Journal
2022 IEEE INTERNATIONAL CONFERENCE ON NETWORKING, ARCHITECTURE AND STORAGE (NAS)
Volume -, Issue -, Pages 207-214Publisher
IEEE
DOI: 10.1109/NAS55553.2022.9925338
Keywords
Facial recognition; privacy abuse; facial image protection robustness; deep learning
Ask authors/readers for more resources
The paper investigates the impact of transformations on adversarial facial images and proposes a simple yet effective framework called TaD for removing possible adversarial perturbations from user images generated by popular FR privacy protection frameworks. Experimental results show that simple transformations can impact protection performance, and choosing DNN-based facial feature extractors can enhance the robustness of facial images with adversarial perturbations.
While facial recognition (FR) has been widely used by businesses and governments for various purposes, it gives rise to privacy concerns once the consent of users is not handled properly. Hence, researchers have proposed methods to evade FR technology by attaching adversarial perturbations to user profile images. Nonetheless, image denoising-based methods have been proposed to increase the model robustness over adversarial examples. This paper investigates the impact of transformations on adversarial facial images. In particular, a simple but effective framework, TaD (Transformations as Denoising), is proposed to remove possible adversarial perturbations from user images generated by popular FR privacy protection frameworks. Extensive evaluations show the reliability of Fawkes and LowKey with various simple transformations. Experimental results indicate that simple transformations can impact the protection performance, and the choice of DNN-based facial feature extractors can enhance the robustness of facial images with adversarial perturbations. The experimental results also demonstrate strengths and weaknesses of FR methods and give suggestions for further improvements of privacy safeguard tools.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available