Abstract:Cybersecurity in front of attacks to a face recognition system is an emerging issue in the cloud era, especially due to its strong bonds with the privacy of the users registered to the system. A possible attack is the model inversion attack (MIA) which aims to reveal the identity of a targeted user by generating the most proper datapoint input to the system with maximum corresponding confidence score at the output. The generated data of a registered user can be maliciously used as a serious invasion of the user privacy. In literature, MIA processes are categorized into white-box and black-box scenarios which are respectively with and without information about the system structure, parameters, and partially about the users. This research work assumes the MIA under semi-white box scenario of availability of system model structure and parameters but not any user data information, and verifies it as a severe threat even for a deep-learning-based face recognition system despite its complex structure and the diversity of registered user data. The alert state is promoted by Deep MIA which is the integration of deep generative models in MIA, and $alpha $ -GAN integrated MIA-initilized by a face based seed ($alpha $ -GAN-MIA-FS) is proposed. As a novel MIA search strategy, a pre-trained deep generative model with capability of generating a face image from a random feature vector is used for narrowing down the image search space to the feature vectors space, which has much lower dimensions. This allows the MIA process to efficiently search for a low-dimensional feature vector whose corresponding face image maximizes the confidence score. We have experimentally evaluated the proposed method by two objective criteria and three subjective criteria in comparison to $alpha $ -GAN-integrated MIA initialized with a random seed ($alpha $ -GAN-MIA-RS), DCGAN-integrated MIA (DCGAN-MIA), and the conventional MIA. The evaluation results approve the efficiency and superiority of the proposed technique in generating natural looking face clones with high recognizability as the targeted users.

Analysis and Utilization of Hidden Information in Model Inversion Attacks.

The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks

NetGuard: Protecting Commercial Web APIs from Model Inversion Attacks Using GAN-generated Fake Samples

A GAN-Based Defense Framework Against Model Inversion Attacks.

Re-thinking Model Inversion Attacks Against Deep Neural Networks

Model Inversion Attacks: A Survey of Approaches and Countermeasures

Model Inversion Attacks Through Target-Specific Conditional Diffusion Models

Model Inversion Attack via Dynamic Memory Learning

Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses

The Role of Class Information in Model Inversion Attacks Against Image Deep Learning Classifiers

An Evolutionary Attack for Revealing Training Data of DNNs with Higher Feature Fidelity

CALoR: Towards Comprehensive Model Inversion Defense

Breaking the Black-Box: Confidence-Guided Model Inversion Attack for Distribution Shift

Model Inversion Attack by Integration of Deep Generative Models: Privacy-Sensitive Face Generation From a Face Recognition System

GraphMI: Extracting Private Graph Data from Graph Neural Networks

Inversion-guided Defense: Detecting Model Stealing Attacks by Output Inverting

Mutual Information Preserving Back-propagation: Learn to Invert for Faithful Attribution

Membership reconstruction attack in deep neural networks

Scale-MIA: A Scalable Model Inversion Attack against Secure Federated Learning via Latent Space Reconstruction

C2FMI: Corse-to-Fine Black-box Model Inversion Attack

Aligning the domains in cross domain model inversion attack