Breaking High Confidence: Practical Face Impersonation under High-Security Thresholds

arXiv:2608.20884v1 Announce Type: new Abstract: Face recognition systems (FRSs) are increasingly deployed in critical real-world services for authentication, such as banking applications and airport identity checks, necessitating stringent security configurations. Consequently, the security vulnerabilities of FRSs have garnered significant attention. While existing studies have extensively explored FRS security, prior analyses have primarily focused on medium-security threshold settings, which are not directly applicable to FRSs operating under high-security constraints. In this paper, we propose the first successful impersonation attack against FRSs under high-security threshold settings. Among various threat models, we focus on a practical and challenging scenario: score-based impersonation attacks under strict rate limits. To precisely evaluate the feasibility of such attacks, we provide a principled mathematical analysis characterizing the gaps in each stage of the attack pipeline. Our method significantly enhances impersonation capabilities in score-based attacks, even under elevated decision thresholds. On the LFW benchmark, with a budget of only 100 confidence score queries per identity, our attack achieves an impersonation success rate exceeding 92% against Amazon Rekognition at a confidence score threshold of 99-recommended setting for law enforcement scenarios. We further observe consistently robust performance across multiple open-source FRSs evaluated at similarly stringent decision thresholds.

Related

• A Lightweight Ensemble-Based Face Image Quality Assessment Method with Correlation-Aware Loss
• WIDER-FAIR: An Annotated Version of the WIDER-FACE Dataset for Fairness Evaluation
• Purify then Guide: Rethinking Domain Generalization for Multimodal Face Anti-Spoofing

Source: arXiv cs.CV | 2026-08-24