Abstract:Deep hash-based retrieval techniques are widely used in facial retrieval systems to improve the efficiency of facial matching. However, it also carries the danger of exposing private information. Deep hash models are easily influenced by adversarial examples, which can be leveraged to protect private images from malicious retrieval. The existing adversarial example methods against deep hash models focus on universality and transferability, lacking the research on its robustness in online social networks (OSNs), which leads to their failure in anti-retrieval after post-processing. Therefore, we provide the first in-depth discussion on robustness adversarial perturbation in universal transferable anti-facial retrieval and propose Three-in-One Adversarial Perturbation (TOAP). Specifically, we construct a local and global Compression Generator (CG) to simulate complex post-processing scenarios, which can be used to mitigate perturbation. Then, we propose robust optimization objectives based on the discovery of the variation patterns of model's distribution after post-processing, and generate adversarial examples using these objectives and meta-learning. Finally, we iteratively optimize perturbation by alternately generating adversarial examples and fine-tuning the CG, balancing the performance of perturbation while enhancing CG's ability to mitigate them. Numerous experiments demonstrate that, in addition to its advantages in universality and transferability, TOAP significantly outperforms current state-of-the-art methods in multiple robustness metrics. It further improves universality and transferability by 5% to 28%, and achieves up to about 33% significant improvement in several simulated post-processing scenarios as well as mainstream OSNs, demonstrating that TOAP can effectively protect private images from malicious retrieval in real-world scenarios.

Adversarial Robust Safeguard for Evading Deep Facial Manipulation

Information-containing Adversarial Perturbation for Combating Facial Manipulation Systems

Anti-Forgery: Towards a Stealthy and Robust DeepFake Disruption Attack Via Adversarial Perceptual-aware Perturbations

Initiative Defense against Facial Manipulation

ID-Guard: A Universal Framework for Combating Facial Manipulation via Breaking Identification

Defending Fake via Warning: Universal Proactive Defense Against Face Manipulation.

TAFIM: Targeted Adversarial Attacks against Facial Image Manipulations

Anti-Fake Vaccine: Safeguarding Privacy Against Face Swapping Via Visual-Semantic Dual Degradation

Low-Mid Adversarial Perturbation against Unauthorized Face Recognition System

Hiding Faces in Plain Sight: Disrupting AI Face Synthesis with Adversarial Perturbations

Exploiting vulnerabilities of deep neural networks for privacy protection

Restricted Black-Box Adversarial Attack Against DeepFake Face Swapping

Transferable Adversarial Facial Images for Privacy Protection

Imperceptible Face Forgery Attack via Adversarial Semantic Mask

Robust Attacks on Deep Learning Face Recognition in the Physical World

Three-in-One: Robust Enhanced Universal Transferable Anti-Facial Retrieval in Online Social Networks

Towards the adversarial robustness of facial expression recognition: Facial attention-aware adversarial training

Frequency-constrained transferable adversarial attack on image manipulation detection and localization

DF-RAP: A Robust Adversarial Perturbation for Defending Against Deepfakes in Real-world Social Network Scenarios

Robust Deep Facial Attribute Prediction Against Adversarial Attacks

Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer