Quantifying Training Membership Information in the Hyperspherical Embedding Geometry of Face Recognition Models
Not on the map. Why?
Abstract (arXiv)
Face recognition models represent each face as an embedding vector on the unit hypersphere by clustering embeddings of the same identity while pushing different identities apart through angular-margin losses. Because these losses act only on training identities, non-member identities may form clusters with different geometric properties. In this paper, we quantify the magnitude of this difference and what training-time factors control it. We compute four statistics based on cluster geometry across 180 face recognition models in a factorial design over IResNet backbone size, loss head, training duration, and the number of training identities, and evaluate each configuration on nine benchmarks. Our results indicate that the number of training identities has the largest effect on member/non-member separability, while backbone and loss head contribute far less, and that, on a same-domain held-out reference, the geometric membership signal decreases monotonically as more identities are added to training. We provide an analysis of cross-domain (pose, age, quality, ethnicity) non-member benchmarks and report that these inflate the apparent membership signal. Finally, we fuse all four statistics with a learned classifier to reveal additional membership information beyond the best individual statistic.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 23 of its 37 references that are in the map. First posted on arXiv 16 Jul 2026.
Builds on
23 of 37 references.
References · 23
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2020Training data-efficient image transformers & distillation through attentioncited by 4,560
- 2016Deep Learning with Differential Privacycited by 2,682
- 2019Machine Unlearningcited by 1,020
- 2018CosFace: Large Margin Cosine Loss for Deep Face Recognitioncited by 968
- 2021Membership Inference Attacks From First Principlescited by 839
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
- 2021MagFace: A Universal Representation for Face Recognition and Quality Assessmentcited by 332
11 more
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
- 2022Killing Two Birds with One Stone:Efficient and Robust Training of Face Recognition CNNs by Partial FCcited by 73
- 2021EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learningcited by 68
- 2022WebFace260M: A Benchmark for Million-Scale Deep Face Recognitioncited by 41
- 2021Cross-Quality LFW: A Database for Analyzing Cross-Resolution Image Face Recognition in Unconstrained Environmentscited by 33
- 2022User-Level Membership Inference Attack against Metric Embedding Learningcited by 22
- 2023FACE-AUDITOR: Data Auditing in Facial Recognition Systemscited by 15
- 2023SLMIA-SR: Speaker-Level Membership Inference Attacks against Speaker Recognition Systemscited by 14
- 2024Is My Data in Your AI? Membership Inference Test (MINT) applied to Face Biometricscited by 12
- 2026Membership Inference Test: Auditing Training Data in Object Classification Modelscited by 2
- 2024Inference Attacks Against Face Recognition Model without Classification Layerscited by 1
Built on by
Not cited yet.