| Paper Abstract and Keywords |
| Presentation |
2025-03-05 14:30
[Poster Presentation]
Model Inversion Attacks on a Feature Matching-based Face Identification System Rena Ichiki, Yukinobu Taniguchi, Kazuaki Nakamura (TUS) EMM2024-126 |
| Abstract |
(in Japanese) |
(See Japanese page) |
| (in English) |
Model inversion attack (MIA), the attack to reveal personal biometric data from a victim biometric system, has been actively studied particularly focusing on multiclass classifier-based face identification systems. However, feature matching-based face identification (FMFI), where the similarities between the face feature extracted from an input image and the template features stored in DB are computed to identify the input image, is more practical and widely used in our society. In this paper, as the first step of a risk analysis of MIA against FMFI, we propose an MIA method on FMFI that can reveal a user's original face image used to create his/her template feature. We consider two attack scenarios: one targets a user whose template feature is retained in the victim FMFI system, and the other targets a user whose template feature was already removed. In the first scenario, we search for a face image whose similarity with the target user's template feature is maximized. In the second scenario, we employ a two-step algorithm that estimates the removed template feature and then reconstructs its corresponding original image. Our experimental results show an unignorable risk of MIA in both scenarios. |
| Keyword |
(in Japanese) |
(See Japanese page) |
| (in English) |
model inversion attack / feature matching-based face identification / risk analysis / gradient descent / / / / |
| Reference Info. |
IEICE Tech. Rep., vol. 124, no. 414, EMM2024-126, pp. 48-53, March 2025. |
| Paper # |
EMM2024-126 |
| Date of Issue |
2025-02-26 (EMM) |
| ISSN |
Online edition: ISSN 2432-6380 |
Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) |
| Download PDF |
EMM2024-126 |
| Conference Information |
| Committee |
EMM |
| Conference Date |
2025-03-05 - 2025-03-06 |
| Place (in Japanese) |
(See Japanese page) |
| Place (in English) |
Okinawaken Seinenkaikan |
| Topics (in Japanese) |
(See Japanese page) |
| Topics (in English) |
|
| Paper Information |
| Registration To |
EMM |
| Conference Code |
2025-03-EMM |
| Language |
Japanese |
| Title (in Japanese) |
(See Japanese page) |
| Sub Title (in Japanese) |
(See Japanese page) |
| Title (in English) |
Model Inversion Attacks on a Feature Matching-based Face Identification System |
| Sub Title (in English) |
|
| Keyword(1) |
model inversion attack |
| Keyword(2) |
feature matching-based face identification |
| Keyword(3) |
risk analysis |
| Keyword(4) |
gradient descent |
| Keyword(5) |
|
| Keyword(6) |
|
| Keyword(7) |
|
| Keyword(8) |
|
| 1st Author's Name |
Rena Ichiki |
| 1st Author's Affiliation |
Tokyo University of Science (TUS) |
| 2nd Author's Name |
Yukinobu Taniguchi |
| 2nd Author's Affiliation |
Tokyo University of Science (TUS) |
| 3rd Author's Name |
Kazuaki Nakamura |
| 3rd Author's Affiliation |
Tokyo University of Science (TUS) |
| 4th Author's Name |
|
| 4th Author's Affiliation |
() |
| 5th Author's Name |
|
| 5th Author's Affiliation |
() |
| 6th Author's Name |
|
| 6th Author's Affiliation |
() |
| 7th Author's Name |
|
| 7th Author's Affiliation |
() |
| 8th Author's Name |
|
| 8th Author's Affiliation |
() |
| 9th Author's Name |
|
| 9th Author's Affiliation |
() |
| 10th Author's Name |
|
| 10th Author's Affiliation |
() |
| 11th Author's Name |
|
| 11th Author's Affiliation |
() |
| 12th Author's Name |
|
| 12th Author's Affiliation |
() |
| 13th Author's Name |
|
| 13th Author's Affiliation |
() |
| 14th Author's Name |
|
| 14th Author's Affiliation |
() |
| 15th Author's Name |
|
| 15th Author's Affiliation |
() |
| 16th Author's Name |
|
| 16th Author's Affiliation |
() |
| 17th Author's Name |
|
| 17th Author's Affiliation |
() |
| 18th Author's Name |
|
| 18th Author's Affiliation |
() |
| 19th Author's Name |
|
| 19th Author's Affiliation |
() |
| 20th Author's Name |
|
| 20th Author's Affiliation |
() |
| 21st Author's Name |
|
| 21st Author's Affiliation |
() |
| 22nd Author's Name |
|
| 22nd Author's Affiliation |
() |
| 23rd Author's Name |
|
| 23rd Author's Affiliation |
() |
| 24th Author's Name |
|
| 24th Author's Affiliation |
() |
| 25th Author's Name |
|
| 25th Author's Affiliation |
() |
| 26th Author's Name |
/ / |
| 26th Author's Affiliation |
()
() |
| 27th Author's Name |
/ / |
| 27th Author's Affiliation |
()
() |
| 28th Author's Name |
/ / |
| 28th Author's Affiliation |
()
() |
| 29th Author's Name |
/ / |
| 29th Author's Affiliation |
()
() |
| 30th Author's Name |
/ / |
| 30th Author's Affiliation |
()
() |
| 31st Author's Name |
/ / |
| 31st Author's Affiliation |
()
() |
| 32nd Author's Name |
/ / |
| 32nd Author's Affiliation |
()
() |
| 33rd Author's Name |
/ / |
| 33rd Author's Affiliation |
()
() |
| 34th Author's Name |
/ / |
| 34th Author's Affiliation |
()
() |
| 35th Author's Name |
/ / |
| 35th Author's Affiliation |
()
() |
| 36th Author's Name |
/ / |
| 36th Author's Affiliation |
()
() |
| Speaker |
Author-1 |
| Date Time |
2025-03-05 14:30:00 |
| Presentation Time |
60 minutes |
| Registration for |
EMM |
| Paper # |
EMM2024-126 |
| Volume (vol) |
vol.124 |
| Number (no) |
no.414 |
| Page |
pp.48-53 |
| #Pages |
6 |
| Date of Issue |
2025-02-26 (EMM) |