Method and apparatus with anti-spoofing

An anti-spoofing apparatus comprising:

• a processor configured to:
• extract an input embedding vector from input biometric information;
• obtain a fake embedding vector of a predetermined fake model based on fake biometric information;
• obtain either one or both of a real embedding vector of a real model and an enrolled embedding vector of an enrollment model the enrollment model being generated based on biometric information of an enrolled user;
• determine a confidence value of the input embedding vector based on the fake embedding vector and either one or both of the real embedding vector and the enrolled embedding vector;
• and
• determine whether the input biometric information is forged, based on the confidence value.

A processor-implemented anti-spoofing method comprising:

• extracting an input embedding vector from input biometric information;
• determining a first, a second, and a third posterior probability respectively between the input embedding vector and a real embedding vector of a predetermined real model, a fake embedding vector of a predetermined fake model, and an enrolled embedding vector of an enrollment model of a user;
• determining a confidence value of the input embedding vector based on a first probability ratio between the first posterior probability and the second posterior probability, and on a second probability ratio between the second posterior probability and the third posterior probability;
• and
• determining whether the input biometric information is forged, based on the confidence value.