{"id":"https://openalex.org/W4206426144","doi":"https://doi.org/10.1109/tifs.2022.3140687","title":"Model Inversion Attack by Integration of Deep Generative Models: Privacy-Sensitive Face Generation From a Face Recognition System","display_name":"Model Inversion Attack by Integration of Deep Generative Models: Privacy-Sensitive Face Generation From a Face Recognition System","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4206426144","doi":"https://doi.org/10.1109/tifs.2022.3140687"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2022.3140687","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2022.3140687","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049134995","display_name":"Mahdi Khosravy","orcid":"https://orcid.org/0000-0001-5375-391X"},"institutions":[{"id":"https://openalex.org/I4210094952","display_name":"Cross Compass (Japan)","ror":"https://ror.org/00naatv40","country_code":"JP","type":"company","lineage":["https://openalex.org/I4210094952"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Mahdi Khosravy","raw_affiliation_strings":["Cross Lab, Cross-Compass Ltd, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0001-5375-391X","affiliations":[{"raw_affiliation_string":"Cross Lab, Cross-Compass Ltd, Tokyo, Japan","institution_ids":["https://openalex.org/I4210094952"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058191809","display_name":"Kazuaki Nakamura","orcid":"https://orcid.org/0000-0002-4859-4624"},"institutions":[{"id":"https://openalex.org/I161296585","display_name":"Tokyo University of Science","ror":"https://ror.org/05sj3n476","country_code":"JP","type":"education","lineage":["https://openalex.org/I161296585"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kazuaki Nakamura","raw_affiliation_strings":["Faculty of Engineering, Tokyo University of Science, Katsushika, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0002-4859-4624","affiliations":[{"raw_affiliation_string":"Faculty of Engineering, Tokyo University of Science, Katsushika, Tokyo, Japan","institution_ids":["https://openalex.org/I161296585"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101961050","display_name":"Yuki Hirose","orcid":"https://orcid.org/0000-0003-3370-0372"},"institutions":[{"id":"https://openalex.org/I98285908","display_name":"The University of Osaka","ror":"https://ror.org/035t8zc32","country_code":"JP","type":"education","lineage":["https://openalex.org/I98285908"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yuki Hirose","raw_affiliation_strings":["Division of Electrical, Electronic, and Infocommunications Engineering, Graduate School of Engineering, Osaka University, Suita, Osaka, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Electrical, Electronic, and Infocommunications Engineering, Graduate School of Engineering, Osaka University, Suita, Osaka, Japan","institution_ids":["https://openalex.org/I98285908"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111886163","display_name":"Naoko Nitta","orcid":null},"institutions":[{"id":"https://openalex.org/I98285908","display_name":"The University of Osaka","ror":"https://ror.org/035t8zc32","country_code":"JP","type":"education","lineage":["https://openalex.org/I98285908"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Naoko Nitta","raw_affiliation_strings":["Division of Electrical, Electronic, and Infocommunications Engineering, Graduate School of Engineering, Osaka University, Suita, Osaka, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Electrical, Electronic, and Infocommunications Engineering, Graduate School of Engineering, Osaka University, Suita, Osaka, Japan","institution_ids":["https://openalex.org/I98285908"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068454170","display_name":"Noboru Babaguchi","orcid":"https://orcid.org/0000-0003-3320-896X"},"institutions":[{"id":"https://openalex.org/I98285908","display_name":"The University of Osaka","ror":"https://ror.org/035t8zc32","country_code":"JP","type":"education","lineage":["https://openalex.org/I98285908"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Noboru Babaguchi","raw_affiliation_strings":["Division of Electrical, Electronic, and Infocommunications Engineering, Graduate School of Engineering, Osaka University, Suita, Osaka, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Electrical, Electronic, and Infocommunications Engineering, Graduate School of Engineering, Osaka University, Suita, Osaka, Japan","institution_ids":["https://openalex.org/I98285908"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.7453,"has_fulltext":false,"cited_by_count":90,"citation_normalized_percentile":{"value":0.98047684,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"17","issue":null,"first_page":"357","last_page":"372"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.992900013923645,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7412621378898621},{"id":"https://openalex.org/keywords/facial-recognition-system","display_name":"Facial recognition system","score":0.5454767942428589},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5286624431610107},{"id":"https://openalex.org/keywords/white-box","display_name":"White box","score":0.5189321041107178},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.503246009349823},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.4806593656539917},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.46569713950157166},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.4191069006919861},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.379412978887558},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.3563650846481323},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.28263765573501587}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7412621378898621},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.5454767942428589},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5286624431610107},{"id":"https://openalex.org/C180932941","wikidata":"https://www.wikidata.org/wiki/Q997233","display_name":"White box","level":2,"score":0.5189321041107178},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.503246009349823},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.4806593656539917},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.46569713950157166},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.4191069006919861},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.379412978887558},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.3563650846481323},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.28263765573501587},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2022.3140687","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2022.3140687","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.550000011920929,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G3831999164","display_name":"Development of Client-Server-Based Framework for Privacy-Preserving Media Recognition","funder_award_id":"17K00235","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G6954941931","display_name":"Communication System for Defending against Attacks of Media Clones","funder_award_id":"16H06302","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G8405342414","display_name":null,"funder_award_id":"JPMJCR20D3","funder_id":"https://openalex.org/F4320338075","funder_display_name":"Core Research for Evolutional Science and Technology"}],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"},{"id":"https://openalex.org/F4320338075","display_name":"Core Research for Evolutional Science and Technology","ror":"https://ror.org/00097mb19"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":52,"referenced_works":["https://openalex.org/W1834627138","https://openalex.org/W1959608418","https://openalex.org/W2005399687","https://openalex.org/W2008736926","https://openalex.org/W2051267297","https://openalex.org/W2095577883","https://openalex.org/W2099471712","https://openalex.org/W2501277411","https://openalex.org/W2512472178","https://openalex.org/W2536626143","https://openalex.org/W2624918875","https://openalex.org/W2726427712","https://openalex.org/W2781091734","https://openalex.org/W2789304371","https://openalex.org/W2798807671","https://openalex.org/W2807403593","https://openalex.org/W2884066303","https://openalex.org/W2895416001","https://openalex.org/W2899461894","https://openalex.org/W2910234583","https://openalex.org/W2922338626","https://openalex.org/W2946059079","https://openalex.org/W2946697723","https://openalex.org/W2952841512","https://openalex.org/W2963839617","https://openalex.org/W2963844355","https://openalex.org/W2964295764","https://openalex.org/W2985580374","https://openalex.org/W2996037860","https://openalex.org/W3003011734","https://openalex.org/W3007646528","https://openalex.org/W3011466468","https://openalex.org/W3016632787","https://openalex.org/W3021962567","https://openalex.org/W3026860374","https://openalex.org/W3035616549","https://openalex.org/W3045675435","https://openalex.org/W3099505600","https://openalex.org/W3158951190","https://openalex.org/W3159834477","https://openalex.org/W3162426298","https://openalex.org/W4288567374","https://openalex.org/W4324132329","https://openalex.org/W6628547770","https://openalex.org/W6630632610","https://openalex.org/W6640963894","https://openalex.org/W6684191040","https://openalex.org/W6739625446","https://openalex.org/W6752018158","https://openalex.org/W6757956508","https://openalex.org/W6759531683","https://openalex.org/W6762636723"],"related_works":["https://openalex.org/W4365211920","https://openalex.org/W3014948380","https://openalex.org/W4380551139","https://openalex.org/W4317695495","https://openalex.org/W4395044357","https://openalex.org/W4287117424","https://openalex.org/W4387506531","https://openalex.org/W2087346071","https://openalex.org/W2967848559","https://openalex.org/W4299831724"],"abstract_inverted_index":{"Cybersecurity":[0],"in":[1,14,183,276,307],"front":[2],"of":[3,27,49,74,86,128,130,163,179,211,303],"attacks":[4],"to":[5,20,31,45,60,230,245],"a":[6,50,75,83,146,151,190,199,204,213,217,249,283],"face":[7,153,191,214,255,311],"recognition":[8,154],"system":[9,62,110,131,155],"is":[10,37,170,176,196,221],"an":[11],"emerging":[12],"issue":[13],"the":[15,25,28,32,38,47,55,61,69,87,109,116,122,161,177,226,231,242,258,265,292,299,304,317],"cloud":[16],"era,":[17],"especially":[18],"due":[19],"its":[21,157],"strong":[22],"bonds":[23],"with":[24,63,104,209,282,313],"privacy":[26],"users":[29],"registered":[30,76,164],"system.":[33],"A":[34],"possible":[35],"attack":[36,41],"model":[39,132,208],"inversion":[40],"(MIA)":[42],"which":[43,101,175,235],"aims":[44],"reveal":[46],"identity":[48],"targeted":[51,318],"user":[52,77,88,139,165],"by":[53,172,189,268],"generating":[54,212,308],"most":[56],"proper":[57],"datapoint":[58],"input":[59],"maximum":[64],"corresponding":[65,254],"confidence":[66,259],"score":[67],"at":[68],"output.":[70],"The":[71,167,295],"generated":[72],"data":[73,140],"can":[78],"be":[79],"maliciously":[80],"used":[81,222],"as":[82,145,316],"serious":[84],"invasion":[85],"privacy.":[89],"In":[90],"literature,":[91],"MIA":[92,123,174,201,243,280,289],"processes":[93],"are":[94,102],"categorized":[95],"into":[96],"white-box":[97],"and":[98,105,113,134,142,160,272,291,301],"black-box":[99],"scenarios":[100],"respectively":[103],"without":[106],"information":[107],"about":[108,115],"structure,":[111],"parameters,":[112],"partially":[114],"users.":[117,319],"This":[118,240],"research":[119],"work":[120],"assumes":[121],"under":[124],"semi-white":[125],"box":[126],"scenario":[127],"availability":[129],"structure":[133,159],"parameters":[135],"but":[136],"not":[137],"any":[138],"information,":[141],"verifies":[143],"it":[144],"severe":[147],"threat":[148],"even":[149],"for":[150,223,248],"deep-learning-based":[152],"despite":[156],"complex":[158],"diversity":[162],"data.":[166],"alert":[168],"state":[169],"promoted":[171],"Deep":[173],"integration":[178],"deep":[180,206],"generative":[181,207],"models":[182],"MIA,":[184],"and$\\alpha":[185],"$-GAN":[186],"integrated":[187],"MIA-initilized":[188],"based":[192],"seed":[193,285],"($\\alpha":[194,286],"$-GAN-MIA-FS)":[195],"proposed.":[197],"As":[198],"novel":[200],"search":[202,228,247],"strategy,":[203],"pre-trained":[205],"capability":[210],"image":[215,227,256],"from":[216],"random":[218,284],"feature":[219,232,251],"vector":[220,252],"narrowing":[224],"down":[225],"space":[229],"vectors":[233],"space,":[234],"has":[236],"much":[237],"lower":[238],"dimensions.":[239],"allows":[241],"process":[244],"efficiently":[246],"low-dimensional":[250],"whose":[253],"maximizes":[257],"score.":[260],"We":[261],"have":[262],"experimentally":[263],"evaluated":[264],"proposed":[266,305],"method":[267],"two":[269],"objective":[270],"criteria":[271,275],"three":[273],"subjective":[274],"comparison":[277],"to$\\alpha":[278],"$-GAN-integrated":[279],"initialized":[281],"$-GAN-MIA-RS),":[287],"DCGAN-integrated":[288],"(DCGAN-MIA),":[290],"conventional":[293],"MIA.":[294],"evaluation":[296],"results":[297],"approve":[298],"efficiency":[300],"superiority":[302],"technique":[306],"natural":[309],"looking":[310],"clones":[312],"high":[314],"recognizability":[315]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":19},{"year":2024,"cited_by_count":32},{"year":2023,"cited_by_count":21},{"year":2022,"cited_by_count":11}],"updated_date":"2026-08-06T08:24:18.245995","created_date":"2025-10-10T00:00:00"}