3.8 Proceedings Paper

Transformations as Denoising: A Robust Approach to Weaken Adversarial Facial Images

Publisher

IEEE
DOI: 10.1109/NAS55553.2022.9925338

Keywords

Facial recognition; privacy abuse; facial image protection robustness; deep learning

Ask authors/readers for more resources

The paper investigates the impact of transformations on adversarial facial images and proposes a simple yet effective framework called TaD for removing possible adversarial perturbations from user images generated by popular FR privacy protection frameworks. Experimental results show that simple transformations can impact protection performance, and choosing DNN-based facial feature extractors can enhance the robustness of facial images with adversarial perturbations.
While facial recognition (FR) has been widely used by businesses and governments for various purposes, it gives rise to privacy concerns once the consent of users is not handled properly. Hence, researchers have proposed methods to evade FR technology by attaching adversarial perturbations to user profile images. Nonetheless, image denoising-based methods have been proposed to increase the model robustness over adversarial examples. This paper investigates the impact of transformations on adversarial facial images. In particular, a simple but effective framework, TaD (Transformations as Denoising), is proposed to remove possible adversarial perturbations from user images generated by popular FR privacy protection frameworks. Extensive evaluations show the reliability of Fawkes and LowKey with various simple transformations. Experimental results indicate that simple transformations can impact the protection performance, and the choice of DNN-based facial feature extractors can enhance the robustness of facial images with adversarial perturbations. The experimental results also demonstrate strengths and weaknesses of FR methods and give suggestions for further improvements of privacy safeguard tools.

Authors

I am an author on this paper
Click your name to claim this paper and add it to your profile.

Reviews

Primary Rating

3.8
Not enough ratings

Secondary Ratings

Novelty
-
Significance
-
Scientific rigor
-
Rate this paper

Recommended

No Data Available
No Data Available