Vec2Face: Unveil Human Faces from their Blackbox Features in Face Recognition
Not on the map. Why?
Abstract (arXiv)
Unveiling face images of a subject given his/her high-level representations extracted from a blackbox Face Recognition engine is extremely challenging. It is because the limitations of accessible information from that engine including its structure and uninterpretable extracted features. This paper presents a novel generative structure with Bijective Metric Learning, namely Bijective Generative Adversarial Networks in a Distillation framework (DiBiGAN), for synthesizing faces of an identity given that person's features. In order to effectively address this problem, this work firstly introduces a bijective metric so that the distance measurement and metric learning process can be directly adopted in image domain for an image reconstruction task. Secondly, a distillation process is introduced to maximize the information exploited from the blackbox face recognition engine. Then a Feature-Conditional Generator Structure with Exponential Weighting Strategy is presented for a more robust generator that can synthesize realistic faces with ID preservation. Results on several benchmarking datasets including CelebA, LFW, AgeDB, CFP-FP against matching engines have demonstrated the effectiveness of DiBiGAN on both image realism and ID preservation properties.
Key facts. Cited by 36 papers in the map (data through 7 Oct 2026). First posted on arXiv 16 Mar 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 5; 2022: 4; 2023: 6; 2024: 6; 2025: 8; 2026: 7.
36 papers.
Sort:
By area:
- 2023Text Embeddings Reveal (Almost) As Much As Textcited by 189
- 2024Arc2Face: A Foundation Model for ID-Consistent Human Facescited by 101
- 2024Extracting Prompts by Inverting LLM Outputscited by 40
- 2021The Right to Talk: An Audio-Visual Transformer Approachcited by 33
- 2021BiMaL: Bijective Maximum Likelihood Approach to Domain Adaptation in Semantic Scene Segmentationcited by 31
- 2023Controllable Inversion of Black-Box Face Recognition Models via Diffusioncited by 22
- 2021FedFR: Joint Optimization Federated Framework for Generic and Personalized Face Recognitioncited by 16
- 2023Cross-view Action Recognition Understanding From Exocentric to Egocentric Perspectivecited by 14
- 2022OTAdapt: Optimal Transport-based Approach For Unsupervised Domain Adaptationcited by 12
- 2022CONDA: Continual Unsupervised Domain Adaptation Learning in Visual Perception for Self-Driving Carscited by 11
- 2024Face Reconstruction from Face Embeddings using Adapter to a Face Foundation Modelcited by 9
- 2024SlerpFace: Face Template Protection via Spherical Linear Interpolationcited by 8
24 more
- 2021Darker than Black-Box: Face Reconstruction from Similarity Queriescited by 6
- 2022Vec2Face-v2: Unveil Human Faces from their Blackbox Features via Attention-based Network in Face Recognitioncited by 4
- 2024Face Reconstruction Transfer Attack as Out-of-Distribution Generalizationcited by 3
- 2025DiffMI: Breaking Face Recognition Privacy via Diffusion-Driven Training-Free Model Inversioncited by 3
- 2025IDFace: Face Template Protection for Efficient and Secure Identificationcited by 3
- 2021Efficient Large-Scale Face Clustering Using an Online Mixture of Gaussianscited by 2
- 2022Assessing Privacy Risks from Feature Vector Reconstruction Attackscited by 2
- 2023CROVIA: Seeing Drone Scenes from Car Perspective via Cross-View Adaptationcited by 2
- 2023CoMaL: Conditional Maximum Likelihood Approach to Self-supervised Domain Adaptation in Long-tail Semantic Segmentationcited by 2
- 2024Approximating Optimal Morphing Attacks using Template Inversioncited by 2
- 2025Non-Adaptive Adversarial Face Generationcited by 2
- 2026Scores Know Bobs Voice: Speaker Impersonation Attackcited by 2
- 2023ID2image: Leakage of non-ID information into face descriptors and inversion from descriptors to imagescited by 1
- 2025BIMA: Bijective Maximum Likelihood Learning Approach to Hallucination Prediction and Mitigation in Large Vision-Language Modelscited by 1
- 2025Inverting Black-Box Face Recognition Systems via Zero-Order Optimization in Eigenface Spacecited by 1
- 2026Constrained Particle Seeking: Solving Diffusion Inverse Problems with Just Forward Passescited by 1
- 2025Revealing Unintentional Information Leakage in Low-Dimensional Facial Portrait Representationscited by 0
- 2025Cancelable Biometric Template Generation Using Random Feature Vector Transformationscited by 0
- 2025StyleYourSmile: Cross-Domain Face Retargeting Without Paired Multi-Style Datacited by 0
- 2026EventFace: Event-Based Face Recognition via Structure-Driven Spatiotemporal Modelingcited by 0
- 2026LBFTI: Layer-Based Facial Template Inversion for Identity-Preserving Fine-Grained Face Reconstructioncited by 0
- 2026Casting the Net! Revisiting MasterFace Impersonation Attackscited by 0
- 2026Breaking High Confidence: Practical Face Impersonation under High-Security Thresholdscited by 0
- 2026α-Graph: Attention-Infused Normalizing Flow Approach to Tractable Graph Modelingcited by 0
- 2026α-Graph: Attention-Infused Normalizing Flow Approach to Tractable Graph Modeling7 Sep 2026
- 2026Breaking High Confidence: Practical Face Impersonation under High-Security Thresholds21 Aug 2026
- 2026Casting the Net! Revisiting MasterFace Impersonation Attacks7 Aug 2026
- 2026LBFTI: Layer-Based Facial Template Inversion for Identity-Preserving Fine-Grained Face Reconstruction20 Apr 2026
- 2026EventFace: Event-Based Face Recognition via Structure-Driven Spatiotemporal Modeling8 Apr 2026
- 2026Scores Know Bobs Voice: Speaker Impersonation Attack3 Mar 2026
- 2026Constrained Particle Seeking: Solving Diffusion Inverse Problems with Just Forward Passes2 Mar 2026
- 2025StyleYourSmile: Cross-Domain Face Retargeting Without Paired Multi-Style Data1 Dec 2025
- 2025Non-Adaptive Adversarial Face Generation16 Jul 2025
- 2025IDFace: Face Template Protection for Efficient and Secure Identification16 Jul 2025
- 2025Inverting Black-Box Face Recognition Systems via Zero-Order Optimization in Eigenface Space11 Jun 2025
- 2025BIMA: Bijective Maximum Likelihood Learning Approach to Hallucination Prediction and Mitigation in Large Vision-Language Models30 May 2025
24 more
- 2025DiffMI: Breaking Face Recognition Privacy via Diffusion-Driven Training-Free Model Inversion25 Apr 2025
- 2025Cancelable Biometric Template Generation Using Random Feature Vector Transformations19 Mar 2025
- 2025Revealing Unintentional Information Leakage in Low-Dimensional Facial Portrait Representations12 Mar 2025
- 2024Face Reconstruction from Face Embeddings using Adapter to a Face Foundation Model6 Nov 2024
- 2024SlerpFace: Face Template Protection via Spherical Linear Interpolation3 Jul 2024
- 2024Face Reconstruction Transfer Attack as Out-of-Distribution Generalization2 Jul 2024
- 2024Extracting Prompts by Inverting LLM Outputs23 May 2024
- 2024Arc2Face: A Foundation Model for ID-Consistent Human Faces18 Mar 2024
- 2024Approximating Optimal Morphing Attacks using Template Inversion1 Feb 2024
- 2023Text Embeddings Reveal (Almost) As Much As Text10 Oct 2023
- 2023Cross-view Action Recognition Understanding From Exocentric to Egocentric Perspective25 May 2023
- 2023ID2image: Leakage of non-ID information into face descriptors and inversion from descriptors to images15 Apr 2023
- 2023CoMaL: Conditional Maximum Likelihood Approach to Self-supervised Domain Adaptation in Long-tail Semantic Segmentation14 Apr 2023
- 2023CROVIA: Seeing Drone Scenes from Car Perspective via Cross-View Adaptation14 Apr 2023
- 2023Controllable Inversion of Black-Box Face Recognition Models via Diffusion23 Mar 2023
- 2022CONDA: Continual Unsupervised Domain Adaptation Learning in Visual Perception for Self-Driving Cars1 Dec 2022
- 2022Vec2Face-v2: Unveil Human Faces from their Blackbox Features via Attention-based Network in Face Recognition11 Sep 2022
- 2022OTAdapt: Optimal Transport-based Approach For Unsupervised Domain Adaptation22 May 2022
- 2022Assessing Privacy Risks from Feature Vector Reconstruction Attacks11 Feb 2022
- 2021FedFR: Joint Optimization Federated Framework for Generic and Personalized Face Recognition23 Dec 2021
- 2021BiMaL: Bijective Maximum Likelihood Approach to Domain Adaptation in Semantic Scene Segmentation6 Aug 2021
- 2021The Right to Talk: An Audio-Visual Transformer Approach6 Aug 2021
- 2021Darker than Black-Box: Face Reconstruction from Similarity Queries27 Jun 2021
- 2021Efficient Large-Scale Face Clustering Using an Online Mixture of Gaussians31 Mar 2021
- 2023Text Embeddings Reveal (Almost) As Much As Textcited by 189
- 2024Arc2Face: A Foundation Model for ID-Consistent Human Facescited by 101
- 2024Extracting Prompts by Inverting LLM Outputscited by 40
- 2021The Right to Talk: An Audio-Visual Transformer Approachcited by 33
- 2021BiMaL: Bijective Maximum Likelihood Approach to Domain Adaptation in Semantic Scene Segmentationcited by 31
- 2021FedFR: Joint Optimization Federated Framework for Generic and Personalized Face Recognitioncited by 16
- 2023Cross-view Action Recognition Understanding From Exocentric to Egocentric Perspectivecited by 14
- 2022OTAdapt: Optimal Transport-based Approach For Unsupervised Domain Adaptationcited by 12
- 2022CONDA: Continual Unsupervised Domain Adaptation Learning in Visual Perception for Self-Driving Carscited by 11
- 2024Face Reconstruction from Face Embeddings using Adapter to a Face Foundation Modelcited by 9
- 2024SlerpFace: Face Template Protection via Spherical Linear Interpolationcited by 8
- 2021Darker than Black-Box: Face Reconstruction from Similarity Queriescited by 6
12 most cited of 33 All 33 (JSON)
- 2026α-Graph: Attention-Infused Normalizing Flow Approach to Tractable Graph Modeling7 Sep 2026
- 2026Breaking High Confidence: Practical Face Impersonation under High-Security Thresholds21 Aug 2026
- 2026Casting the Net! Revisiting MasterFace Impersonation Attacks7 Aug 2026
- 2026LBFTI: Layer-Based Facial Template Inversion for Identity-Preserving Fine-Grained Face Reconstruction20 Apr 2026
- 2026EventFace: Event-Based Face Recognition via Structure-Driven Spatiotemporal Modeling8 Apr 2026
- 2026Scores Know Bobs Voice: Speaker Impersonation Attack3 Mar 2026
- 2025StyleYourSmile: Cross-Domain Face Retargeting Without Paired Multi-Style Data1 Dec 2025
- 2025Non-Adaptive Adversarial Face Generation16 Jul 2025
- 2025IDFace: Face Template Protection for Efficient and Secure Identification16 Jul 2025
- 2025Inverting Black-Box Face Recognition Systems via Zero-Order Optimization in Eigenface Space11 Jun 2025
- 2025DiffMI: Breaking Face Recognition Privacy via Diffusion-Driven Training-Free Model Inversion25 Apr 2025
- 2025Cancelable Biometric Template Generation Using Random Feature Vector Transformations19 Mar 2025
12 newest of 33 All 33 (JSON)