mlsanityData to 7 Oct 2026

Face Pasting Attack

arXiv 2210.09153 ↗First posted 17 Oct 2022cs.CV cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

Cujo AI and Adversa AI hosted the MLSec face recognition challenge. The goal was to attack a black box face recognition model with targeted attacks. The model returned the confidence of the target class and a stealthiness score. For an attack to be considered successful the target class has to have the highest confidence among all classes and the stealthiness has to be at least 0.5. In our approach we paste the face of a target into a source image. By utilizing position, scaling, rotation and transparency attributes we reached 3rd place. Our approach took approximately 200 queries per attack for the final highest score and about ~7.7 queries minimum for a successful attack. The code is available at https://github.com/bunni90/FacePastingAttack .

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 13 of its 14 references that are in the map. First posted on arXiv 17 Oct 2022.

Builds on

13 of 14 references.

References · 13

  1. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  2. 2013Intriguing properties of neural networkscited by 5,114
  3. 2020Training Generative Adversarial Networks with Limited Datacited by 1,184
  4. 2016Joint Face Detection and Alignment using Multi-task Cascaded Convolutional Networkscited by 895
  5. 2016Practical Black-Box Attacks against Machine Learningcited by 893
  6. 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 656
  7. 2018BiSeNet: Bilateral Segmentation Network for Real-time Semantic Segmentationcited by 645
  8. 2017Adversarial Patchcited by 514
  9. 2019AdvHat: Real-world adversarial attack on ArcFace Face ID systemcited by 161
  10. 2017A General Framework for Adversarial Examples with Objectivescited by 82
  11. 2020Towards Transferable Adversarial Attack against Deep Face Recognitioncited by 79
  12. 2019Semantic Adversarial Attacks: Parametric Transformations That Fool Deep Classifierscited by 56
1 more
  1. 2019Real-world adversarial attack on MTCNN face detection systemcited by 14

Built on by

Not cited yet.