References & Citations
Computer Science > Computer Vision and Pattern Recognition
Title: Rethinking Impersonation and Dodging Attacks on Face Recognition Systems
(Submitted on 17 Jan 2024 (v1), last revised 25 Apr 2024 (this version, v3))
Abstract: Face Recognition (FR) systems can be easily deceived by adversarial examples that manipulate benign face images through imperceptible perturbations. Adversarial attacks on FR encompass two types: impersonation (targeted) attacks and dodging (untargeted) attacks. Previous methods often achieve a successful impersonation attack on FR; However, it does not necessarily guarantee a successful dodging attack on FR in the black-box setting. In this paper, our key insight is that the generation of adversarial examples should perform both impersonation and dodging attacks simultaneously. To this end, we propose a novel attack method termed as Adversarial Pruning (Adv-Pruning), to fine-tune existing adversarial examples to enhance their dodging capabilities while preserving their impersonation capabilities. Adv-Pruning consists of Priming, Pruning, and Restoration stages. Concretely, we propose Adversarial Priority Quantification to measure the region-wise priority of original adversarial perturbations, identifying and releasing those with minimal impact on absolute model output variances. Then, Biased Gradient Adaptation is presented to adapt the adversarial examples to traverse the decision boundaries of both the attacker and victim by adding perturbations favoring dodging attacks on the vacated regions, preserving the prioritized features of the original perturbations while boosting dodging performance. As a result, we can maintain the impersonation capabilities of original adversarial examples while effectively enhancing dodging capabilities. Comprehensive experiments demonstrate the superiority of our method compared with state-of-the-art adversarial attacks.
Submission history
From: Fengfan Zhou [view email][v1] Wed, 17 Jan 2024 01:10:17 GMT (278kb,D)
[v2] Fri, 16 Feb 2024 02:55:23 GMT (278kb,D)
[v3] Thu, 25 Apr 2024 08:31:00 GMT (6008kb,D)
Link back to: arXiv, form interface, contact.