GAN loss, perturbation loss, and identity loss, respectively.[]{data-label="fig:ablation"}](fig/ablation/wo_d_2.jpg "fig:"){width="0.97\linewidth"} & ![Variants of AdvFaces trained without GAN loss, perturbation loss, and identity loss, respectively.[]{data-label="fig:ablation"}](fig/ablation/wo_prt_2.jpg "fig:"){width="0.97\linewidth"} & ![Variants of AdvFaces trained without GAN loss, perturbation loss, and identity loss, respectively.[]{data-label="fig:ablation"}](fig/ablation/wo_idt_2.jpg "fig:"){width="0.97\linewidth"} & ![Variants of AdvFaces trained without GAN loss, perturbation loss, and identity loss, respectively.[]{data-label="fig:ablation"}](fig/3_g.jpg "fig:"){width="0.97\linewidth"}\

  ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- --
                                                                                                                                                                                                                                                                   **Probe**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                **Adv. Mask**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             **Visualization**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             **Adv. Image**                                                                                                                                                                                                                                                                
        ![Pixels that have been perturbed (Column 3) to generate the corresponding adversarial images for the given probes (Column 1). AdvFaces outputs adversarial masks (Column 2) which are added to the probes to obtain adversarial images in the last column. State-of-the-art face matchers can be evaded by slightly perturbing salient facial regions, such as eyebrows, eyeballs, and nose (cosine similarity obtained via ArcFace [@arcface]).[]{data-label="fig:visualization"}](fig/3_o.jpg "fig:"){width=".23\textwidth"}           ![Pixels that have been perturbed (Column 3) to generate the corresponding adversarial images for the given probes (Column 1). AdvFaces outputs adversarial masks (Column 2) which are added to the probes to obtain adversarial images in the last column. State-of-the-art face matchers can be evaded by slightly perturbing salient facial regions, such as eyebrows, eyeballs, and nose (cosine similarity obtained via ArcFace [@arcface]).[]{data-label="fig:visualization"}](fig/ming_m.jpg "fig:"){width=".23\textwidth"}         ![Pixels that have been perturbed (Column 3) 