3 ms·
They create a picture that is designed to fool facial recognition systems and then they will test it against JPEG and other image compression techniques and the
by zitterbewegung 6y ago
They create a picture that is designed to fool facial recognition systems and then they will test it against JPEG and other image compression techniques and then run the facial recognition on the compressed version and if both of them pass then they don't change the image.
If the procedure fails then the GAN will know this and it would change the output so that it would pass both outcomes.
- hwillis 6y agoIt doesn't use a GAN. I haven't read the paper closely, but is uses a feature extracting network and then tries to modify the features to match a different person. It doesn't try to take advantage of degenerative states in existing networks. I think it does things like subtly change the shape of your eyes and whatnot. That makes people consistently difficult to pick out of a large set of unmodified faces, but a hu man still finds the images recognizable because they're comparing it to a smaller set. They didn't create the model by training it on the facial recognizers they tested against, and they tested with several different feature extractors.