about
Generating Master Faces for Dictionary Attacks (arxiv.org)
2 points by jdmark on Aug 11, 2021 | hide | past | pdf | discuss on HN

In plain words: They evolve fake faces in a face generator's code space, with a neural network steering the search toward promising candidates without extra identity checks. Fewer than 10 of these faces matched over 40% of people in a face set across three leading recognition systems.

Abstract · Generating Master Faces for Dictionary Attacks with a Network-Assisted Latent Space Evolution

A master face is a face image that passes face-based identity-authentication for a large portion of the population. These faces can be used to impersonate, with a high probability of success, any user, without having access to any user-information. We optimize these faces, by using an evolutionary algorithm in the latent embedding space of the StyleGAN face generator. Multiple evolutionary strategies are compared, and we propose a novel approach that employs a neural network in order to direct the search in the direction of promising samples, without adding fitness evaluations. The results we present demonstrate that it is possible to obtain a high coverage of the LFW identities (over 40%) with less than 10 master faces, for three leading deep face recognition systems.

Ron Shmelkin, Tomer Friedlander, Lior Wolf
arXiv:2108.01077 · cs.CR, cs.CV, cs.LG, cs.NE · submitted Aug 1, 2021 · updated Aug 19, 2021
abstract · pdf · html · accepted to IEEE International Conference on Automatic Face & Gesture Recognition 2021

add comment on HN
Also discussed: Aug 2021 (3 points, 0 comments)