activity
20192025
most citedAdvHat: Real-world adversarial attack on ArcFace Face ID system

288 citations · 556 across the 21 of their papers we have counts for

collaborators
Showing cs.CVShow all

11 papers · 1 filter

cs.CV2025

Real-World Transferable Adversarial Attack on Face-Recognition Systems

Andrey Kaznacheev, Matvey Mikhalchuk, Andrey Kuznetsov +2

Adversarial attacks on face recognition (FR) systems pose a significant security threat, yet most are confined to the digital domain or require white-box access. We introduce GaP (…

cs.CV2025

Inverting Black-Box Face Recognition Systems via Zero-Order Optimization in Eigenface Space

Anton Razzhigaev, Matvey Mikhalchuk, Klim Kireev +3

Reconstructing facial images from black-box recognition models poses a significant privacy threat. While many methods require access to embeddings, we address the more challenging…

cs.CV2021

Many Heads but One Brain: Fusion Brain -- a Competition and a Single Multimodal Multitask Architecture

Daria Bakshandaeva, Denis Dimitrov, Vladimir Arkhipkin +8

Supporting the current trend in the AI community, we present the AI Journey 2021 Challenge called Fusion Brain, the first competition which is targeted to make the universal archit…

cs.CV2021★ 4 cited

Darker than Black-Box: Face Reconstruction from Similarity Queries

Anton Razzhigaev, Klim Kireev, Igor Udovichenko +1

Several methods for inversion of face recognition models were recently presented, attempting to reconstruct a face from deep templates. Although some of these approaches work in a…

cs.CV2021★ 147 cited

MDMMT: Multidomain Multimodal Transformer for Video Retrieval

Maksim Dzabraev, Maksim Kalashnikov, Stepan Komkov +1

We present a new state-of-the-art on the text to video retrieval task on MSRVTT and LSMDC benchmarks where our model outperforms all previous solutions by a large margin. Moreover,…

cs.CV2020★ 2 cited

Mutual Modality Learning for Video Action Classification

Stepan Komkov, Maksim Dzabraev, Aleksandr Petiushko

The construction of models for video action classification progresses rapidly. However, the performance of those models can still be easily improved by ensembling with the same mod…

cs.CV2020★ 18 cited

Black-Box Face Recovery from Identity Features

Anton Razzhigaev, Klim Kireev, Edgar Kaziakhmedov +2

In this work, we present a novel algorithm based on an it-erative sampling of random Gaussian blobs for black-box face recovery, given only an output feature vector of deep face re…

cs.CV2020★ 13 cited

Geometry-Inspired Top-k Adversarial Perturbations

Nurislam Tursynbek, Aleksandr Petiushko, Ivan Oseledets

The brittleness of deep image classifiers to small adversarial input perturbations has been extensively studied in the last several years. However, the main objective of existing p…

cs.CV2019★ 39 cited

On adversarial patches: real-world attack on ArcFace-100 face recognition system

Mikhail Pautov, Grigorii Melnikov, Edgar Kaziakhmedov +2

Recent works showed the vulnerability of image classifiers to adversarial attacks in the digital domain. However, the majority of attacks involve adding small perturbation to an im…

cs.CV2019★ 31 cited

Real-world adversarial attack on MTCNN face detection system

Edgar Kaziakhmedov, Klim Kireev, Grigorii Melnikov +2

Recent studies proved that deep learning approaches achieve remarkable results on face detection task. On the other hand, the advances gave rise to a new problem associated with th…

cs.CV2019★ 288 cited

AdvHat: Real-world adversarial attack on ArcFace Face ID system

Stepan Komkov, Aleksandr Petiushko

In this paper we propose a novel easily reproducible technique to attack the best public Face ID system ArcFace in different shooting conditions. To create an attack, we print the…