Enhancing Dodging Attacks while Maintaining Impersonation Attacks on Face Recognition Systems

A novel attack method named Pre-training Pruning Restoration Attack (PPR) is proposed to enhance the dodging performance of adversarial face examples while maintaining their impersonation performance.