mlsanityData to 7 Oct 2026

Black-Box Face Recovery from Identity Features

arXiv 2007.13635 ↗First posted 27 Jul 2020cs.CVcited by 20

Not on the map. Why?

Abstract (arXiv)

In this work, we present a novel algorithm based on an it-erative sampling of random Gaussian blobs for black-box face recovery, given only an output feature vector of deep face recognition systems. We attack the state-of-the-art face recognition system (ArcFace) to test our algorithm. Another network with different architecture (FaceNet) is used as an independent critic showing that the target person can be identified with the reconstructed image even with no access to the attacked model. Furthermore, our algorithm requires a significantly less number of queries compared to the state-of-the-art solution.

Key facts. Cited by 20 papers in the map (data through 7 Oct 2026). First posted on arXiv 27 Jul 2020.

Builds on

No reference list yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2021: 1; 2022: 6; 2023: 4; 2024: 5; 2025: 2; 2026: 2.

20 papers.

Sort:

By area:

  1. 2024Arc2Face: A Foundation Model for ID-Consistent Human Facescited by 101
  2. 2022Label-Only Model Inversion Attacks via Boundary Repulsioncited by 56
  3. 2023Privacy-preserving Adversarial Facial Featurescited by 24
  4. 2023Controllable Inversion of Black-Box Face Recognition Models via Diffusioncited by 22
  5. 2024SlerpFace: Face Template Protection via Spherical Linear Interpolationcited by 8
  6. 2021Darker than Black-Box: Face Reconstruction from Similarity Queriescited by 6
  7. 2022Vec2Face-v2: Unveil Human Faces from their Blackbox Features via Attention-based Network in Face Recognitioncited by 4
  8. 2022Distilling the Undistillable: Learning from a Nasty Teachercited by 4
  9. 2022Emerging Threats in Deep Learning-Based Autonomous Driving: A Comprehensive Surveycited by 3
  10. 2024Face Reconstruction Transfer Attack as Out-of-Distribution Generalizationcited by 3
  11. 2022Assessing Privacy Risks from Feature Vector Reconstruction Attackscited by 2
  12. 2022Reconstruct Face from Features Using GAN Generator as a Distribution Constraintcited by 2
8 more
  1. 2026Scores Know Bobs Voice: Speaker Impersonation Attackcited by 2
  2. 2023ID2image: Leakage of non-ID information into face descriptors and inversion from descriptors to imagescited by 1
  3. 2024Facial Expression Recognition with Controlled Privacy Preservation and Feature Compensationcited by 1
  4. 2025Inverting Black-Box Face Recognition Systems via Zero-Order Optimization in Eigenface Spacecited by 1
  5. 2023Facial Data Minimization: Shallow Model as Your Privacy Filtercited by 0
  6. 2024Breaking the Black-Box: Confidence-Guided Model Inversion Attack for Distribution Shiftcited by 0
  7. 2025StyleYourSmile: Cross-Domain Face Retargeting Without Paired Multi-Style Datacited by 0
  8. 2026Breaking High Confidence: Practical Face Impersonation under High-Security Thresholdscited by 0