Search Results for author:
Found 9 papers, 4 papers with code
Rethinking Impersonation and Dodging Attacks on Face Recognition Systems
Then, Biased Gradient Adaptation is presented to adapt the adversarial examples to traverse the decision boundaries of both the attacker and victim by adding perturbations favoring dodging attacks on the vacated regions, preserving the prioritized features of the original perturbations while boosting dodging performance.
Contrastive Pseudo Learning for Open-World DeepFake Attribution
The challenge in sourcing attribution for forgery faces has gained widespread attention due to the rapid development of generative techniques.
Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition
A hard challenge in developing practical face recognition (FR) attacks is due to the black-box nature of the target FR model, i. e., inaccessible gradient and parameter information to attackers.
Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition
For face recognition attacks, existing methods typically generate the l_p-norm perturbations on pixels, however, resulting in low attack transferability and high vulnerability to denoising defense models.
Exploring Frequency Adversarial Attacks for Face Forgery Detection
In addition, the proposed frequency attack enhances the transferability across face forgery detectors as black-box attacks.
Structure Destruction and Content Combination for Face Anti-Spoofing
In pursuit of consolidating the face verification systems, prior face anti-spoofing studies excavate the hidden cues in original images to discriminate real persons and diverse attack types with the assistance of auxiliary supervision.
Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition
Deep neural networks, particularly face recognition models, have been shown to be vulnerable to both digital and physical adversarial examples.
Delving into Data: Effectively Substitute Training for Black-box Attack
Previous substitute training approaches focus on stealing the knowledge of the target model based on real training data or synthetic data, without exploring what kind of data can further improve the transferability between the substitute and target models.
Towards Interpretable Face Recognition
Deep CNNs have been pushing the frontier of visual recognition over past years.
