English
Related papers

Related papers: Amora: Black-box Adversarial Morphing Attack

200 papers

Morphing is a challenge to face recognition (FR) for which several morphing attack detection solutions have been proposed. We argue that face recognition and differential morphing attack detection (D-MAD) in principle perform very similar…

Computer Vision and Pattern Recognition · Computer Science 2026-04-24 Una M. Kelly , Luuk J. Spreeuwers , Raymond N. J. Veldhuis

With the rapid development of face recognition (FR) systems, the privacy of face images on social media is facing severe challenges due to the abuse of unauthorized FR systems. Some studies utilize adversarial attack techniques to defend…

Computer Vision and Pattern Recognition · Computer Science 2024-05-17 Yuhao Sun , Lingyun Yu , Hongtao Xie , Jiaming Li , Yongdong Zhang

Deep learning face recognition models are used by state-of-the-art surveillance systems to identify individuals passing through public areas (e.g., airports). Previous studies have demonstrated the use of adversarial machine learning (AML)…

Computer Vision and Pattern Recognition · Computer Science 2021-09-15 Nitzan Guetta , Asaf Shabtai , Inderjeet Singh , Satoru Momiyama , Yuval Elovici

Deep learning-based object detection has become ubiquitous in the last decade due to its high accuracy in many real-world applications. With this growing trend, these models are interested in being attacked by adversaries, with most of the…

Computer Vision and Pattern Recognition · Computer Science 2024-12-30 Pham Phuc , Son Vuong , Khang Nguyen , Tuan Dang

Adversarial attacks aim to disturb the functionality of a target system by adding specific noise to the input samples, bringing potential threats to security and robustness when applied to facial recognition systems. Although existing…

Computer Vision and Pattern Recognition · Computer Science 2023-05-05 Qian Wang , Yongqin Xian , Hefei Ling , Jinyuan Zhang , Xiaorui Lin , Ping Li , Jiazhong Chen , Ning Yu

Adversarial attacks remain a significant threat that can jeopardize the integrity of Machine Learning (ML) models. In particular, query-based black-box attacks can generate malicious noise without having access to the victim model's…

Cryptography and Security · Computer Science 2025-03-18 Jeonghwan Park , Niall McLaughlin , Ihsen Alouani

Deep learning-based facial recognition (FR) models have demonstrated state-of-the-art performance in the past few years, even when wearing protective medical face masks became commonplace during the COVID-19 pandemic. Given the outstanding…

Computer Vision and Pattern Recognition · Computer Science 2022-09-08 Alon Zolfi , Shai Avidan , Yuval Elovici , Asaf Shabtai

Face morphing attacks are widely recognized as one of the most challenging threats to face recognition systems used in electronic identity documents. These attacks exploit a critical vulnerability in passport enrollment procedures adopted…

Computer Vision and Pattern Recognition · Computer Science 2026-02-19 Nicolò Di Domenico , Annalisa Franco , Matteo Ferrara , Davide Maltoni

Despite the considerable performance improvements of face recognition algorithms in recent years, the same scientific advances responsible for this progress can also be used to create efficient ways to attack them, posing a threat to their…

Computer Vision and Pattern Recognition · Computer Science 2025-01-28 Eduarda Caldeira , Guray Ozgur , Tahar Chettaoui , Marija Ivanovska , Peter Peer , Fadi Boutros , Vitomir Struc , Naser Damer

Morphing attacks is a threat to biometric systems where the biometric reference in an identity document can be altered. This form of attack presents an important issue in applications relying on identity documents such as border security or…

Computer Vision and Pattern Recognition · Computer Science 2020-12-11 Eklavya Sarkar , Pavel Korshunov , Laurent Colbois , Sébastien Marcel

Morphing attacks have posed a severe threat to Face Recognition System (FRS). Despite the number of advancements reported in recent works, we note serious open issues such as independent benchmarking, generalizability challenges and…

Face Recognition Systems (FRS) are vulnerable to various attacks performed directly and indirectly. Among these attacks, face morphing attacks are highly potential in deceiving automatic FRS and human observers and indicate a severe…

Computer Vision and Pattern Recognition · Computer Science 2022-10-03 Jag Mohan Singh , Raghavendra Ramachandra

The success of deep face recognition (FR) systems has raised serious privacy concerns due to their ability to enable unauthorized tracking of users in the digital world. Previous studies proposed introducing imperceptible adversarial noises…

Computer Vision and Pattern Recognition · Computer Science 2024-08-06 Minghui Li , Jiangxiong Wang , Hao Zhang , Ziqi Zhou , Shengshan Hu , Xiaobing Pei

Face recognition systems (FRS) can be compromised by face morphing attacks, which blend textural and geometric information from multiple facial images. The rapid evolution of generative AI, especially Generative Adversarial Networks (GAN)…

Computer Vision and Pattern Recognition · Computer Science 2024-10-11 Aravinda Reddy PN , Raghavendra Ramachandra , Sushma Venkatesh , Krothapalli Sreenivasa Rao , Pabitra Mitra , Rakesh Krishna

Adversarial attacks that generate small L_p-norm perturbations to mislead classifiers have limited success in black-box settings and with unseen classifiers. These attacks are also not robust to defenses that use denoising filters and to…

Computer Vision and Pattern Recognition · Computer Science 2020-04-14 Ali Shahin Shamsabadi , Ricardo Sanchez-Matilla , Andrea Cavallaro

Face Recognition Systems (FRS) are critical for security but remain vulnerable to morphing attacks, where synthetic images blend biometric features from multiple individuals. We propose a novel Single-Image Morphing Attack Detection (S-MAD)…

Computer Vision and Pattern Recognition · Computer Science 2025-11-18 Ria Shekhawat , Sushrut Patwardhan , Raghavendra Ramachandra , Praveen Kumar Chandaliya , Kishor P. Upla

Deep neural networks have been shown to exhibit an intriguing vulnerability to adversarial input images corrupted with imperceptible perturbations. However, the majority of adversarial attacks assume global, fine-grained control over the…

Computer Vision and Pattern Recognition · Computer Science 2019-08-19 Ameya Joshi , Amitangshu Mukherjee , Soumik Sarkar , Chinmay Hegde

Automatic speech recognition (ASR) models are prevalent, particularly in applications for voice navigation and voice control of domestic appliances. The computational core of ASRs are deep neural networks (DNNs) that have been shown to be…

Sound · Computer Science 2022-04-13 Xiaoliang Wu , Ajitha Rajan

Various facial manipulation techniques have drawn serious public concerns in morality, security, and privacy. Although existing face forgery classifiers achieve promising performance on detecting fake images, these methods are vulnerable to…

Computer Vision and Pattern Recognition · Computer Science 2022-03-30 Shuai Jia , Chao Ma , Taiping Yao , Bangjie Yin , Shouhong Ding , Xiaokang Yang

Morphed face images have recently become a growing concern for existing face verification systems, as they are relatively easy to generate and can be used to impersonate someone's identity for various malicious purposes. Efficient Morphing…

Computer Vision and Pattern Recognition · Computer Science 2023-06-29 Marija Ivanovska , Vitomir Štruc