Yixiao Xu

Sparse Black-Box Inversion Attack with Limited Information

2023

Existing black-box model inversion attacks mainly focus on training and attacking surrogate models. However, due to the deployment process of face recognition models, training surrogate models becomes extremely difficult in practice. At the same time, …