An efficient face recognition attack method based on generative adversarial networks and cosine metrics

Deep neural networks are vulnerable to attacks on adversarial samples. These attacks are caused by adding small magnitude perturbations to the input samples, which may lead to misclassification of the deep neural network. Based on the study of the adversarial sample attack network model, we propose an attack sample based on the generative adversarial network HNUGAN, incorporating the cosine metric of disparity recognition, for the features of the face dataset, to construct an attack sample to attack the face recognition system. Using these adversarial samples can reduce the recognition accuracy of models such as GoogleNet and ResNet to a very low level, and thus complete the attack on the target model. Interestingly, we can obtain a batch of adversarial samples through adversarial training to expand the dataset and retrain the target model to improve its robustness and resistance to attacks.