{"total":55,"rows":[{"id":"2203.03121","title":"Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer","created":"2022-03-07","cited_by_count":78,"area":null},{"id":"2206.13732","title":"A Comprehensive Survey on Deep Gait Recognition: Algorithms, Datasets and Challenges","created":"2022-06-28","cited_by_count":45,"area":null},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43,"area":null},{"id":"2306.10008","title":"CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Search","created":"2023-06-16","cited_by_count":43,"area":null},{"id":"2303.15818","title":"Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognition","created":"2023-03-28","cited_by_count":33,"area":null},{"id":"2112.04558","title":"SoK: Anti-Facial Recognition Technology","created":"2021-12-08","cited_by_count":16,"area":null},{"id":"2301.06083","title":"Discrete Point-wise Attack Is Not Enough: Generalized Manifold Adversarial Attack for Face Recognition","created":"2022-12-19","cited_by_count":14,"area":null},{"id":"2503.08269","title":"Adv-CPG: A Customized Portrait Generation Framework with Facial Adversarial Attacks","created":"2025-03-11","cited_by_count":14,"area":null},{"id":"2407.13975","title":"Personalized Privacy Protection Mask Against Unauthorized Facial Recognition","created":"2024-07-19","cited_by_count":11,"area":null},{"id":"2302.06805","title":"Learning with Noisy labels via Self-supervised Adversarial Noisy Masking","created":"2023-02-14","cited_by_count":10,"area":null},{"id":"2203.04623","title":"Controllable Evaluation and Generation of Physical Adversarial Patch on Face Recognition","created":"2022-03-09","cited_by_count":8,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2408.12387","title":"Makeup-Guided Facial Privacy Protection via Untrained Neural Network Priors","created":"2024-08-20","cited_by_count":8,"area":null},{"id":"2209.15304","title":"Hiding Visual Information via Obfuscating Adversarial Perturbations","created":"2022-09-30","cited_by_count":7,"area":null},{"id":"2210.16117","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Beneficial Perturbation Feature Augmentation","created":"2022-10-28","cited_by_count":7,"area":null},{"id":"2206.05751","title":"Consistent Attack: Universal Adversarial Perturbation on Embodied Vision Navigation","created":"2022-06-12","cited_by_count":6,"area":null},{"id":"2308.05983","title":"Face Encryption via Frequency-Restricted Identity-Agnostic Attacks","created":"2023-08-11","cited_by_count":6,"area":null},{"id":"2306.14640","title":"3D-Aware Adversarial Makeup Generation for Facial Privacy Protection","created":"2023-06-26","cited_by_count":5,"area":null},{"id":"2309.01582","title":"Improving Visual Quality and Transferability of Adversarial Attacks on Face Recognition Simultaneously with Adversarial Restoration","created":"2023-09-04","cited_by_count":5,"area":null},{"id":"2312.14407","title":"AdvCloak: Customized Adversarial Cloak for Privacy Protection","created":"2023-12-22","cited_by_count":5,"area":null},{"id":"2504.21646","title":"Diffusion-based Adversarial Identity Manipulation for Facial Privacy Protection","created":"2025-04-30","cited_by_count":5,"area":null},{"id":"2304.11359","title":"Detecting Adversarial Faces Using Only Real Face Self-Perturbations","created":"2023-04-22","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2208.10688","title":"Hierarchical Perceptual Noise Injection for Social Media Fingerprint Privacy Protection","created":"2022-08-23","cited_by_count":3,"area":null},{"id":"2305.13548","title":"Attribute-Guided Encryption with Facial Texture Masking","created":"2023-05-22","cited_by_count":3,"area":null},{"id":"2308.02116","title":"AdvFAS: A robust face anti-spoofing framework against adversarial examples","created":"2023-08-04","cited_by_count":3,"area":null},{"id":"2401.00151","title":"CamPro: Camera-based Anti-Facial Recognition","created":"2023-12-30","cited_by_count":2,"area":null},{"id":"2409.16491","title":"Proactive Schemes: A Survey of Adversarial Attacks for Social Good","created":"2024-09-24","cited_by_count":2,"area":null},{"id":"2501.06533","title":"DivTrackee versus DynTracker: Promoting Diversity in Anti-Facial Recognition against Dynamic FR Strategy","created":"2025-01-11","cited_by_count":2,"area":null},{"id":"2507.12107","title":"Non-Adaptive Adversarial Face Generation","created":"2025-07-16","cited_by_count":2,"area":null},{"id":"2508.02034","title":"Protego: User-Centric Pose-Invariant Privacy Protection Against Face Recognition-Induced Digital Footprint Exposure","created":"2025-08-04","cited_by_count":2,"area":null},{"id":"2608.04314","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","created":"2026-08-05","cited_by_count":2,"area":null},{"id":"2306.16614","title":"Group-based Robustness: A General Framework for Customized Robustness in the Real World","created":"2023-06-29","cited_by_count":1,"area":null},{"id":"2401.01575","title":"Enhancing Generalization of Invisible Facial Privacy Cloak via Gradient Accumulation","created":"2024-01-03","cited_by_count":1,"area":null},{"id":"2405.16226","title":"Detecting Adversarial Data using Perturbation Forgery","created":"2024-05-25","cited_by_count":1,"area":null},{"id":"2412.17038","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","created":"2024-12-22","cited_by_count":1,"area":null},{"id":"2602.22197","title":"Off-The-Shelf Image-to-Image Models Are All You Need To Defeat Image Protection Schemes","created":"2026-02-25","cited_by_count":1,"area":null},{"id":"2603.03665","title":"Machine Pareidolia: Protecting Facial Image with Emotional Editing","created":"2026-03-04","cited_by_count":1,"area":null},{"id":"2603.13121","title":"FDeID-Toolbox: Face De-Identification Toolbox","created":"2026-03-13","cited_by_count":1,"area":null},{"id":"2310.15590","title":"Facial Data Minimization: Shallow Model as Your Privacy Filter","created":"2023-10-24","cited_by_count":0,"area":null},{"id":"2311.17332","title":"NeRFTAP: Enhancing Transferability of Adversarial Patches on Face Recognition using Neural Radiance Fields","created":"2023-11-29","cited_by_count":0,"area":null},{"id":"2312.02124","title":"VerA: Versatile Anonymization Applicable to Clinical Facial Photographs","created":"2023-12-04","cited_by_count":0,"area":null},{"id":"2406.10887","title":"Imperceptible Face Forgery Attack via Adversarial Semantic Mask","created":"2024-06-16","cited_by_count":0,"area":null},{"id":"2504.00429","title":"Unleashing the Power of Pre-trained Encoders for Universal Adversarial Attack Detection","created":"2025-04-01","cited_by_count":0,"area":null},{"id":"2509.03108","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","created":"2025-09-03","cited_by_count":0,"area":null},{"id":"2510.17169","title":"Investigating Adversarial Robustness against Preprocessing used in Blackbox Face Recognition","created":"2025-10-20","cited_by_count":0,"area":null},{"id":"2602.02914","title":"FaceLinkGen: A Re-evaluation of Identity Leakage in Privacy-Preserving Face Recognition and Face Anonymization Systems Using Simple Distillation","created":"2026-02-02","cited_by_count":0,"area":null},{"id":"2602.04994","title":"SIDeR: Semantic Identity Decoupling for Unrestricted Face Privacy","created":"2026-02-04","cited_by_count":0,"area":null},{"id":"2605.01217","title":"Asymmetric Invertible Threat: Learning Reversible Privacy Defense for Face Recognition","created":"2026-05-02","cited_by_count":0,"area":null},{"id":"2605.19032","title":"Personalized Face Privacy Protection From a Single Image","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2606.31703","title":"Phantom: A Unified Face-Swap Deepfake Protection Framework with Latent and Spatial Constraints","created":"2026-06-30","cited_by_count":0,"area":null},{"id":"2607.05996","title":"Unlearnable Faces: Privacy Protection Surviving Extraction Pipeline","created":"2026-07-07","cited_by_count":0,"area":null},{"id":"2607.25926","title":"Face De-Identification: A Domain-Centric Survey from Capture to Processing","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2610.17323","title":"SSM-Attack: Learning Where to Perturb for Black-Box Face Privacy","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}