@misc{13796,
  abstract     = {{Machine learning systems are increasingly integrated into security-relevant applications, making their vul-nerability to adversarial examples a potential risk. Banknote authentication is one such use case that ensures trustworthiness in financial transactions. In addition to traditional security features, the printing technique of banknotes itself is leveraged for authentication. The Intaglio printing produces particularly fine print structures that can be analyzed and differentiated using spatial frequency analysis, e.g. the wavelet packet transform. Ap-propriate feature engineering in the wavelet packet tree allows the extraction of features enabling fast and reliable authentication. This paper presents an approach that generates adversarial examples by manipulating the feature space, classifying counterfeit banknote specimens as genuine. To this end, the variance of the wavelet coefficient distribution of individual detail nodes in the wavelet packet tree is increased. The approach leads to minimally perturbed images that are visually indistinguishable from the original input. The majority of pixels remain unchanged, i.e. 77% for the lower-quality and 86% for the high-quality counterfeit. Furthermore, the limitations of this approach are discussed, shedding light on its applicability and potential challenges.}},
  author       = {{Knaup, Julian and Holst, Christoph-Alexander and Lohweg, Volker}},
  booktitle    = {{8th International Forum on Research and Technologies for Society and Industry : IEEE RTSI 2024 - Research and Technologies for Society and Industry, International Forum }},
  isbn         = {{979-8-3503-6214-5}},
  keywords     = {{Printing, Technological innovation, Wavelet domain, Perturbation methods, Authentication, Feature extraction, Wavelet analysis, Wavelet packets, Security, Wavelet coefficients}},
  location     = {{Milano, Italy}},
  pages        = {{560--565}},
  publisher    = {{IEEE}},
  title        = {{{Hidden in Plain Sight: Adversarial Attack on Wavelet-Based Banknote Authentication}}},
  doi          = {{10.1109/rtsi61910.2024.10761182}},
  year         = {{2024}},
}

@misc{13816,
  abstract     = {{The dataset comprises six image sections of one genuine and two counterfeit banknote-like specimens. The images were captured at 1200dpi and the sections are each 256x256 pixels in size. The genuine banknote specimen was produced with Intaglio printing and the counterfeits with offset printing processes of varying quality. There are 150 instances for each of the six image sections, with 50 samples of each of the three classes available, so in total almost 900 images are provided.}},
  author       = {{Knaup, Julian and Holst, Christoph-Alexander and Lohweg, Volker}},
  publisher    = {{Zenodo}},
  title        = {{{Banknote Authentication based on Intaglio print}}},
  doi          = {{10.5281/ZENODO.11119014}},
  year         = {{2024}},
}