Fast black box attack of face recognition system based on metaheuristic simulated annealing

Yao Wang; Chuang Liu; Junyi Hu; Aijun Li; Yi Zhang; Hongying Lu

doi:10.1117/12.2680397

31 May 2023 Fast black box attack of face recognition system based on metaheuristic simulated annealing

Yao Wang, Chuang Liu, Junyi Hu, Aijun Li, Yi Zhang, Hongying Lu

Proceedings Volume 12704, Eighth International Symposium on Advances in Electrical, Electronics, and Computer Engineering (ISAEECE 2023); 127041N (2023) https://doi.org/10.1117/12.2680397
Event: 8th International Symposium on Advances in Electrical, Electronics and Computer Engineering (ISAEECE 2023), 2023, Hangzhou, China

Abstract

Deep neural networks (DNNs), which have high accuracy prediction and stable network performance, have been widely deployed in various fields. However, the adversarial example, a sample of input data which has been modified very slightly in a way, may easily cause a DNN to maximize loss. Instead of white box attack being able to obtain gradient information, most DNN based systems in actual use can only be attacked by multiple queries. In this paper, we regard face recognition (FR) system as target, and propose a new method named SA-Attack to generate adversarial samples which cannot be distinguished by human within very limited queries. Experiments show that SA-Attack can successfully attack advanced face recognition models, including public and commercial solutions, which proves the practicability of our method.

Citation Download Citation

Yao Wang, Chuang Liu, Junyi Hu, Aijun Li, Yi Zhang, and Hongying Lu "Fast black box attack of face recognition system based on metaheuristic simulated annealing", Proc. SPIE 12704, Eighth International Symposium on Advances in Electrical, Electronics, and Computer Engineering (ISAEECE 2023), 127041N (31 May 2023); https://doi.org/10.1117/12.2680397

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available