Repository logo

Infoscience

  • English
  • French
Log In
Logo EPFL, École polytechnique fédérale de Lausanne

Infoscience

  • English
  • French
Log In
  1. Home
  2. Academic and Research Output
  3. Journal articles
  4. Vulnerability of State-of-the-Art Face Recognition Models to Template Inversion Attack
 
research article

Vulnerability of State-of-the-Art Face Recognition Models to Template Inversion Attack

Shahreza, Hatef Otroshi  
•
Hahn, Vedrana Krivokuca
•
Marcel, Sebastien
January 1, 2024
Ieee Transactions On Information Forensics And Security

Face recognition systems use the templates (extracted from users' face images) stored in the system's database for recognition. In a template inversion attack, the adversary gains access to the stored templates and tries to enter the system using images reconstructed from those templates. In this paper, we propose a framework to evaluate the vulnerability of face recognition systems to template inversion attacks. We build our framework upon a real-world scenario and measure the vulnerability of the system in terms of the adversary's success attack rate in entering the system using the reconstructed face images. We propose a face reconstruction network based on a new block called "enhanced deconvolution using cascaded convolution and skip connections" (shortly, DSCasConv), and train it with a multi-term loss function. We use our framework to evaluate the vulnerability of state-of-the-art face recognition models, with different network structures and loss functions (in total 31 models), on the MOBIO, LFW, and AgeDB face datasets. Our experiments show that the reconstructed face images can be used to enter the system, which threatens the system's security. Additionally, the reconstructed face images may reveal important information about each user's identity, such as race, gender, and age, and hence jeopardize the users' privacy.

  • Details
  • Metrics
Type
research article
DOI
10.1109/TIFS.2024.3381820
Web of Science ID

WOS:001216477200003

Author(s)
Shahreza, Hatef Otroshi  
•
Hahn, Vedrana Krivokuca
•
Marcel, Sebastien
Date Issued

2024-01-01

Publisher

Ieee-Inst Electrical Electronics Engineers Inc

Published in
Ieee Transactions On Information Forensics And Security
Volume

19

Start page

4585

End page

4600

Subjects

Technology

•

Biometrics

•

Face Recognition

•

Face Reconstruction

•

Embedding

•

Template Inversion

•

Vulnerability Evaluation

Peer reviewed

REVIEWED

Written at

EPFL

EPFL units
LIDIAP  
FunderGrant Number

Horizon 2020 Marie Sklstrok;odowska-Curie TRaining in Secure and PrivAcy-preserving biometricS Early Training Networks (TReSPAsS-ETN)

Available on Infoscience
June 5, 2024
Use this identifier to reference this record
https://infoscience.epfl.ch/handle/20.500.14299/208278
Logo EPFL, École polytechnique fédérale de Lausanne
  • Contact
  • infoscience@epfl.ch

  • Follow us on Facebook
  • Follow us on Instagram
  • Follow us on LinkedIn
  • Follow us on X
  • Follow us on Youtube
AccessibilityLegal noticePrivacy policyCookie settingsEnd User AgreementGet helpFeedback

Infoscience is a service managed and provided by the Library and IT Services of EPFL. © EPFL, tous droits réservés