English
Related papers

Related papers: TAFIM: Targeted Adversarial Attacks against Facial…

200 papers

Anti-facial recognition (AFR) image filters alter images in ways that are subtle to people but blinding to computer vision. Yet, despite widespread interest in these technologies to subvert surveillance, users rarely use them in practice --…

Computer Vision and Pattern Recognition · Computer Science 2026-05-14 Jacob Lagogiannis , William Agnew , Rosa I. Arriaga , Sauvik Das

Adversarial training is a common strategy for enhancing model robustness against adversarial attacks. However, it is typically tailored to the specific attack types it is trained on, limiting its ability to generalize to unseen threat…

Computer Vision and Pattern Recognition · Computer Science 2025-04-16 Fatemeh Amerehi , Patrick Healy

Face recognition (FR) systems have demonstrated outstanding verification performance, suggesting suitability for real-world applications ranging from photo tagging in social media to automated border control (ABC). In an advanced FR system…

Computer Vision and Pattern Recognition · Computer Science 2021-02-09 Fatemeh Vakhshiteh , Ahmad Nickabadi , Raghavendra Ramachandra

Face forgery generation technologies generate vivid faces, which have raised public concerns about security and privacy. Many intelligent systems, such as electronic payment and identity verification, rely on face forgery detection.…

Computer Vision and Pattern Recognition · Computer Science 2025-11-13 Zhaoyu Chen , Bo Li , Kaixun Jiang , Shuang Wu , Shouhong Ding , Wenqiang Zhang

Recent successful adversarial attacks on face recognition show that, despite the remarkable progress of face recognition models, they are still far behind the human intelligence for perception and recognition. It reveals the vulnerability…

Computer Vision and Pattern Recognition · Computer Science 2022-07-05 Keshav Kasichainula , Hadi Mansourifar , Weidong Shi

Investigating new methods of creating face morphing attacks is essential to foresee novel attacks and help mitigate them. Creating morphing attacks is commonly either performed on the image-level or on the representation-level. The…

Computer Vision and Pattern Recognition · Computer Science 2023-03-14 Naser Damer , Meiling Fang , Patrick Siebke , Jan Niklas Kolf , Marco Huber , Fadi Boutros

Deep neural networks are known to be vulnerable to adversarial examples, i.e., images that are maliciously perturbed to fool the model. Generating adversarial examples has been mostly limited to finding small perturbations that maximize the…

Computer Vision and Pattern Recognition · Computer Science 2018-04-03 Hossein Hosseini , Radha Poovendran

Recent studies have shown remarkable success in face manipulation task with the advance of GANs and VAEs paradigms, but the outputs are sometimes limited to low-resolution and lack of diversity. In this work, we propose Additive Focal…

Computer Vision and Pattern Recognition · Computer Science 2019-08-21 Shengju Qian , Kwan-Yee Lin , Wayne Wu , Yangxiaokang Liu , Quan Wang , Fumin Shen , Chen Qian , Ran He

Facially manipulated images and videos or DeepFakes can be used maliciously to fuel misinformation or defame individuals. Therefore, detecting DeepFakes is crucial to increase the credibility of social media platforms and other media…

Computer Vision and Pattern Recognition · Computer Science 2020-11-20 Paarth Neekhara , Brian Dolhansky , Joanna Bitton , Cristian Canton Ferrer

Transferable adversarial attack has drawn increasing attention due to their practical threaten to real-world applications. In particular, the feature-level adversarial attack is one recent branch that can enhance the transferability via…

Computer Vision and Pattern Recognition · Computer Science 2022-04-25 Xianglong , Yuezun Li , Haipeng Qu , Junyu Dong

We propose a test-time defense mechanism against adversarial attacks: imperceptible image perturbations that significantly alter the predictions of a model. Unlike existing methods that rely on feature filtering or smoothing, which can lead…

Computer Vision and Pattern Recognition · Computer Science 2025-10-06 Dong Lao , Yuxiang Zhang , Haniyeh Ehsani Oskouie , Yangchao Wu , Alex Wong , Stefano Soatto

Deep Neural Networks (DNNs) are vulnerable to adversarial examples generated by imposing subtle perturbations to inputs that lead a model to predict incorrect outputs. Currently, a large number of researches on defending adversarial…

Computer Vision and Pattern Recognition · Computer Science 2020-01-01 Hua Wang , Jie Wang , Zhaoxia Yin

Neural networks are prone to adversarial attacks. In general, such attacks deteriorate the quality of the input by either slightly modifying most of its pixels, or by occluding it with a patch. In this paper, we propose a method that keeps…

Computer Vision and Pattern Recognition · Computer Science 2019-10-18 Konrad Zolna , Michal Zajac , Negar Rostamzadeh , Pedro O. Pinheiro

Thanks to recent advances in deep neural networks (DNNs), face recognition systems have become highly accurate in classifying a large number of face images. However, recent studies have found that DNNs could be vulnerable to adversarial…

Machine Learning · Computer Science 2020-01-29 Kazuya Kakizaki , Kosuke Yoshida

While DeepFake applications are becoming popular in recent years, their abuses pose a serious privacy threat. Unfortunately, most related detection algorithms to mitigate the abuse issues are inherently vulnerable to adversarial attacks…

Computer Vision and Pattern Recognition · Computer Science 2024-03-05 Xiangtao Meng , Li Wang , Shanqing Guo , Lei Ju , Qingchuan Zhao

Text-to-image diffusion models are nothing but a revolution, allowing anyone, even without design skills, to create realistic images from simple text inputs. With powerful personalization tools like DreamBooth, they can generate images of a…

Computer Vision and Pattern Recognition · Computer Science 2023-10-23 Thanh Van Le , Hao Phung , Thuan Hoang Nguyen , Quan Dao , Ngoc Tran , Anh Tran

The rising use of deepfakes in criminal activities presents a significant issue, inciting widespread controversy. While numerous studies have tackled this problem, most primarily focus on deepfake detection. These reactive solutions are…

Computer Vision and Pattern Recognition · Computer Science 2025-12-23 Jaehwan Jeong , Sumin In , Sieun Kim , Hannie Shin , Jongheon Jeong , Sang Ho Yoon , Jaewook Chung , Sangpil Kim

Whilst face recognition applications are becoming increasingly prevalent within our daily lives, leading approaches in the field still suffer from performance bias to the detriment of some racial profiles within society. In this study, we…

Computer Vision and Pattern Recognition · Computer Science 2020-04-21 Seyma Yucer , Samet Akçay , Noura Al-Moubayed , Toby P. Breckon

Deep learning models are vulnerable to adversarial examples and make incomprehensible mistakes, which puts a threat on their real-world deployment. Combined with the idea of adversarial training, preprocessing-based defenses are popular and…

Computer Vision and Pattern Recognition · Computer Science 2021-10-18 Tao Bai , Jun Zhao , Lanqing Guo , Bihan Wen

In this paper, we delve into the susceptibility of federated medical image analysis systems to adversarial attacks. Our analysis uncovers a novel exploitation avenue: using gradient information from prior global model updates, adversaries…

Machine Learning · Computer Science 2023-10-24 Erfan Darzi , Florian Dubost , Nanna. M. Sijtsema , P. M. A van Ooijen