Abstract:In recent years, deep learning techniques have achieved significant success in many computer vision tasks. However, security concerns have increased as adversarial attacks have discovered potential vulnerabilities in deep learning-based systems. Therefore, a large number of adversarial defense strategies have been developed to improve the security and robustness of FR systems. Introducing an auxiliary model for the face recognition model to enhance the system security is a common approach for adversarial defense which the adversarial examples generated using one model are unlikely to pass when another model is chosen. Second, one of the challenges of face recognition (FR) attacks is that currently the targeted face recognition models are black-box in nature, i.e., the attacker does not have access to their internal relevant parameters and gradient information. As a result, the mobility of samples is poor and the attack performance is low, especially for online commercial FR systems. Therefore, this paper proposes a similarity-based shared gradient adversarial attack algorithm to improve the sample mobility. From the perspective of multi-tasking, the algorithm selects the alternative model (AR) as the auxiliary model, develops a multi-task local optimization strategy and a cross-task gradient mapping strategy, and constructs a mapping mechanism between the two models to share the gradient information, which facilitates weighted fusion of the generated perturbations and avoids the oscillations caused by different models due to the differences in gradients and parameters, thus improves the generalization ability, and makes the generated adversarial examples more efficient. Thus, the generated adversarial examples can attack multiple models at the same time, which greatly improves the transferability and robustness of the adversarial samples, and greatly improves the attacking power. A large number of experiments show that the success rate has been greatly improved.

Multi-task Face Analyses Through Adversarial Learning.

Cross-Culture Multimodal Emotion Recognition With Adversarial Learning

A Multi-task Adversarial Attack Against Face Authentication

Multi-task Learning-based Black-box Adversarial Attack on Face Recognition Systems

A New Deep Learning Method for Multi-label Facial Expression Recognition Based on Local Constraint Features

Task-adaptive Q-Face

Adversarial Multi-task Learning for Text Classification.

Multitask Learning Strategy with Pseudo-Labeling: Face Recognition, Facial Landmark Detection, and Head Pose Estimation

Multi-Strategy Adversarial Learning for Robust Face Forgery Detection under Heterogeneous and Composite Attacks

ADVERSARIAL MULTI-LABEL PREDICTION FOR SPOKEN AND VISUAL SIGNAL TAGGING

Capturing Joint Label Distribution for Multi-Label Classification Through Adversarial Learning

Adversarial Attacks on Hidden Tasks in Multi-Task Learning

Discriminative Deep Multi-Task Learning for Facial Expression Recognition.

Multi-View Facial Expression Recognition Based O N Multitask Learning and Generative Adversarial Network.

Multi-Task Learning Using Task Dependencies for Face Attributes Prediction

Dual Learning for Joint Facial Landmark Detection and Action Unit Recognition

Multi-Domain Feature Alignment for Face Anti-Spoofing

Multi-Task Adversarial Network for Disentangled Feature Learning

Identity- and Pose-Robust Facial Expression Recognition Through Adversarial Feature Learning

Exploring Adversarial Learning for Deep Semi-Supervised Facial Action Unit Recognition

Capturing Spatial and Temporal Patterns for Facial Landmark Tracking Through Adversarial Learning.