In plain words: They evolve fake faces in a face generator's code space, with a neural network steering the search toward promising candidates without extra identity checks. Fewer than 10 of these faces matched over 40% of people in a face set across three leading recognition systems.
Abstract · Generating Master Faces for Dictionary Attacks with a Network-Assisted Latent Space Evolution
A master face is a face image that passes face-based identity-authentication for a large portion of the population. These faces can be used to impersonate, with a high probability of success, any user, without having access to any user-information. We optimize these faces, by using an evolutionary algorithm in the latent embedding space of the StyleGAN face generator. Multiple evolutionary strategies are compared, and we propose a novel approach that employs a neural network in order to direct the search in the direction of promising samples, without adding fitness evaluations. The results we present demonstrate that it is possible to obtain a high coverage of the LFW identities (over 40%) with less than 10 master faces, for three leading deep face recognition systems.
Ron Shmelkin, Tomer Friedlander, Lior Wolf
arXiv:2108.01077 · cs.CR, cs.CV, cs.LG, cs.NE · submitted Aug 1, 2021 · updated Aug 19, 2021
abstract · pdf · html · accepted to IEEE International Conference on Automatic Face & Gesture Recognition 2021