24 June 2019 Reg. No ACTIVITY INITIATION AND FINANCIAL COMMITMENT* International Conference on Biometrics for Borders 2019 (ICBB2019) – Morphing and Morphing Attack Detection Methods (9-10 October 2019 in Warsaw, Poland): 2019/RIU/SCD.7 *The approved Template constitutes with the annexed detailed estimated budget the financial commitment. Total estimated budget:                                          190,289.87 EUR (see also estimated budget enclosed) Logistics: 94,949.87 EUR Participants: 90,930.00 EUR Procurement: 4,410 EUR Ref. to budget line(s):                                          RIU – 3300 Implementation phase:                                            January 2019 - December 2019 Approval date: Non-financial actors1          Name                              Date               Signature Director of Capacity Building Division Head of Research and Innovation Unit Head of the Standardisation and Capacity Development Sector (ad interim) Activity Manager Other relevant internal stakeholders Operational Initiator          Financial Initiator    Operational Verifier         Financial Verifier Authorizing Officer Date:                          Date:                  Date:                        Date:              Date: Name:                          Name:                  Name:                        Name:              Name: 1 All relevant internal stakeholders Frontex - European Border and Coast Guard Agency www.frontex.europa.eu | Pl. Europejski 6, 00-844 Warsaw, Poland | Tel. +48 22 205 95 00 | Fax +48 22 205 95 01

ACTIVITY INITIATION AND FINANCIAL COMMITMENT*                    International Conference on Biometrics for Borders 2019 (ICBB2019) – Morphing and Morphing Attack Detection Methods (9-10 October 2019 in Warsaw, Poland): 2019/RIU/SCD.7 Signature                   Signature               Signature               Signature               Signature FINANCIAL DATA: Please validate in ABAC commitments no: FRO.                    Missions (level 2) FRO.                    Participants (level 2) 1. Objectives (purpose) Biometric technologies that are used to recognise persons have become an integral part of the border checks process, with the application of biometric technologies providing new opportunities to border management to facilitate legitimate travelers while at the same time making borders more secure. At the same time, this large-scale integration of biometric technologies into the border control infrastructure introduces new challenges to border security: Biometric systems can be attacked and subverted for the purpose of passing through border control undetected. This means that with the introduction of novel technologies supporting biometric recognition, countermeasures that can prevent, detect or defeat such attacks are needed. For Frontex and the border management community, the exploration and development of advanced biometric technologies and related capacities is crucial to border security and the facilitation of legitimate travellers, especially when considered in the context of the set of EU-wide measures proposed by the Smart Borders Package. However, the Agency currently plays the role of contributor: Frontex participates in the conferences organised by other major players in the field of biometrics, who are not border management authorities, but who are increasingly setting the agenda on biometrics in the context border control and border security. For this reason, Frontex RIU will organise a series of annual conferences – International Conference on Biometrics for Borders (ICBB) – dedicated to the topic of biometrics, its (possible) use in border control, and the challenges they may pose to border security. The strategic objectives of organising an annual Conference on Biometrics for Borders are:  Position the Agency as a key player in this area of research by bringing together research 2 institutions, academia, national authorities from Europe (MS/SAC ) and non-EU countries, and industry;  Enable Frontex to become a driving force in providing support and expertise to Member States/COM on the topic biometrics, and the range of possible applications and implications for borders. Different thematic areas of interest will be covered on a year by year basis, with the ICBB2019 focusing largely on the topic of morphing and its implications for border management, and will be organised in 9-10 October 2019 in Warsaw, Poland. Scope of the ICBB2019 Morphing attacks in the context of border control is a relatively new and undocumented phenomenon. Researchers, industry and law enforcement authorities from around the world are actively engaged in research aimed at addressing and overcoming this threat. However, as of yet there is a lacking overview of the many different actions aimed at addressing and overcoming the threat of morphing attacks to border control. 2 EU Member States and Schengen Associated Countries. Reg. No                                                                                                                          2/9

ACTIVITY INITIATION AND FINANCIAL COMMITMENT*            International Conference on Biometrics for Borders 2019 (ICBB2019) – Morphing and Morphing Attack Detection Methods (9-10 October 2019 in Warsaw, Poland): 2019/RIU/SCD.7 Frontex has undertaken a number of activities related to the topic of morphing and its implications for border control. In the context of the developed training course on Vulnerability Assessment and Testing for Automated Border Control (ABC) Systems, Frontex worked together with experts of the German Federal Office for Information Security (BSI) producing a small study presenting the topic of morphing and the issue of morphing attacks in a border control context for participants of this training to benefit from. This information has also been included by the Risk Analysis Unit in Handbook on Impostor Risk Profiles. In addition, an internal workshop on morphing was organised with the support of BSI for Frontex staff members on 13 September 2017. The primary objectives for the ICBB2019 are: 3  To bring together research institutions, academia, national authorities from Europe (MS/SAC ) and non-EU countries, and industry;  To inventory and discuss ongoing (research) activities related morphing attack detection methods;  To discuss the current situation and identify the scope of the problem for borders. As such, the aim of the conference is to support and contribute to research activities undertaken in this area, at EU level and beyond. The conference will furthermore support and contribute to the strategic objectives of the Frontex Centre of Excellence for Combating Document Fraud (CED) and the European Commission in tackling document fraud, referring to the objectives of the European Commission as outlined in the 2016 Action plan to strengthen the European response to travel document fraud (RIU has actively contributed to the action plan, in particular in providing relevant and up-to-date information on the topic of morphing). Through the action plan the European Commission aims to strengthen Research and Development activities in the area of breeder documents and document verification, including addressing the issue of morphing, in the framework of the Horizon 2020 programme for Secure Societies 2018-2020. To underline the importance of this issue the European Commission has established a consortium on a morphing research program, which will be invited to the conference. Implementation of the Programming Document 2019-2021 The objectives described in this document correspond to the work stream “Capacity Analysis and Development” under RIU-SCD (Standards and Capacity Development Sector – Capacity Analysis and Development) which are listed in the Programming Document 2019-2021. The activity is in line with the Sector’s objectives for 2019:  To develop specific national capacities on morphing attack detection methods relevant to border control, as listed in the Annual Work Programme 2019;  To develop thematic technical capacity building contents - in coordination with TRU - pertinent to the application of new technologies for border control. The present activity template covers the organisation of an International Conference on Biometrics for Borders for 2019, i.e. the ICBB2019 on the topic of Morphing and Morphing Attack Detection Methods, parts of which may intersect and/or may be considered also of importance to the following RIU work lines: Title                                             Activity ID Technology Assessment and Innovation Sector                                                       RIU-TIN Border Security Observatory Sector                                                               RIU-BSO 3 EU Member States and Schengen Associated Countries. Reg. No                                                                                                                  3/9

ACTIVITY INITIATION AND FINANCIAL COMMITMENT*                   International Conference on Biometrics for Borders 2019 (ICBB2019) – Morphing and Morphing Attack Detection Methods (9-10 October 2019 in Warsaw, Poland): 2019/RIU/SCD.7 Standardisation and Capacity Development: -     Development of standards for technical equipment                                             RIU-SCD.1 -     Assessment and testing methodologies                                                         RIU-SCD.2 -     Development of thematic (technical) trainings                                                RIU-SCD.6 Benefits The discussions and dialogue during the conference will result in the following benefits:  Clear identification of the scope of the problem and possible mitigations: An exhaustive overview at EU-level in the format of a report on the outcomes of the conference and the different activities undertaken around the world aimed at addressing this problem in a proper, methodical fashion;  Possibility to establish a network between border management authorities and academia for the exchange of information on on-going research and latest developments in morphing attack detection algorithms/methods;  Position Frontex -              in particular - as an active (global) player and contributor to this area of research and the field of biometrics in general, and enable it to fulfil its responsibility of providing support and expertise to Member States/COM on the topic of morphing and its implications for border control. Overall indicators of Achievement Establish a network for information exchange between all relevant stakeholders; Support the creation of an expert network (with an enhanced role for Frontex); Achieve > 80% participation rate across all invited stakeholders; Delivery of conference report cataloguing challenges and initiatives looking at tackling the issue; Participant satisfaction; Timeliness. 2. Description 2.1 - Preparations and delivery of the International Conference on Biometrics for Borders: Morphing and Morphing Attack Detection Methods International Conference a conference dedicated to the topic of the use of biometrics in the context of border control, with the thematic focus for 2019 on morphing and morphing attack detection and its implications for document authentication and identity verification at the border. Conference to be organised on 9-10 October 2019 in Warsaw, Poland (2 days). The strategic objective of the conference and the organisation thereof on an annual basis, is to position Frontex – and RIU in particular - as an active (global) player and contributor to this area of research and the field of biometrics in general, and enable it to fulfil its responsibility of providing support and expertise to Member States/COM on the topic of morphing and its implications for border control. For the 2019 Conference the main goal is to bring together research institutions, academia, national authorities in Member States and non-EU countries and industry to inventory and discuss different ongoing (research) activities in morphing attack detection methods, to discuss the current situation and identify the scope of the problem for borders, and to support the objectives of the European Commission as outlined in the 2016 Action plan to strengthen the European response to travel document fraud and the European Commission’s consortium on an morphing research program. Objectives  Establish an (international) network of border management authorities and academia Reg. No                                                                                                                         4/9

ACTIVITY INITIATION AND FINANCIAL COMMITMENT*                International Conference on Biometrics for Borders 2019 (ICBB2019) – Morphing and Morphing Attack Detection Methods (9-10 October 2019 in Warsaw, Poland): 2019/RIU/SCD.7 for the exchange of information on on-going research and latest developments in morphing attack detection algorithms/methods;     Providing support to the European Commission and in particular its dedicated consortium on an morphing research program;     More active support to Member States in the effort to detect and mitigate against morphing attacks;     Produce an exhaustive overview in the format of a report on the outcomes of the conference and the different activities undertaken around the world aimed at addressing this problem in a proper, methodical fashion. The conference will take 2 days and will be organised in plenary sessions/debates (possibility of split-off session may be considered). Although the programme is yet to be defined, the following areas of interest - selected due to a high level of relevance to border control - are proposed for discussion in and selection during the development of that programme:     Overview: Statistics on detection rates for morphing attacks: o Importance of creating an objective overview of the nature and the size of the problem across and beyond the EU; o Promote secure and responsible exchange of information between Member States and Researchers (important, considering statistics are largely non-existent).     Morphing: Processing techniques and Biometric Identifiers: o Morphing Techniques (e.g. how is it done/how can it be done); o Face Image; 1. Look-a-like morph (i.e. two subjects highly similar in appearance). 2. Non-lookalike morph (i.e. two subjects highly differing in appearance). o Fingerprint scan; o Iris scan.     Morphing: Modi Operandi (definition/classification purpose): o Morphing attack at the passport application process (Fraudulently Obtained Genuine Travel Document); o Morphing through modification of existing travel documents (Travel Document Fraud).     Morphing Attacks: Attack points in the document-control chain: o Morphing attacks at the start of the passport application process; o Morphing attacks during border checks (either ABC, semi-automated systems, or manual border control);     Prevention and detection of morphing during enrolment (i.e. passport application procedures);     Detection of image morphs during border checks (i.e. ABC, semi-automated systems, and manual border control);     Training on morphing detection techniques; o Human recognition versus automatic recognition; o Morphing detection approaches (related to training, i.e. focussed on human and machine-assisted detection techniques);     Morphing Attack Detection algorithms and Assessment Types of different Morphing Techniques; o Algorithmic capability to detect facial morphing in still photographs and existing/novel face recognition algorithms and their resistance against morphing; o Vulnerability Assessment of Biometric Systems to Morphing Attacks. Reg. No                                                                                                                      5/9

ACTIVITY INITIATION AND FINANCIAL COMMITMENT*                International Conference on Biometrics for Borders 2019 (ICBB2019) – Morphing and Morphing Attack Detection Methods (9-10 October 2019 in Warsaw, Poland): 2019/RIU/SCD.7 Back-up: Rasa Karbauskaite Deliverable           Indicators of achievement            Expected output Conference            Timely delivery; 80% participation   Conference tailored to the needs and rate across all invited              requirements of both EC/Member States stakeholders; High-quality           and research/academia and industry, i.e. conference sessions, Overall         covering the issue of morphing from customer satisfaction; Knowledge     multiple possible angles. sharing; Participant satisfaction. Report/Publica Timely delivery of high-quality             A final report in the form of a publication tion (limited         catalogue of current challenges      detailing the outcomes of the conference distribution)         and initiatives looking at tackling  and presenting a high-quality, current the issue.                           overview of ongoing (research) activities in morphing attack detection methods, identifying the current situation and the scope of problem for borders. Risk Category          Risk Description       Probability  Potential                  Corrective action (High,       consequences/ medium or    Impact low) Strategic              MSs showing no         Low to       Reduced quality            Ongoing contacts with interest, no           Medium       of work/                   all stakeholders, early response, timing,                   Activity may               planning and increasing conflict with other                 have to be                 internal effort and work events, etc.                        postponed.                 in order to accomplish the task. Continued              Low to       Inability to               Ongoing contacts with unavailability or      Medium       carry out the              all stakeholders, early low interest of                     planned                    planning and increasing experts (research                   activity/                  internal effort and work institutions and                    Activity may               in order to accomplish academia) to                        have to be                 the task. participate in the                  postponed. conference. Organisational         Lack of                Medium       Activity may               Early planning and synchronisation of                  have to be                 regular consultations Frontex staff                       postponed.                 with Finance involved and/or                                                Unit/relevant units; delay in the administrative                                                 Periodic meetings with procedures                                                     a project team. (procurement). Reg. No                                                                                                                      6/9

ACTIVITY INITIATION AND FINANCIAL COMMITMENT*                     International Conference on Biometrics for Borders 2019 (ICBB2019) – Morphing and Morphing Attack Detection Methods (9-10 October 2019 in Warsaw, Poland): 2019/RIU/SCD.7 Lack of manpower          Medium to      Activity may               Reinforce the Project to carry out all          High           have to be                 Team with extra scheduled                                postponed.                 personnel by Q1 2019; activities. Reprioritise activities if deemed necessary. No availability of        Low            Activity may               Early planning and suitable venue                           have to be                 booking of venue. (hotel or Frontex                        postponed. HQ) to organise the conference. Financial              Insufficient funds        Low            Inability to               Regular consultations in the budget.                           carry out the              with Finance Unit on planned                    the budget and activity.                  procurement. 3. Stakeholders Internal:  Research and Innovation Unit (RIU)  Training Unit: o Involvement foreseen on conference topics related to Training on morphing detection techniques (either as participant or contributor).  Centre of Excellence for Combating Document Fraud (CED): o Involvement foreseen on conference topics related to prevention and detection of morphing attacks at the border (either as participant or contributor).  Risk Analysis Unit (RAU): o Involvement foreseen on conference topics related to statistics, modi operandi, detection algorithms and assessment tools (either as participant or contributor).  Vulnerability Assessment Unit (VAU): o Involvement foreseen on conference topics related to statistics, modi operandi, detection algorithms and assessment tools (either as participant or contributor).  International and European Cooperation (IEC) Unit: o Liaison with international and European organisations and relevant authorities. External (~175 participants including speakers):  European Commission (EC consortium on an morphing research programme)  EU Member States  Third Countries  Academic Institutions/Research Community  EU Agencies (Europol, Joint Research Centre)  Biometrics Community (e.g. European Association for Biometrics; Biometrics Institute)  Industry 4. Management of the activity: Unit/sector responsible for activity implemented: General direction: Implementation oversight for all lines: Operational (Activity) Manager:                            . Operational (Activity) Team: Administrative and project support:                horizontal support. Other units/ sectors involved:                for input on the conference agenda and considering the close relation of the topic to document fraud and overall document security; TRU with a possible Reg. No                                                                                                                           7/9

ACTIVITY INITIATION AND FINANCIAL COMMITMENT*               International Conference on Biometrics for Borders 2019 (ICBB2019) – Morphing and Morphing Attack Detection Methods (9-10 October 2019 in Warsaw, Poland): 2019/RIU/SCD.7 interest for translating (part of the) deliverables into training curriculum for border guards; and         considering the close link of the topic to risks and vulnerabilities for border checks. 5. Resources Financial Resources required Missions: n/a Activity Total: 190,289.87 EUR*: o Conference venue + event planning: 94,949.87 EUR (under existing Frontex Framework Contract) o Participants: 90,930.00 EUR (at 100 participants estimated eligible for reimbursement) o Services for writing conference report: 3,360 EUR o Services for editing/publication of conference report (400 copies under existing Frontex Framework Contract) : 1,050 EUR *including contingency up to 5% Human Resources required (Frontex) – consider also resources from other sectors/ units and the support functions in ADMIN (ICT/FIN/HR) Total: 1.5 FTE o     0.5  FTE:       Research Officer (Activity Leader) o     0.2  FTE:       Assistant o     0.2  FTE:       Research Officer support o     0.1  FTE:        support o     0.1  FTE:        support and/or direct involvement o     0.1  FTE:        support and/or direct involvement o     0.1  FTE:        support and/or direct involvement o     0.1  FTE:        support and/or direct involvement o     0.1  FTE:       support 6. Time schedule Tasks                                             Implementation date              Responsible Actor Conference preparations:                          January – September - Documentation (concept note, online            2019 call, invitation letters, etc.); - Programme content development; - Location scouting/booking; - Managing invitations/list of participants. Conference delivery                               9-10 October 2019 (ED calendar marked for 9 October between 9-10 am) Post-Conference report delivery                   November - December 2019 Reg. No                                                                                                                     8/9

ACTIVITY INITIATION AND FINANCIAL COMMITMENT*           International Conference on Biometrics for Borders 2019 (ICBB2019) – Morphing and Morphing Attack Detection Methods (9-10 October 2019 in Warsaw, Poland): 2019/RIU/SCD.7 7. Reporting Title of report                              Addressee                         Deadline Meeting minutes / report in preparation      Activity Management               10 working days after of the Conference                            Non-financial actors              each meeting Conference report                            Activity Management               December 2019 Non-financial actors 8. Approver guidelines (based on lessons learned)  Provide HoU.RIU and DCBD with regular updates on the progress of organisation of the conference;  Report significant issues and deviances within the planned activities as soon as identified. The report should include recommended corrective actions. Reg. No                                                                                                                 9/9