Query-Free Attacks on Industry-Grade Face Recognition Systems under Resource Constraints

Di Tang, XiaoFeng Wang, Kehuan Zhang

To launch black-box attacks against a Deep Neural Network (DNN) based Face Recognition (FR) system, one needs to build \textit{substitute} models to simulate the target model, so t…