{"total":56,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2105.03162","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","created":"2021-05-07","cited_by_count":97,"area":null},{"id":"2303.14126","title":"CIFAKE: Image Classification and Explainable Identification of AI-Generated Synthetic Images","created":"2023-03-24","cited_by_count":84,"area":null},{"id":"2106.07873","title":"Reverse Engineering of Generative Models: Inferring Model Hyperparameters from Generated Images","created":"2021-06-15","cited_by_count":58,"area":null},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43,"area":null},{"id":"2205.05909","title":"Infrared Invisible Clothing:Hiding from Infrared Detectors at Multiple Angles in Real World","created":"2022-05-12","cited_by_count":42,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2303.12512","title":"Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition","created":"2023-03-22","cited_by_count":34,"area":null},{"id":"2104.02156","title":"Unified Detection of Digital and Physical Face Attacks","created":"2021-04-05","cited_by_count":31,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2111.10759","title":"Adversarial Mask: Real-World Universal Adversarial Attack on Face Recognition Model","created":"2021-11-21","cited_by_count":19,"area":null},{"id":"2109.06467","title":"Dodging Attack Using Carefully Crafted Natural Makeup","created":"2021-09-14","cited_by_count":17,"area":null},{"id":"2401.17699","title":"Unified Physical-Digital Face Attack Detection","created":"2024-01-31","cited_by_count":17,"area":null},{"id":"2108.07920","title":"Adversarial Relighting Against Face Recognition","created":"2021-08-18","cited_by_count":16,"area":null},{"id":"2112.04558","title":"SoK: Anti-Facial Recognition Technology","created":"2021-12-08","cited_by_count":16,"area":null},{"id":"2106.03785","title":"Generative Adversarial Networks: A Survey Towards Private and Secure Applications","created":"2021-06-07","cited_by_count":15,"area":null},{"id":"2301.06083","title":"Discrete Point-wise Attack Is Not Enough: Generalized Manifold Adversarial Attack for Face Recognition","created":"2022-12-19","cited_by_count":14,"area":null},{"id":"2503.08269","title":"Adv-CPG: A Customized Portrait Generation Framework with Facial Adversarial Attacks","created":"2025-03-11","cited_by_count":14,"area":null},{"id":"2105.04184","title":"Generative Adversarial Networks (GANs) in Networking: A Comprehensive Survey & Evaluation","created":"2021-05-10","cited_by_count":11,"area":null},{"id":"2407.13975","title":"Personalized Privacy Protection Mask Against Unauthorized Facial Recognition","created":"2024-07-19","cited_by_count":11,"area":null},{"id":"2105.00249","title":"A Master Key Backdoor for Universal Impersonation Attack against DNN-based Face Verification","created":"2021-05-01","cited_by_count":10,"area":null},{"id":"2411.03960","title":"Face Reconstruction from Face Embeddings using Adapter to a Face Foundation Model","created":"2024-11-06","cited_by_count":9,"area":null},{"id":"2411.09863","title":"Face De-identification: State-of-the-art Methods and Comparative Studies","created":"2024-11-15","cited_by_count":9,"area":null},{"id":"2201.04011","title":"Similarity-based Gray-box Adversarial Attack Against Deep Face Recognition","created":"2022-01-11","cited_by_count":8,"area":null},{"id":"2206.12590","title":"RSTAM: An Effective Black-Box Impersonation Attack on Face Recognition using a Mobile and Compact Printer","created":"2022-06-25","cited_by_count":7,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2312.14407","title":"AdvCloak: Customized Adversarial Cloak for Privacy Protection","created":"2023-12-22","cited_by_count":5,"area":null},{"id":"2412.11735","title":"Transferable Adversarial Face Attack with Text Controlled Attribute","created":"2024-12-16","cited_by_count":5,"area":null},{"id":"2407.14972","title":"ARoFace: Alignment Robustness to Improve Low-Quality Face Recognition","created":"2024-07-20","cited_by_count":4,"area":null},{"id":"2409.13349","title":"ID-Guard: A Universal Framework for Combating Facial Manipulation via Breaking Identification","created":"2024-09-20","cited_by_count":4,"area":null},{"id":"2410.16317","title":"A Survey on Physical Adversarial Attacks against Face Recognition Systems","created":"2024-10-10","cited_by_count":4,"area":null},{"id":"2404.14693","title":"DIP-Watermark: A Double Identity Protection Method Based on Robust Adversarial Watermark","created":"2024-04-23","cited_by_count":3,"area":null},{"id":"2407.11941","title":"Beyond Spatial Explanations: Explainable Face Recognition in the Frequency Domain","created":"2024-07-16","cited_by_count":3,"area":null},{"id":"2408.08205","title":"A Multi-task Adversarial Attack Against Face Authentication","created":"2024-08-15","cited_by_count":3,"area":null},{"id":"2201.03353","title":"GMFIM: A Generative Mask-guided Facial Image Manipulation Model for Privacy Preservation","created":"2022-01-10","cited_by_count":2,"area":null},{"id":"2409.03458","title":"Non-Uniform Illumination Attack for Fooling Convolutional Neural Networks","created":"2024-09-05","cited_by_count":2,"area":null},{"id":"2509.00332","title":"CryptoFace: End-to-End Encrypted Face Recognition","created":"2025-08-30","cited_by_count":2,"area":null},{"id":"2108.09713","title":"Robustness-via-Synthesis: Robust Training with Generative Adversarial Perturbations","created":"2021-08-22","cited_by_count":1,"area":null},{"id":"2110.04459","title":"Adversarial Training for Face Recognition Systems using Contrastive Adversarial Learning and Triplet Loss Fine-tuning","created":"2021-10-09","cited_by_count":1,"area":null},{"id":"2301.12046","title":"Semantic Adversarial Attacks on Face Recognition through Significant Attributes","created":"2023-01-28","cited_by_count":1,"area":null},{"id":"2404.10408","title":"Adversarial Identity Injection for Semantic Face Image Synthesis","created":"2024-04-16","cited_by_count":1,"area":null},{"id":"2408.07642","title":"Boosting Unconstrained Face Recognition with Targeted Style Adversary","created":"2024-08-14","cited_by_count":1,"area":null},{"id":"2412.17038","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","created":"2024-12-22","cited_by_count":1,"area":null},{"id":"2505.08423","title":"DArFace: Deformation Aware Robustness for Low Quality Face Recognition","created":"2025-05-13","cited_by_count":1,"area":null},{"id":"2109.03329","title":"Real-World Adversarial Examples involving Makeup Application","created":"2021-09-04","cited_by_count":0,"area":null},{"id":"2201.08831","title":"Reliable Detection of Doppelg\\\"angers based on Deep Face Representations","created":"2022-01-21","cited_by_count":0,"area":null},{"id":"2202.04978","title":"Towards Assessing and Characterizing the Semantic Robustness of Face Recognition","created":"2022-02-10","cited_by_count":0,"area":null},{"id":"2301.03966","title":"AdvBiom: Adversarial Attacks on Biometric Matchers","created":"2023-01-10","cited_by_count":0,"area":null},{"id":"2311.11753","title":"AdvGen: Physical Adversarial Attack on Face Presentation Attack Detection Systems","created":"2023-11-20","cited_by_count":0,"area":null},{"id":"2311.17332","title":"NeRFTAP: Enhancing Transferability of Adversarial Patches on Face Recognition using Neural Radiance Fields","created":"2023-11-29","cited_by_count":0,"area":null},{"id":"2504.00429","title":"Unleashing the Power of Pre-trained Encoders for Universal Adversarial Attack Detection","created":"2025-04-01","cited_by_count":0,"area":null},{"id":"2510.19371","title":"AegisRF: Adversarial Perturbations Guided with Sensitivity for Protecting Intellectual Property of Neural Radiance Fields","created":"2025-10-22","cited_by_count":0,"area":null},{"id":"2605.19032","title":"Personalized Face Privacy Protection From a Single Image","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2607.16414","title":"Signal-based Model Access Risk Analysis for AI System Operations Security","created":"2026-07-17","cited_by_count":0,"area":null},{"id":"2607.25926","title":"Face De-Identification: A Domain-Centric Survey from Capture to Processing","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2608.30839","title":"Physical Adversarial Examples for Person Detectors in Thermal Images Based on 3D Modeling","created":"2026-08-31","cited_by_count":0,"area":null}],"next_cursor":null}