack testing method provided by one or more embodiments of this specification;

[0022] FIG5 is a flow chart of an evaluation method provided by one or more embodiments of this specification. DETAILED DESCRIPTION

[0023] To help those skilled in the art better understand the technical solutions in this specification, the following will provide a clear and complete description of the technical solutions in the embodiments of this specification, in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of this specification, not all of them. All other embodiments obtained by those skilled in the art based on the embodiments in this specification without creative work should fall within the scope of protection of this specification.

[0024] It should be noted that in other embodiments, the steps of the corresponding method are not necessarily performed in the order shown and described in this specification. In some other embodiments, the method may include more or fewer steps than those described in this specification. In addition, a single step described in this specification may be broken down into multiple steps for description in other embodiments, and multiple steps described in this specification may be combined into a single step for description in other embodiments.

[0025] Currently, interactive face recognition is commonly used for face recognition. Specifically, during the face recognition process, the terminal interface prompts users to open their mouth, blink, shake their head, and nod. Users are prompted to perform corresponding actions. The terminal interface's face recognition window recognizes these actions and confirms whether the face recognition is successful, thereby determining whether to log in to the corresponding app.

[0026] To prevent hackers from attacking apps' facial recognition authentication processes, potentially leaking user privacy and even causing financial losses, apps typically include features to protect against fake user authentication. To assess apps' capabilities and vulnerabilities in this area, they are typically tested for facial recognition attacks.

[0027] For apps that use interactive movements for facial recognition authentication, manual testing is often employed due to the complexity of attack testing. This involves the tester performing actions such as shaking their head, nodding, opening their mouth, and blinking according to prompts provided by the app's interface. The app's built-in recognition algorithm then captures and identifies the tester's movements within the face recognition frame. During testing, the tester's attack data and the app's corresponding recognition results are recorded to evaluate the app's ability to defend against prosthetic attacks and identify vulnerabilities.

[0028] However, in actual operation, the position of the face in the face scan frame and the relative distance between the tester and the terminal are uncontrollable, making it difficult to reproduce the vulnerability after it is discovered, and the manual vulnerability discovery process is inefficient. Furthermore, during manual testing, data recording is also asynchronous, which is subject to human subjective factors and can easily cause errors in the recorded test results, leading to analytical bias.

[0029] In view of this, this specification aims to propose a face recognition attack testing method and system, which can complete face attack testing in an automated manner.

[0030] The following will further describe in detail the manual review capability assessment method and system described in the embodiments of this specification in conjunction with the accompanying drawings and specific embodiments. However, this detailed description does not constitute a limitation to the embodiments of this specification.

[0031] Please refer to FIG. 1 , which shows a method for evaluating manual review capabilities provided by this embodiment. The method specifically includes steps S100 to S108 .

[0032] S100: Determine at least one first position of the test terminal.

[0033] The test terminal is used to play test actions, such as nodding, raising the head, shaking the head, opening the mouth, blinking, etc.

[0034] In an exemplary embodiment of the present specification, the test terminal may be a display device capable of playing test actions, such as a display, a high-definition screen, or a terminal device with a display, such as a computer, a TV, an iPad, etc.

[0035] In an exemplary embodiment of the present specification, the position of the test terminal during the test process may remain unchanged or may be changed.

[0036] In an exemplary embodiment of the present specification, the first posture of the test terminal is composed of the position and angle of the test terminal in the coordinate system of the test site. A reference object with a known position can be set in the test site, and then the position data of the test terminal can be determined by the three-point positioning method. After the position data is determined, the angle data of the test terminal relative to the preset reference direction can be measured, such as the deflection angle and the pitch angle.

[0037] S102: Determine multiple second postures of the target terminal.

[0038] The target application to be tested is deployed in the target terminal. When the target application is started, the test actions played by the test terminal are collected through the detection box in the interactive interface, and then the collected test actions are recognized through the built-in recognition program, and the recognition results are presented through the interactive interface.

[0039] In an exemplary embodiment of the present specification, the target terminal may be a terminal device capable of installing the target application, such as a computer, a mobile phone, an access control system with an interactive face recognition function, a gate system, etc.

[0040] In an exemplary embodiment of this specification, the second posture can be pre-set or randomly selected during the test. The second posture of the target terminal is composed of the position and angle of the target terminal in the test site coordinate system. The target terminal's own posture sensor can obtain motion data of the target terminal during the test, and then determine multiple second postures of the target terminal based on a preset reference position.

[0041] In an exemplary embodiment of the present specification, the second posture of the target terminal is a relative posture of the target terminal with respect to the test terminal as a reference, including distance data between the target terminal and the test terminal, and relative angle data between the target terminal and the test terminal, such as a yaw angle and a pitch angle.

[0042] S104: Adjust the target terminal to the plurality of second postures.

[0043] In an exemplary embodiment of the present invention, a gripping device may be used to adjust the position of a target terminal. For example, a robotic arm may be used to grip the target terminal. By setting a motion path and action instructions of the robotic arm, the robotic arm adjusts the gripped target terminal to multiple second positions.

[0044] S106: Obtain recognition results of the test actions played by the target application to the test terminal at each second posture.

[0045] In an exemplary embodiment of this specification, the recognition algorithm of the target application can be adjusted so that the target application can recognize a single action and provide a recognition result. The test terminal can then play the test actions in a preset playback order. For each test action, the target terminal is controlled to traverse all second postures and obtain the target application's recognition result for the test action in each second posture.

[0046] In an exemplary embodiment of the present specification, the test terminal can respond to a received test task, collect the face recognition interface image of the target application in real time, identify the action prompt information in the face recognition interface image, determine the test action based on the identified action prompt information, and play it.

[0047] In an exemplary embodiment of this specification, the test actions may be pre-stored in the test terminal or read from a storage device by the test terminal. The test terminal and the storage device are connected via a network link, which provides a communication medium between the test terminal and the storage device, including various wired or wireless networks such as a data bus, Bluetooth, and Wi-Fi.

[0048] In an exemplary embodiment of the present specification, the test actions can be stored in various video formats, such as MPEG, MPG, DAT, AVI, MOV, ASF, WMV, MKV, FLVRMVB, MP4, etc. The test terminal is equipped with a player capable of decoding and playing videos in the corresponding formats.

[0049] In an exemplary embodiment of this specification, the target terminal can automatically record the timestamp of reaching each second pose and the timestamp of the recognition result. The timestamp of the test action playback can then be determined from the playback record of the test terminal. Through timestamp matching, a matching result of the pose data, test results, and test action can be obtained. Based on this matching result, the security vulnerabilities of the target application in face recognition attacks can be analyzed.

[0050] S108: If the recognition result is a successful recognition result, determine an attack posture based on the second posture and the first posture corresponding to the recognition result.

[0051] In an exemplary embodiment of the present specification, all recognition results may be recorded by the target terminal, and then the test action and posture data corresponding to the successful recognition results may be selected to determine the attack posture.

[0052] In an exemplary embodiment of the present specification, a data recording program of the target terminal may be set to only record successful recognition results, and then the attack posture is determined based on the test action and posture data corresponding to the successful recognition results.

[0053] The attack posture described in this embodiment is the relative posture of the target terminal and the test terminal, including distance data and angle data. In an exemplary embodiment of this specification, determining the attack posture based on the second posture and the first posture corresponding to the successful recognition result specifically includes: determining the relative distance between the test terminal and the target terminal based on the second posture and the first posture corresponding to the successful recognition result, and obtaining distance data; determining the three-dimensional motion posture of the test terminal relative to the target terminal based on the second posture and the first posture corresponding to the successful recognition result, and obtaining angle data based on the three-dimensional motion posture.

[0054] As can be seen, in the facial recognition attack testing method shown in Figure 1, the attack test is performed by playing a video of the test action on the test terminal, while the target application on the target terminal recognizes the test action. During the test, the first pose of the test terminal and the second pose of the target terminal are both determined, so the attack pose can be determined and the attack process can be repeated under this attack pose. The entire process is completed automatically, which can effectively reduce labor costs and improve testing efficiency compared to manual facial recognition attack testing.

[0055] Corresponding to the above-mentioned facial recognition attack testing method, this embodiment also provides a facial recognition attack testing system. Please refer to Figure 2 , which is a structural diagram of a facial recognition attack testing system according to an exemplary embodiment. The system includes: a control terminal 201 , a robotic arm 202 , a test terminal 203 , and a target terminal 204 .

[0056] The test terminal 203 is configured to play a test action at at least one first posture in response to the test task issued by the control terminal 201.

[0057] The robotic arm 202 is configured to adjust the target terminal 204 to a plurality of second postures preset for the test task in response to the test task issued by the control terminal 201 .

[0058] The target terminal 204 is disposed on the robotic arm 202 and is installed with a target application, and is configured to recognize the test action through the target application when the robot moves to each second posture.

[0059] The control terminal 201 is used to generate a test task and send it to the robot arm 202 and the test terminal 203; and determine the attack posture based on the second posture and the first posture corresponding to the successful recognition result of the test action by the target application.

[0060] In an exemplary embodiment of this specification, control terminal 201 controls robotic arm 202 and target terminal 204 by issuing a test task to accomplish the aforementioned functions. For example, the test task can specify a motion path for robotic arm 202, causing it to move target terminal 204 to a preset second position at a specified time. Target terminal 204, through a pre-configured operating program, can then configure a target application to recognize test actions played by the test terminal at various time points corresponding to the second position.

[0061] In this scenario, the control terminal 201 is connected to the robot arm 202 and the target terminal 204 through a wired or wireless network.

[0062] In an exemplary embodiment of this specification, the control end 201 can also be connected to the robotic arm 202, the test terminal 203 and the target terminal 204 respectively through a wired or wireless network, and control the robotic arm 202, the test terminal 203 and the target terminal 204 to complete the above functions by issuing test tasks.

[0063] In an exemplary embodiment of the present specification, the control terminal 201 may be a physical server of an independent host, or a virtual server carried by a host cluster.

[0064] In an exemplary embodiment of the present specification, the test terminal 203 may pre-store test actions, the test action data may be directly stored in a video format, and the test terminal 203 is configured with a player capable of decoding and playing the test action data.

[0065] In an exemplary embodiment of this specification, the test terminal 203 can also read the test action data from the external memory in response to the test task. The test action data can be directly stored in a video format, and the test terminal 203 is configured with a player capable of decoding and playing the test action data.

[0066] Referring to Figure 3 , in an exemplary embodiment of this specification, robotic arm 202 includes a controller 301, a driver 302, and an actuator 303. The controller 201 is specifically configured to determine control instructions based on multiple second postures and a preset motion path of the target terminal. The controller 301 is configured to execute the control instructions issued by the controller 201, controlling the driver 302 to drive the actuator 303 to adjust the posture of the target terminal 204 to one of the multiple preset second postures.

[0067] Please refer to FIG4 , the face attack test method of the above-mentioned face recognition attack test system is as follows.

[0068] S400 , the control terminal 201 generates a test task and sends it to the robotic arm 202 and the test terminal 203 .

[0069] S402: The test terminal 203 plays a test action at at least one first posture in response to the test task.

[0070] S404 : The robotic arm 202 adjusts the target terminal 204 to a plurality of second postures preset for the test task in response to the test task.

[0071] S406 , when the target terminal 204 moves to each second posture, the target terminal 204 recognizes the test action through the target application and uploads the recognition result to the control terminal 201 .

[0072] S408. The control terminal 201 determines the attack posture based on the second posture and the first posture corresponding to the successful recognition result of the test action.

[0073] In an exemplary embodiment of this specification, the attack posture includes distance data and angle data. Control terminal 201 is specifically configured to determine the relative distance between test terminal 203 and target terminal 204 based on the second posture and the first posture corresponding to the successful recognition result, thereby obtaining distance data. Control terminal 201 then determines the three-dimensional motion posture of test terminal 203 relative to target terminal 204 based on the second posture and the first posture corresponding to the successful recognition result, thereby obtaining angle data based on the three-dimensional motion posture.

[0074] In an exemplary embodiment of this specification, test action data is pre-stored in test terminal 203. Specifically, test terminal 203 is configured to respond to test tasks issued by control terminal 201 by capturing a face recognition interface image of the target application in real time; extracting action prompt information from the face recognition interface image; and determining and playing a test action based on the action prompt information.

[0075] In an exemplary embodiment of the present specification, test action data is pre-stored in the test terminal 203 .

[0076] The test terminal 203 is specifically used to play the test actions in a preset playback order; the control terminal 201 is specifically used to adjust the posture of the target terminal 204 through the robotic arm 202 for each test action, so that the target terminal 204 traverses all preset second postures, and obtains the recognition result of the target application for the test action in each second posture.

[0077] Please refer to FIG5 , an embodiment of the present specification provides an evaluation method, which includes the following steps.

[0078] S500: Determine at least one target terminal, where at least one target application is installed.

[0079] S502: Use the above-mentioned face recognition attack testing method to test the target application and determine the attack posture of the target application.

[0080] S504: Based on the attack posture, a preset attack action is played through the test terminal, and a recognition result of the attack action by the target application is obtained.

[0081] S506: Determine an evaluation result of the target application based on the total number of attacks of the attack action and the number of successful identifications in the identification result.

[0082] In an exemplary embodiment of this specification, for the same target application, the ratio of the number of test actions successfully recognized during each attack test to the total number of attacks can be used as the attack success rate. The lower the attack success rate, the better the target application's ability to resist fake attacks.

[0083] It should be understood that the structures illustrated in the embodiments of this specification do not constitute specific limitations on the systems of the embodiments of this specification. In other embodiments of the specification, the above-mentioned system may include more or fewer components than shown in the figure, or some components may be combined, some components may be separated, or the components may be arranged differently. The components shown in the figure may be implemented in hardware, software, or a combination of software and hardware.

[0084] The various embodiments in this specification are described in a progressive manner. Similar parts between the various embodiments can be referred to in conjunction with each other. Each embodiment focuses on the differences between the other embodiments. In particular, the system embodiments are generally similar to the method embodiments, so the description is relatively simple. For relevant parts, refer to the description of the method embodiments.

[0085] The foregoing description of this specification describes specific embodiments. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims can be performed in an order different from that described in the embodiments and still achieve the desired results. Furthermore, the processes depicted in the accompanying drawings do not necessarily require the specific order shown or the sequential order to achieve the desired results. In certain embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0086] It should be noted that the above examples are merely specific embodiments of the present invention. Obviously, the present invention is not limited to the above examples, and many similar variations are possible. All variations directly derived from or associating with the present invention by those skilled in the art are intended to fall within the scope of protection of the present invention.

Claims

1. A face recognition attack testing method, comprising: Determining at least one first position of the test terminal; Determining a plurality of second positions of a target terminal, wherein the target terminal has a target application installed thereon; Adjusting the target terminal to the plurality of second postures; Obtaining recognition results of the test action played by the target application to the test terminal in each of the second postures; If the recognition result is a successful recognition result, an attack posture is determined based on the second posture and the first posture corresponding to the recognition result.

2. The method of claim 1, wherein the attack posture comprises distance data and angle data; Determining an attack posture based on the second posture and the first posture corresponding to the successful recognition result specifically includes: Determine the relative distance between the test terminal and the target terminal based on the second posture and the first posture corresponding to the successful recognition result, and obtain the distance data; Based on the second posture and the first posture corresponding to the successful recognition result, the three-dimensional motion posture of the test terminal relative to the target terminal is determined, and the angle data is obtained based on the three-dimensional motion posture.

3. The method according to claim 1, wherein the test terminal has test action data pre-stored therein; The test terminal plays the test action, specifically including: In response to the received test task, collecting a face recognition interface image of the target application in real time; Extracting action prompt information from the face recognition interface image; A test action is determined based on the action prompt information and played.

4. The method according to claim 1, wherein the test terminal pre-stores test action data; obtaining the recognition result of the test action played by the target application to the test terminal at each of the second postures, specifically comprising: The test terminal plays the test actions in a preset play order; For each test action, the target terminal is controlled to traverse the multiple second postures, and a recognition result of the test action by the target application in each of the second postures is obtained.

5. A face recognition attack test method, applied to a face recognition attack test system, the face recognition attack test system comprising: Robotic arm, test terminal, target terminal and control terminal; The test terminal is configured to play a test action at at least one first posture in response to a test task sent by the control terminal; The mechanical arm is configured to adjust the target terminal to the Multiple second poses preset for test tasks; The target terminal is disposed on the robot arm and is installed with a target application, and is configured to identify the test action through the target application when moving to each of the second postures; The control end is used to generate the test task and send it to the mechanical arm and the test terminal; And determining an attack posture based on the second posture and the first posture corresponding to the successful recognition result of the test action by the target application.

6. According to the method as claimed in claim 5, the attack posture includes distance data and angle data; the control end is specifically used to determine the relative distance between the test terminal and the target terminal based on the second posture and the first posture corresponding to the successful recognition result, and obtain the distance data; based on the second posture and the first posture corresponding to the successful recognition result, determine the three-dimensional motion posture of the test terminal relative to the target terminal, and obtain the angle data based on the three-dimensional motion posture.

7. According to the method as claimed in claim 5, test action data is pre-stored in the test terminal; the test terminal is specifically used to respond to the test task issued by the control terminal, collect the face recognition interface image of the target application in real time; extract action prompt information from the face recognition interface image; determine the test action based on the action prompt information and play it.

8. The method according to claim 5, wherein the test terminal has test action data pre-stored therein; The test terminal is specifically used to play the test actions according to a preset play order; The control end is specifically used to adjust the posture of the target terminal through the robotic arm for each test action, so that the target terminal traverses the multiple second postures, and obtains the recognition result of the target application for the test action in each of the second postures.

9. A face recognition attack test system, comprising: Robotic arm, test terminal, target terminal and control terminal; The test terminal is configured to play a test action at at least one first posture in response to a test task sent by the control terminal; The robot arm is configured to adjust the target terminal to a plurality of second postures preset in the test task in response to the test task sent by the control end; The target terminal is disposed on the robot arm and is installed with a target application, and is configured to identify the test action through the target application when moving to each of the second postures; The control end is used to generate the test task and send it to the mechanical arm and the test terminal; And determining an attack posture based on the second posture and the first posture corresponding to the successful recognition result of the test action by the target application.

10. The system of claim 9, wherein the robotic arm comprises a controller, a driver, and an actuator; The control end is specifically used to determine the control instruction based on the multiple second postures and the preset motion path of the target terminal; The controller is configured to execute the control instruction and control the driver to adjust the posture of the target terminal to the plurality of second postures.

11. An evaluation method comprising: Determining at least one target terminal, wherein the at least one target terminal has at least one target application installed; Using the face recognition attack testing method according to any one of claims 1 to 4, the target application is tested to determine the attack posture of the target application; Based on the attack posture, a preset attack action is played through the test terminal, and a recognition result of the attack action by the target application is obtained; An evaluation result of the target application is determined based on the total number of attacks of the attack action and the number of successful identifications in the identification result.

Images