Privacy Attacks Against Biometric Models with Fewer Samples: Incorporating the Output of Multiple Models

Sohaib Ahmad, Benjamin Fuller, Kaleel Mahmood

Authentication systems are vulnerable to model inversion attacks where an adversary is able to approximate the inverse of a target machine learning model. Biometric models are a pr…