Abstract:Cybersecurity in front of attacks to a face recognition system is an emerging issue in the cloud era, especially due to its strong bonds with the privacy of the users registered to the system. A possible attack is the model inversion attack (MIA) which aims to reveal the identity of a targeted user by generating the most proper datapoint input to the system with maximum corresponding confidence score at the output. The generated data of a registered user can be maliciously used as a serious invasion of the user privacy. In literature, MIA processes are categorized into white-box and black-box scenarios which are respectively with and without information about the system structure, parameters, and partially about the users. This research work assumes the MIA under semi-white box scenario of availability of system model structure and parameters but not any user data information, and verifies it as a severe threat even for a deep-learning-based face recognition system despite its complex structure and the diversity of registered user data. The alert state is promoted by Deep MIA which is the integration of deep generative models in MIA, and $alpha $ -GAN integrated MIA-initilized by a face based seed ($alpha $ -GAN-MIA-FS) is proposed. As a novel MIA search strategy, a pre-trained deep generative model with capability of generating a face image from a random feature vector is used for narrowing down the image search space to the feature vectors space, which has much lower dimensions. This allows the MIA process to efficiently search for a low-dimensional feature vector whose corresponding face image maximizes the confidence score. We have experimentally evaluated the proposed method by two objective criteria and three subjective criteria in comparison to $alpha $ -GAN-integrated MIA initialized with a random seed ($alpha $ -GAN-MIA-RS), DCGAN-integrated MIA (DCGAN-MIA), and the conventional MIA. The evaluation results approve the efficiency and superiority of the proposed technique in generating natural looking face clones with high recognizability as the targeted users.

GANMIA: GAN-based Black-box Membership Inference Attack

NetGuard: Protecting Commercial Web APIs from Model Inversion Attacks Using GAN-generated Fake Samples

A GAN-Based Defense Framework Against Model Inversion Attacks.

White-box Membership Inference Attacks against Diffusion Models

Mixup Training for Generative Models to Defend Membership Inference Attacks.

Preserving Privacy in GANs Against Membership Inference Attack

Breaking the Black-Box: Confidence-Guided Model Inversion Attack for Distribution Shift

Defending Against Membership Inference Attack by Shielding Membership Signals

Black-Box Based Limited Query Membership Inference Attack

A Closer Look at GAN Priors: Exploiting Intermediate Features for Enhanced Model Inversion Attacks

TableGAN-MCA: Evaluating Membership Collisions of GAN-Synthesized Tabular Data Releasing

Label-Only Membership Inference Attack against Node-Level Graph Neural Networks

Performance analysis of various machine learning models for membership inference attack

Model Inversion Attack by Integration of Deep Generative Models: Privacy-Sensitive Face Generation From a Face Recognition System

Property Inference Attacks Against GANs

Privacy‐preserving Generative Framework for Images Against Membership Inference Attacks

PAR-GAN: Improving the Generalization of Generative Adversarial Networks Against Membership Inference Attacks

Model Inversion Attacks Through Target-Specific Conditional Diffusion Models

Imperceptible Graph Injection Attack on Graph Neural Networks

Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation

Black-Box Training Data Identification in GANs via Detector Networks