English
Related papers

Related papers: Real-World Transferable Adversarial Attack on Face…

200 papers

A single perturbation can pose the most natural images to be misclassified by classifiers. In black-box setting, current universal adversarial attack methods utilize substitute models to generate the perturbation, then apply the…

Computer Vision and Pattern Recognition · Computer Science 2021-01-06 Jing Wu , Mingyi Zhou , Shuaicheng Liu , Yipeng Liu , Ce Zhu

The research in the field of adversarial attacks and models' vulnerability is one of the fundamental directions in modern machine learning. Recent studies reveal the vulnerability phenomenon, and understanding the mechanisms behind this is…

Machine Learning · Computer Science 2024-01-26 Kseniia Kuvshinova , Olga Tsymboi , Ivan Oseledets

Face forgery generation technologies generate vivid faces, which have raised public concerns about security and privacy. Many intelligent systems, such as electronic payment and identity verification, rely on face forgery detection.…

Computer Vision and Pattern Recognition · Computer Science 2025-11-13 Zhaoyu Chen , Bo Li , Kaixun Jiang , Shuang Wu , Shouhong Ding , Wenqiang Zhang

Deep neural networks (DNNs) have been used in digital forensics to identify fake facial images. We investigated several DNN-based forgery forensics models (FFMs) to examine whether they are secure against adversarial attacks. We…

Computer Vision and Pattern Recognition · Computer Science 2020-05-21 Rong Huang , Fuming Fang , Huy H. Nguyen , Junichi Yamagishi , Isao Echizen

Face anti-spoofing (FAS) is indispensable for a face recognition system. Many texture-driven countermeasures were developed against presentation attacks (PAs), but the performance against unseen domains or unseen spoofing types is still…

Computer Vision and Pattern Recognition · Computer Science 2023-06-27 Chih-Jung Chang , Yaw-Chern Lee , Shih-Hsuan Yao , Min-Hung Chen , Chien-Yi Wang , Shang-Hong Lai , Trista Pei-Chun Chen

With the flourishing prosperity of generative models, manipulated facial images have become increasingly accessible, raising concerns regarding privacy infringement and societal trust. In response, proactive defense strategies embed…

Cryptography and Security · Computer Science 2025-10-03 Yue Li , Linying Xue , Dongdong Lin , Qiushi Li , Hui Tian , Hongxia Wang

Deep neural networks for 3D point clouds have been demonstrated to be vulnerable to adversarial examples. Previous 3D adversarial attack methods often exploit certain information about the target models, such as model parameters or outputs,…

Computer Vision and Pattern Recognition · Computer Science 2025-08-22 Shuchao Pang , Zhenghan Chen , Shen Zhang , Liming Lu , Siyuan Liang , Anan Du , Yongbin Zhou

The robustness and generalization ability of Presentation Attack Detection (PAD) methods is critical to ensure the security of Face Recognition Systems (FRSs). However, in a real scenario, Presentation Attacks (PAs) are various and it is…

Computer Vision and Pattern Recognition · Computer Science 2022-08-02 Wentian Zhang , Haozhe Liu , Feng Liu , Raghavendra Ramachandra , Christoph Busch

GAN is a deep-learning based generative approach to generate contents such as images, languages and speeches. Recently, studies have shown that GAN can also be applied to generative adversarial attack examples to fool the machine-learning…

Machine Learning · Computer Science 2019-11-15 Feng Chen , Yunkai Shang , Bo Xu , Jincheng Hu

The increasingly pervasive facial recognition (FR) systems raise serious concerns about personal privacy, especially for billions of users who have publicly shared their photos on social media. Several attempts have been made to protect…

Computer Vision and Pattern Recognition · Computer Science 2023-05-24 Chun Pong Lau , Jiang Liu , Rama Chellappa

Deep neural networks are vulnerable to adversarial attacks. White-box adversarial attacks can fool neural networks with small adversarial perturbations, especially for large size images. However, keeping successful adversarial perturbations…

Computer Vision and Pattern Recognition · Computer Science 2020-11-11 Yongwei Wang , Mingquan Feng , Rabab Ward , Z. Jane Wang , Lanjun Wang

Transferable adversarial images raise critical security concerns for computer vision systems in real-world, black-box attack scenarios. Although many transfer attacks have been proposed, existing research lacks a systematic and…

Cryptography and Security · Computer Science 2025-09-17 Zhengyu Zhao , Hanwei Zhang , Renjue Li , Ronan Sicre , Laurent Amsaleg , Michael Backes , Qi Li , Qian Wang , Chao Shen

The transfer-based black-box adversarial attack setting poses the challenge of crafting an adversarial example (AE) on known surrogate models that remain effective against unseen target models. Due to the practical importance of this task,…

Cryptography and Security · Computer Science 2026-03-31 Meixi Zheng , Kehan Wu , Yanbo Fan , Rui Huang , Baoyuan Wu

Generative adversarial networks (GANs) have remarkably advanced in diverse domains, especially image generation and editing. However, the misuse of GANs for generating deceptive images, such as face replacement, raises significant security…

Computer Vision and Pattern Recognition · Computer Science 2024-01-31 Lei Zhang , Hao Chen , Shu Hu , Bin Zhu , Ching Sheng Lin , Xi Wu , Jinrong Hu , Xin Wang

Face-morphing attacks have been a cause for concern for a number of years. Striving to remain one step ahead of attackers, researchers have proposed many methods of both creating and detecting morphed images. These detection methods,…

Computer Vision and Pattern Recognition · Computer Science 2020-12-22 Richard T. Marriott , Sami Romdhani , Stéphane Gentric , Liming Chen

Recently, some research show that deep neural networks are vulnerable to the adversarial attacks, the well-trainned samples or patches could be used to trick the neural network detector or human visual perception. However, these adversarial…

Computer Vision and Pattern Recognition · Computer Science 2023-12-29 Xianyi Chen , Fazhan Liu , Dong Jiang , Kai Yan

With the broad use of face recognition, its weakness gradually emerges that it is able to be attacked. So, it is important to study how face recognition networks are subject to attacks. In this paper, we focus on a novel way to do attacks…

Computer Vision and Pattern Recognition · Computer Science 2018-12-03 Qing Song , Yingqi Wu , Lu Yang

The success of face recognition (FR) systems has led to serious privacy concerns due to potential unauthorized surveillance and user tracking on social networks. Existing methods for enhancing privacy fail to generate natural face images…

Computer Vision and Pattern Recognition · Computer Science 2025-07-31 Liqin Wang , Qianyue Hu , Wei Lu , Xiangyang Luo

Face recognition has achieved considerable progress in recent years thanks to the development of deep neural networks, but it has recently been discovered that deep neural networks are vulnerable to adversarial examples. This means that…

Computer Vision and Pattern Recognition · Computer Science 2022-06-28 Xiaoliang Liu , Furao Shen , Jian Zhao , Changhai Nie

Deep neural networks are vulnerable to adversarial examples that are crafted by imposing imperceptible changes to the inputs. However, these adversarial examples are most successful in white-box settings where the model and its parameters…

Machine Learning · Computer Science 2021-12-20 Tianjin Huang , Vlado Menkovski , Yulong Pei , YuHao Wang , Mykola Pechenizkiy