arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2512.15433cs.CV

CLIP-FTI: 通过CLIP驱动的属性条件化实现细粒度面部模板逆向

CLIP-FTI: Fine-Grained Face Template Inversion via CLIP-Driven Attribute Conditioning

Longchen Dai, Zixuan Shen, Zhiheng Zhou, Peipeng Yu, Zhihua Xia

AI总结:

CLIP-FTI通过CLIP驱动的属性条件化实现细粒度面部模板逆向,提升识别准确性和属性相似性,增强跨模型攻击的可转移性。

摘要:

人脸识别系统存储面部模板以实现高效的匹配。一旦泄露,这些模板会构成威胁:逆向它们可以生成逼真的替身,从而威胁隐私并允许冒充。尽管现有研究已经实现了相对逼真的面部模板逆向,但重建的面部图像在面部部分属性(眼睛、鼻子、嘴巴)上表现出过度平滑和有限的可转移性。为了解决这个问题,我们提出了CLIP-FTI,一种通过CLIP驱动的细粒度属性条件化框架用于面部模板逆向。我们的核心思想是利用CLIP模型获取面部特征的语义嵌入,以实现特定面部特征属性的重建。具体而言,从CLIP中提取的面部特征属性嵌入通过跨模态特征交互网络与泄露的模板融合,并投影到预训练的StyleGAN的中间潜在空间中。StyleGAN生成器随后合成具有与模板相同身份但更精细面部特征属性的面部图像。在多个面部识别后端和数据集上的实验表明,我们的重建(i)实现了更高的识别准确性和属性相似性,(ii)恢复了更清晰的组件级属性语义,(iii)比先前的重建攻击提高了跨模型攻击的可转移性。据我们所知,我们的方法是第一个除了使用面部模板攻击外还使用额外信息实现面部模板逆向的方法,并获得了SOTA结果。

英文摘要:

Face recognition systems store face templates for efficient matching. Once leaked, these templates pose a threat: inverting them can yield photorealistic surrogates that compromise privacy and enable impersonation. Although existing research has achieved relatively realistic face template inversion, the reconstructed facial images exhibit over-smoothed facial-part attributes (eyes, nose, mouth) and limited transferability. To address this problem, we present CLIP-FTI, a CLIP-driven fine-grained attribute conditioning framework for face template inversion. Our core idea is to use the CLIP model to obtain the semantic embeddings of facial features, in order to realize the reconstruction of specific facial feature attributes. Specifically, facial feature attribute embeddings extracted from CLIP are fused with the leaked template via a cross-modal feature interaction network and projected into the intermediate latent space of a pretrained StyleGAN. The StyleGAN generator then synthesizes face images with the same identity as the templates but with more fine-grained facial feature attributes. Experiments across multiple face recognition backbones and datasets show that our reconstructions (i) achieve higher identification accuracy and attribute similarity, (ii) recover sharper component-level attribute semantics, and (iii) improve cross-model attack transferability compared to prior reconstruction attacks. To the best of our knowledge, ours is the first method to use additional information besides the face template attack to realize face template inversion and obtains SOTA results.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑