AdvHat: Real-World Adversarial Attack on ArcFace Face ID
Date: 2019-08
Affected: ArcFace, LResNet100E-IR face recognition
Attack vector: adversarial-input
Category: research
Severity: High

Komkov and Petiushko print an adversarial sticker on paper and place it on a hat, bypassing the ArcFace face recognition model and transferring to other face IDs. Demonstrated end-to-end in physical settings.


Mitigations:

Architectural layers (MAESTRO):