.png){kind=icon}
返回
Sample Correlation for Fingerprinting Deep Face Recognition
.png){kind=icon}
PRE
AI
DOI：10.1007/s11263-024-02254-w.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Face recognition has witnessed remarkable advancements in recent years, thanks to the development of deep learning techniques. However, an off-the-shelf face recognition model as a commercial service could be stolen by model stealing attacks, posing great threats to the rights of the model owner. Model fingerprinting, as a model stealing detection method, aims to verify whether a suspect model is stolen from the victim model, gaining more and more attention nowadays. Previous methods always utilize transferable adversarial examples as the model fingerprint, but this method is known to be sensitive to adversarial defense and transfer learning techniques. To address this issue, we consider the pairwise relationship between samples instead and propose a novel yet simple model stealing detection method based on SAmple Correlation (SAC). Specifically, we present SAC-JC that selects JPEG compressed samples as model inputs and calculates the correlation matrix among their model outputs. Extensive results validate that SAC successfully defends against various model stealing attacks in deep face recognition, encompassing face verification and face emotion recognition, exhibiting the highest performance in terms of AUC, p-value and F1 score. Furthermore, we extend our evaluation of SAC-JC to object recognition datasets including Tiny-ImageNet and CIFAR10, which also demonstrates the superior performance of SAC-JC to previous methods. The code will be available at https://github.com/guanjiyang/SAC_JC.
Keyword:
Model fingerprinting
Deep face recognition
Model stealing attack
期刊
IF:
9.3
论文数:
3.9K
被引数:
2.8W
机构
引用论文
.png){kind=icon}
分享收藏
Integrated techno economic and life cycle assessment of the conversion of high productivity, low lipid algae to renewable fuels将高生产率，低脂质藻类转化为可再生燃料的综合技术经济和生命周期评估
OAAI
OAAI分享收藏Convolutional Neural Networks for Medical Image Analysis: Full Training or Fine Tuning?用于医学图像分析的卷积神经网络: 完全训练还是微调？OAAI
OAAI分享收藏
查看更多内容