AdvHat: Real-World Adversarial Attack on ArcFace Face ID System (2019-08-23T00:00:00.000000Z)

TL;DR

A novel easily reproducible technique to attack the best public Face ID system ArcFace in different shooting conditions by printing the rectangular paper sticker on a common color printer and putting it on the hat.

Abstract

In this paper we propose a novel easily reproducible technique to attack the best public Face ID system ArcFace in different shooting conditions. To create an attack, we print the rectangular paper sticker on a common color printer and put it on the hat. The adversarial sticker is prepared with a novel algorithm for off-plane transformations of the image which imitates sticker location on the hat. Such an approach confuses the state-of-the-art public Face ID model LResNet100E-IR, ArcFace@ms1m-refine-v2 and is transferable to other Face ID models.

Authors

Stepan Alekseevich Komkov

2 papers

Aleksandr Petiushko

3 papers

TL;DR

Abstract

Authors

References53 items

Generative Adversarial Networks

Face Recognition Vendor Test (FRVT) part 2 :: identification

Probabilistic Face Embeddings

Fooling Automated Surveillance Cameras: Adversarial Patches to Attack Person Detection

Seeing isn't Believing: Practical Adversarial Attack Against Object Detectors

Ongoing face recognition vendor test (FRVT) part 2:

Physical Adversarial Examples for Object Detectors

Robust Physical-World Attacks on Deep Learning Visual Classification

ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector

Robust Physical Adversarial Attack on Faster R-CNN Object Detector

YOLOv3: An Incremental Improvement

DARTS: Deceiving Autonomous Cars with Toxic Signs

CosFace: Large Margin Cosine Loss for Deep Face Recognition

ArcFace: Additive Angular Margin Loss for Deep Face Recognition

Additive Margin Softmax for Face Verification

Rogue Signs: Deceiving Traffic Sign Recognition with Malicious Ads and Logos

Adversarial Generative Nets: Neural Network Attacks on State-of-the-Art Face Recognition

A General Framework for Adversarial Examples with Objectives

Adversarial Patch

Note on Attacking Object Detectors with Adversarial Stickers

Adversarial Examples that Fool Detectors

One Pixel Attack for Fooling Deep Neural Networks

Boosting Adversarial Attacks with Momentum

Robust Physical-World Attacks on Deep Learning Models

Synthesizing Robust Adversarial Examples

Towards Deep Learning Models Resistant to Adversarial Attacks

SphereFace: Deep Hypersphere Embedding for Face Recognition

Adversarial Examples for Semantic Segmentation and Object Detection

YOLO9000: Better, Faster, Stronger

Universal Adversarial Perturbations

Accessorize to a Crime: Real and Stealthy Attacks on State-of-the-Art Face Recognition

MS-Celeb-1M: A Dataset and Benchmark for Large-Scale Face Recognition

Adversarial examples in the physical world

Large-Margin Softmax Loss for Convolutional Neural Networks

Practical Black-Box Attacks against Machine Learning

The MegaFace Benchmark: 1 Million Faces for Recognition at Scale

The Limitations of Deep Learning in Adversarial Settings

Spatial Transformer Networks

Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks

MegaFace: A Million Faces for Recognition at Scale

FaceNet: A unified embedding for face recognition and clustering

Explaining and Harnessing Adversarial Examples

Learning Face Representation from Scratch

Web-scale training for face identification

DeepFace: Closing the Gap to Human-Level Performance in Face Verification

Face Recognition Vendor Test (FRVT) Performance of Face Identification Algorithms NIST IR 8009

Intriguing properties of neural networks

ImageNet: A large-scale hierarchical image database

Face Recognition by Humans: Nineteen Results All Computer Vision Researchers Should Know About

GENERATIVE ADVERSARIAL NETS

and L

Ms-celeb-1m challenge 3: Face feature test/trillion pairs

InsightFace Model Zoo, LResNet100E-IR, ArcFace@ms1m-reﬁne-v2

Field of Study

Journal Information

Name

Page

Venue Information

Name

Type

URL

Alternate Names