Abstract: The RealAI research team of Tsinghua University successfully cracked the face recognition of nineteen mobile in just fifteen minutes by using anti sample interference technology in the February of this year.These cracked mobile phones all use 2D face recognition. However apple mobile phone using 3D face recognition failed to crack. Now many domestic face recognition still use 2D face recognition because of the cost.So they face the risk of easy to be cracked.This paper mainly describes the basic principle and application of face recognition and it also analyzes the technical challenge and security risk of face recognition easy to be cracked. In response to the situation of face recognition easy to be cracked and create a benign ecological development environment of this industry, this paper also raises targeted regulatory research.

Key words: face recognition, easy to crack, technical challenge, security risk, regulatory research

摘要： 今年2月清华大学RealAI研究团队利用对抗样本干扰技术，在短短15分钟内成功破解了19款国内主流手机的人脸识别系统，这些被破解的手机均采用2D人脸识别。而对于采用3D人脸识别的苹果手机则未能成功破解。考虑到成本原因，目前国内较多人脸识别应用场合仍采用2D人脸识别，因此这些场合存在人脸识别“易破解”造成的安全隐患。本文简要阐述了人脸识别基本原理及应用现状。充分调研分析了目前人脸识别“易破解”面临的技术挑战，并分析其所面临的安全风险。应对人脸识别“易破解”现状并提供良性的行业生态发展环境，提出具有针对性的监管研究。

关键词: 人脸识别, 易破解, 技术挑战, 安全风险, 监管研究