{"id":"https://openalex.org/W3129504140","doi":null,"title":"Deep Face Recognizer Privacy Attack: Model Inversion Initialization by a Deep Generative Adversarial Data Space Discriminator","display_name":"Deep Face Recognizer Privacy Attack: Model Inversion Initialization by a Deep Generative Adversarial Data Space Discriminator","publication_year":2020,"publication_date":"2020-12-07","ids":{"openalex":"https://openalex.org/W3129504140","mag":"3129504140"},"language":"en","primary_location":{"id":"mag:3129504140","doi":null,"is_oa":false,"landing_page_url":"https://dblp.uni-trier.de/db/conf/apsipa/apsipa2020.html#KhosravyNNB20","pdf_url":null,"source":{"id":"https://openalex.org/S4363607812","display_name":"Asia-Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Asia-Pacific Signal and Information Processing Association Annual Summit and Conference","raw_type":null},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049134995","display_name":"Mahdi Khosravy","orcid":"https://orcid.org/0000-0001-5375-391X","observed_orcids":["https://orcid.org/0000-0001-5375-391X"]},"institutions":[{"id":"https://openalex.org/I98285908","display_name":"The University of Osaka","ror":"https://ror.org/035t8zc32","country_code":"JP","type":"education","lineage":["https://openalex.org/I98285908"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Mahdi Khosravy","raw_affiliation_strings":["Osaka University 2-1 Yamadaoka,Media Integrated Communication Laboratory, Graduate School of Engineering,Suita,Osaka,Japan,565-0871"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Osaka University 2-1 Yamadaoka,Media Integrated Communication Laboratory, Graduate School of Engineering,Suita,Osaka,Japan,565-0871","institution_ids":["https://openalex.org/I98285908"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058191809","display_name":"Kazuaki Nakamura","orcid":"https://orcid.org/0000-0002-4859-4624","observed_orcids":["https://orcid.org/0000-0002-4859-4624"]},"institutions":[{"id":"https://openalex.org/I98285908","display_name":"The University of Osaka","ror":"https://ror.org/035t8zc32","country_code":"JP","type":"education","lineage":["https://openalex.org/I98285908"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kazuaki Nakamura","raw_affiliation_strings":["Osaka University 2-1 Yamadaoka,Media Integrated Communication Laboratory, Graduate School of Engineering,Suita,Osaka,Japan,565-0871"],"raw_orcid":"https://orcid.org/0000-0002-4859-4624","affiliations":[{"raw_affiliation_string":"Osaka University 2-1 Yamadaoka,Media Integrated Communication Laboratory, Graduate School of Engineering,Suita,Osaka,Japan,565-0871","institution_ids":["https://openalex.org/I98285908"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111886163","display_name":"Naoko Nitta","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I98285908","display_name":"The University of Osaka","ror":"https://ror.org/035t8zc32","country_code":"JP","type":"education","lineage":["https://openalex.org/I98285908"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Naoko Nitta","raw_affiliation_strings":["Osaka University 2-1 Yamadaoka,Media Integrated Communication Laboratory, Graduate School of Engineering,Suita,Osaka,Japan,565-0871"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Osaka University 2-1 Yamadaoka,Media Integrated Communication Laboratory, Graduate School of Engineering,Suita,Osaka,Japan,565-0871","institution_ids":["https://openalex.org/I98285908"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068454170","display_name":"Noboru Babaguchi","orcid":"https://orcid.org/0000-0003-3320-896X","observed_orcids":["https://orcid.org/0000-0003-3320-896X"]},"institutions":[{"id":"https://openalex.org/I98285908","display_name":"The University of Osaka","ror":"https://ror.org/035t8zc32","country_code":"JP","type":"education","lineage":["https://openalex.org/I98285908"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Noboru Babaguchi","raw_affiliation_strings":["Osaka University 2-1 Yamadaoka,Media Integrated Communication Laboratory, Graduate School of Engineering,Suita,Osaka,Japan,565-0871"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Osaka University 2-1 Yamadaoka,Media Integrated Communication Laboratory, Graduate School of Engineering,Suita,Osaka,Japan,565-0871","institution_ids":["https://openalex.org/I98285908"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I98285908"],"apc_list":null,"apc_paid":null,"fwci":0.5571,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.67845826,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1400","last_page":"1405"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5038999915122986,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5038999915122986,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.3537999987602234,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.04349999874830246,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/model-inversion-attacks","display_name":"model inversion attacks","score":0.972000002861023},{"id":"https://openalex.org/keywords/deep-face-recognition","display_name":"deep face recognition","score":0.8759999871253967},{"id":"https://openalex.org/keywords/privacy-attacks","display_name":"privacy attacks","score":0.7789999842643738},{"id":"https://openalex.org/keywords/generative-adversarial-networks","display_name":"generative adversarial networks","score":0.7960000038146973},{"id":"https://openalex.org/keywords/white-box-attacks","display_name":"white-box attacks","score":0.5860000252723694},{"id":"https://openalex.org/keywords/face-image-reconstruction","display_name":"face image reconstruction","score":0.5789999961853027},{"id":"https://openalex.org/keywords/biometric-privacy","display_name":"biometric privacy","score":0.6330000162124634},{"id":"https://openalex.org/keywords/deep-generative-models","display_name":"deep generative models","score":0.5830000042915344}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8532991409301758},{"id":"https://openalex.org/C2779803651","wikidata":"https://www.wikidata.org/wiki/Q5282088","display_name":"Discriminator","level":3,"score":0.7518170475959778},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6231088042259216},{"id":"https://openalex.org/C114466953","wikidata":"https://www.wikidata.org/wiki/Q6034165","display_name":"Initialization","level":2,"score":0.46580368280410767},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.45888763666152954},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.45721766352653503},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4022409915924072},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3913998007774353},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:3129504140","doi":null,"is_oa":false,"landing_page_url":"https://dblp.uni-trier.de/db/conf/apsipa/apsipa2020.html#KhosravyNNB20","pdf_url":null,"source":{"id":"https://openalex.org/S4363607812","display_name":"Asia-Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Asia-Pacific Signal and Information Processing Association Annual Summit and Conference","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1473189865","https://openalex.org/W1915485278","https://openalex.org/W1932198206","https://openalex.org/W2051267297","https://openalex.org/W2163605009","https://openalex.org/W2273348943","https://openalex.org/W2468567150","https://openalex.org/W2512472178","https://openalex.org/W2895805829","https://openalex.org/W2899461894","https://openalex.org/W2963839617","https://openalex.org/W2964318098","https://openalex.org/W3035616549","https://openalex.org/W3159834477"],"related_works":["https://openalex.org/W4206426144","https://openalex.org/W3159834477","https://openalex.org/W4415314095","https://openalex.org/W4412624393","https://openalex.org/W7162136870","https://openalex.org/W3035616549","https://openalex.org/W7101416339","https://openalex.org/W4281787145","https://openalex.org/W4386076651","https://openalex.org/W4310076561"],"abstract_inverted_index":{"A":[0,39],"variety":[1],"of":[2,9,16,98,104,124,139,151,157,165,171,183,206,237,258],"Machine":[3],"Learning":[4],"(ML)":[5],"applications":[6],"involve":[7],"data":[8,123,164],"privacy-sensitive":[10],"content.":[11],"Face":[12],"recognizer":[13],"is":[14,28],"one":[15],"them":[17],"which":[18],"due":[19],"to":[20,30,46,67,153],"training":[21,195],"by":[22,86,132,197,202,220,241],"user":[23,31,141],"identities":[24,219],"face":[25,32,40,99,143,158,207,231],"images,":[26],"it":[27,51,192],"inherent":[29],"image":[33,200,208],"as":[34,62,175],"a":[35,53,58,94,113,198,203,229],"critical":[36],"biometric":[37],"data.":[38],"recognition":[41,232,235],"system":[42],"can":[43],"be":[44],"subject":[45],"privacy":[47,76,105],"attacks":[48],"even":[49],"though":[50],"deploys":[52],"complex":[54],"model":[55,119],"structure":[56,72],"like":[57],"deeplearning-based":[59],"one.":[60],"Because":[61],"the":[63,75,118,121,125,133,140,149,166,169,172,181,222,238],"ML":[64],"models":[65,156,174],"advance":[66],"carry":[68],"more":[69],"complexity":[70,170],"in":[71,185],"and":[73,101,130,137,254],"parameters,":[74],"attack":[77],"trends":[78],"develop":[79],"too.":[80],"Model":[81],"Inversion":[82],"Attack":[83],"(MIA)":[84],"pioneered":[85],"Fredrikson":[87],"et":[88],"al":[89],"[1]":[90],"was":[91,107,111],"applied":[92],"on":[93,112,228],"shallow":[95],"neural":[96],"network":[97],"recognizer,":[100],"its":[102,194,211,226],"capability":[103,182],"leakage":[106,138],"approved.":[108],"Their":[109],"work":[110,147,179],"white-box":[114],"scenario":[115],"wherein":[116],"besides":[117],"structure,":[120],"privacy-non-sensitive":[122],"users":[126],"are":[127,249],"partially":[128],"available":[129],"used":[131],"attacker":[134],"for":[135],"generation":[136],"identity":[142],"images.":[144],"The":[145,234],"present":[146],"improves":[148,180],"extension":[150],"MIA":[152,184,242,253],"deep":[154,173,230,259],"learning":[155],"recognizers":[159],"while":[160],"performing":[161],"without":[162],"any":[163],"users.":[167],"Despite":[168],"an":[176],"obstacle,":[177],"this":[178,186,190],"matter.":[187],"To":[188],"aim":[189],"goal,":[191],"initializes":[193],"procedure":[196],"seed":[199],"approved":[201],"GAN-trained":[204],"discriminator":[205,247],"data-space":[209,246],"via":[210],"output":[212],"probability":[213],"value.":[214],"In":[215],"targeting":[216],"two":[217],"users\u2019":[218],"MIA,":[221],"proposed":[223],"technique":[224],"approves":[225],"efficiency":[227,256],"system.":[233],"rates":[236],"images":[239],"generated":[240],"associated":[243],"with":[244],"GAN":[245],"(GAN-DD)":[248],"higher":[250],"than":[251],"sole":[252],"demonstrate":[255],"improvement":[257],"MIA.":[260]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3}],"updated_date":"2026-10-31T12:09:11.096373","created_date":"2021-03-01T00:00:00"}