arXiv:2412.20768cs.CVcs.AI2024-12IJCV被引 5

用样本间相关性检测人脸识别模型盗用,抗干扰更强。

Sample Correlation for Fingerprinting Deep Face Recognition

  • 以样本输出相关性代替对抗样本做指纹,思路更稳健。
  • 在人脸验证和表情识别任务中AUC、F1等指标均最优。
  • 适用于多种数据集,适合关注模型安全的开发者。

近年来,深度学习推动了人脸识别技术的显著进步。然而,现成的人脸识别模型可能遭受模型窃取攻击,威胁模型所有者的权益。模型指纹作为一种检测模型窃取的方法,旨在验证可疑模型是否源自目标模型,日益受到关注。以往方法常使用可迁移的对抗样本作为指纹,但对对抗防御和迁移学习技术敏感。为此,本文提出基于样本相关性(SAC)的新方法,通过选取JPEG压缩样本输入并计算其模型输出的相关矩阵来实现指纹检测。大量实验表明,SAC能有效抵御多种深度人脸识别中的模型窃取攻击,涵盖人脸验证与表情识别任务,在AUC、p值和F1分数上表现最佳。此外,我们将SAC-JC扩展至物体识别数据集(Tiny-ImageNet和CIFAR10),同样展现出优于现有方法的性能。代码将公开于https://github.com/guanjiyang/SAC_JC。

原文摘要 · Abstract (English)

Face recognition has witnessed remarkable advancements in recent years, thanks to the development of deep learning techniques.However, an off-the-shelf face recognition model as a commercial service could be stolen by model stealing attacks, posing great threats to the rights of the model owner.Model fingerprinting, as a model stealing detection method, aims to verify whether a suspect model is stolen from the victim model, gaining more and more attention nowadays.Previous methods always utilize transferable adversarial examples as the model fingerprint, but this method is known to be sensitive to adversarial defense and transfer learning techniques.To address this issue, we consider the pairwise relationship between samples instead and propose a novel yet simple model stealing detection method based on SAmple Correlation (SAC).Specifically, we present SAC-JC that selects JPEG compressed samples as model inputs and calculates the correlation matrix among their model outputs.Extensive results validate that SAC successfully defends against various model stealing attacks in deep face recognition, encompassing face verification and face emotion recognition, exhibiting the highest performance in terms of AUC, p-value and F1 score.Furthermore, we extend our evaluation of SAC-JC to object recognition datasets including Tiny-ImageNet and CIFAR10, which also demonstrates the superior performance of SAC-JC to previous methods.The code will be available at \url{https://github.com/guanjiyang/SAC_JC}.

模型安全人脸识别指纹检测深度学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。