References & Citations
Computer Science > Computer Vision and Pattern Recognition
Title: Security of Facial Forensics Models Against Adversarial Attacks
(Submitted on 2 Nov 2019 (v1), last revised 20 May 2020 (this version, v2))
Abstract: Deep neural networks (DNNs) have been used in digital forensics to identify fake facial images. We investigated several DNN-based forgery forensics models (FFMs) to examine whether they are secure against adversarial attacks. We experimentally demonstrated the existence of individual adversarial perturbations (IAPs) and universal adversarial perturbations (UAPs) that can lead a well-performed FFM to misbehave. Based on iterative procedure, gradient information is used to generate two kinds of IAPs that can be used to fabricate classification and segmentation outputs. In contrast, UAPs are generated on the basis of over-firing. We designed a new objective function that encourages neurons to over-fire, which makes UAP generation feasible even without using training data. Experiments demonstrated the transferability of UAPs across unseen datasets and unseen FFMs. Moreover, we conducted subjective assessment for imperceptibility of the adversarial perturbations, revealing that the crafted UAPs are visually negligible. These findings provide a baseline for evaluating the adversarial security of FFMs.
Submission history
From: Rong Huang [view email][v1] Sat, 2 Nov 2019 06:03:51 GMT (4812kb)
[v2] Wed, 20 May 2020 12:56:34 GMT (4056kb)
Link back to: arXiv, form interface, contact.