English
Related papers

Related papers: Amora: Black-box Adversarial Morphing Attack

200 papers

Clustering algorithms play a fundamental role as tools in decision-making and sensible automation processes. Due to the widespread use of these applications, a robustness analysis of this family of algorithms against adversarial noise has…

Machine Learning · Computer Science 2021-11-11 Antonio Emanuele Cinà , Alessandro Torcinovich , Marcello Pelillo

Adversarial attacks are small, carefully crafted perturbations, imperceptible to the naked eye; that when added to an image cause deep learning models to misclassify the image with potentially detrimental outcomes. With the rise of…

Computer Vision and Pattern Recognition · Computer Science 2019-07-11 Rohan Reddy Mekala , Gudjon Einar Magnusson , Adam Porter , Mikael Lindvall , Madeline Diep

Classical adversarial attacks for Face Recognition (FR) models typically generate discrete examples for target identity with a single state image. However, such paradigm of point-wise attack exhibits poor generalization against numerous…

Computer Vision and Pattern Recognition · Computer Science 2023-04-11 Qian Li , Yuxiao Hu , Ye Liu , Dongxiao Zhang , Xin Jin , Yuntian Chen

Black-box attacks usually face two problems: poor transferability and the inability to evade the adversarial defense. To overcome these shortcomings, we create an original approach to generate adversarial examples by smoothing the linear…

Computer Vision and Pattern Recognition · Computer Science 2022-06-23 Hui Xia , Rui Zhang , Shuliang Jiang , Zi Kang

Deep learning models have shown their vulnerability when dealing with adversarial attacks. Existing attacks almost perform on low-level instances, such as pixels and super-pixels, and rarely exploit semantic clues. For face recognition…

Computer Vision and Pattern Recognition · Computer Science 2022-11-21 Shuai Jia , Bangjie Yin , Taiping Yao , Shouhong Ding , Chunhua Shen , Xiaokang Yang , Chao Ma

With the progress in AI-based facial forgery (i.e., deepfake), people are increasingly concerned about its abuse. Albeit effort has been made for training classification (also known as deepfake detection) models to recognize such forgeries,…

Computer Vision and Pattern Recognition · Computer Science 2022-04-29 Zhi Wang , Yiwen Guo , Wangmeng Zuo

Machine learning based intrusion detection systems are increasingly targeted by black box adversarial attacks, where attackers craft evasive inputs using indirect feedback such as binary outputs or behavioral signals like response time and…

Cryptography and Security · Computer Science 2025-12-16 Sabrine Ennaji , Elhadj Benkhelifa , Luigi Vincenzo Mancini

The primary objective of face morphing is to combine face images of different data subjects (e.g. a malicious actor and an accomplice) to generate a face image that can be equally verified for both contributing data subjects. In this paper,…

Computer Vision and Pattern Recognition · Computer Science 2020-07-08 Sushma Venkatesh , Haoyu Zhang , Raghavendra Ramachandra , Kiran Raja , Naser Damer , Christoph Busch

While the rapid development of facial recognition algorithms has enabled numerous beneficial applications, their widespread deployment has raised significant concerns about the risks of mass surveillance and threats to individual privacy.…

Computer Vision and Pattern Recognition · Computer Science 2026-03-24 Paweł Borsukiewicz , Daniele Lunghi , Melissa Tessa , Jacques Klein , Tegawendé F. Bissyandé

Face recognition has evolved significantly with the advancement of deep learning techniques, enabling its widespread adoption in various applications requiring secure authentication. However, this progress has also increased its exposure to…

Computer Vision and Pattern Recognition · Computer Science 2025-05-16 Iurii Medvedev , Nuno Goncalves

Adversarial attacks on face recognition systems (FRSs) pose serious security and privacy threats, especially when these systems are used for identity verification. In this paper, we propose a novel method for generating adversarial…

Computer Vision and Pattern Recognition · Computer Science 2025-07-17 Sunpill Kim , Seunghun Paik , Chanwoo Hwang , Minsu Kim , Jae Hong Seo

The proliferation of facial recognition (FR) systems has raised privacy concerns in the digital realm, as malicious uses of FR models pose a significant threat. Traditional countermeasures, such as makeup style transfer, have suffered from…

Computer Vision and Pattern Recognition · Computer Science 2026-03-05 Binh M. Le , Simon S. Woo

Face Recognition systems (FRS) have been found to be vulnerable to morphing attacks, where the morphed face image is generated by blending the face images from contributory data subjects. This work presents a novel direction for generating…

Computer Vision and Pattern Recognition · Computer Science 2023-10-16 Jag Mohan Singh , Raghavendra Ramachandra

Face morphing attacks pose a substantial risk to the reliability of face recognition systems used in passport issuance, border control, and digital identity verification. Detecting morphing attacks from a single facial image remains…

Computer Vision and Pattern Recognition · Computer Science 2026-04-21 Raghavendra Ramachandra

Morph images threaten Facial Recognition Systems (FRS) by presenting as multiple individuals, allowing an adversary to swap identities with another subject. Morph generation using generative adversarial networks (GANs) results in…

Computer Vision and Pattern Recognition · Computer Science 2022-10-20 Samuel Price , Sobhan Soleymani , Nasser M. Nasrabadi

The vulnerability of facial recognition systems to face morphing attacks is well known. Many different approaches for morphing attack detection have been proposed in the scientific literature. However, the morphing attack detection…

Cryptography and Security · Computer Science 2020-04-06 Ulrich Scherhag , Christian Rathgeb , Johannes Merkle , Christoph Busch

A morph is created by combining two (or more) face images from two (or more) identities to create a composite image that is highly similar to all constituent identities, allowing the forged morph to be biometrically associated with more…

Computer Vision and Pattern Recognition · Computer Science 2025-07-29 Nitish Shukla , Arun Ross

Recent works have demonstrated the feasibility of inverting face recognition systems, enabling to recover convincing face images using only their embeddings. We leverage such template inversion models to develop a novel type ofdeep morphing…

Computer Vision and Pattern Recognition · Computer Science 2024-10-23 Laurent Colbois , Hatef Otroshi Shahreza , Sébastien Marcel

The privacy and security of face data on social media are facing unprecedented challenges as it is vulnerable to unauthorized access and identification. A common practice for solving this problem is to modify the original data so that it…

Computer Vision and Pattern Recognition · Computer Science 2023-06-27 Yueming Lyu , Yue Jiang , Ziwen He , Bo Peng , Yunfan Liu , Jing Dong

Denoising diffusion models have shown remarkable potential in various generation tasks. The open-source large-scale text-to-image model, Stable Diffusion, becomes prevalent as it can generate realistic artistic or facial images with…

Computer Vision and Pattern Recognition · Computer Science 2023-05-09 Ruijia Wu , Yuhang Wang , Huafeng Shi , Zhipeng Yu , Yichao Wu , Ding Liang