~/talk

New Face, Who Dis? Recent Adversarial Approaches to Facial Recognition

Talkat BSidesSF 2023 · 2023-04-22..04-23· [security, computer-vision]
links:none on file
slides:none on file

Survey of recent adversarial methods compares concrete tools and measured results: pixel-level perturbations (early, fragile), GAN avatars, the Camera Adversaria style procedural-noise overlay, and the cloaked-poisoning systems Fox and Loki (Fox takes ~2–5 minutes per image; Loki runs as a hosted web service that emails results and was more robust in published tests). A newer one person one mask method yields roughly 33–66% misidentification and can run near real-time with PyTorch; an open-source mobile proof-of-concept applies fast style transfer plus procedural noise, detects faces locally, and stores protected images for later upload.

AI-written summary · about

  1. 0:00Start
  2. 9:18Generative Adversarial Networks
  3. 12:02Cloaked Poisoning: Fawkes and Lowkey Original
  4. 15:10Effectiveness of Fawkes and Lowkey
  5. 16:44Cloaking: One Person One Mask OPOM
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.