{"total":80,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2105.03162","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","created":"2021-05-07","cited_by_count":97,"area":null},{"id":"2101.07922","title":"LowKey: Leveraging Adversarial Attacks to Protect Social Media Users from Facial Recognition","created":"2021-01-20","cited_by_count":94,"area":null},{"id":"2203.03121","title":"Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer","created":"2022-03-07","cited_by_count":78,"area":null},{"id":"2103.14803","title":"Face Transformer for Recognition","created":"2021-03-27","cited_by_count":46,"area":null},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43,"area":null},{"id":"2210.04213","title":"Towards Understanding and Boosting Adversarial Transferability from a Distribution Perspective","created":"2022-10-09","cited_by_count":37,"area":null},{"id":"2305.13625","title":"DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection","created":"2023-05-23","cited_by_count":35,"area":"diffusion"},{"id":"2108.10290","title":"Cross-Quality LFW: A Database for Analyzing Cross-Resolution Image Face Recognition in Unconstrained Environments","created":"2021-08-23","cited_by_count":34,"area":null},{"id":"2303.12512","title":"Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition","created":"2023-03-22","cited_by_count":34,"area":null},{"id":"2405.09882","title":"DiffAM: Diffusion-based Adversarial Makeup Transfer for Facial Privacy Protection","created":"2024-05-16","cited_by_count":32,"area":"diffusion"},{"id":"2208.09191","title":"Synthetic Data in Human Analysis: A Survey","created":"2022-08-19","cited_by_count":28,"area":null},{"id":"2204.12347","title":"Restricted Black-box Adversarial Attack Against DeepFake Face Swapping","created":"2022-04-26","cited_by_count":25,"area":null},{"id":"2205.11981","title":"OPOM: Customized Invisible Cloak towards Face Privacy Protection","created":"2022-05-24","cited_by_count":22,"area":null},{"id":"2308.06015","title":"Enhancing Generalization of Universal Adversarial Perturbation through Gradient Aggregation","created":"2023-08-11","cited_by_count":22,"area":null},{"id":"2112.04016","title":"DeepFace-EMD: Re-ranking Using Patch-wise Earth Mover's Distance Improves Out-Of-Distribution Face Identification","created":"2021-12-07","cited_by_count":20,"area":null},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19,"area":null},{"id":"2303.03680","title":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","created":"2023-03-07","cited_by_count":18,"area":null},{"id":"2108.07920","title":"Adversarial Relighting Against Face Recognition","created":"2021-08-18","cited_by_count":16,"area":null},{"id":"2211.01361","title":"My Face My Choice: Privacy Enhancing Deepfakes for Social Media Anonymization","created":"2022-11-02","cited_by_count":14,"area":null},{"id":"2112.06658","title":"Learning to Learn Transferable Attack","created":"2021-12-10","cited_by_count":13,"area":null},{"id":"2109.05804","title":"MLFW: A Database for Face Recognition on Masked Faces","created":"2021-09-13","cited_by_count":10,"area":null},{"id":"2208.09500","title":"Causality-Inspired Taxonomy for Explainable Artificial Intelligence","created":"2022-08-19","cited_by_count":9,"area":null},{"id":"2303.11625","title":"Information-containing Adversarial Perturbation for Combating Facial Manipulation Systems","created":"2023-03-21","cited_by_count":9,"area":null},{"id":"2411.09863","title":"Face De-identification: State-of-the-art Methods and Comparative Studies","created":"2024-11-15","cited_by_count":9,"area":null},{"id":"2201.04011","title":"Similarity-based Gray-box Adversarial Attack Against Deep Face Recognition","created":"2022-01-11","cited_by_count":8,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2206.12590","title":"RSTAM: An Effective Black-Box Impersonation Attack on Face Recognition using a Mobile and Compact Printer","created":"2022-06-25","cited_by_count":7,"area":null},{"id":"2209.08130","title":"Robust Ensemble Morph Detection with Domain Generalization","created":"2022-09-16","cited_by_count":7,"area":null},{"id":"2210.16117","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Beneficial Perturbation Feature Augmentation","created":"2022-10-28","cited_by_count":7,"area":null},{"id":"2306.01809","title":"Adversarial Attack Based on Prediction-Correction","created":"2023-06-02","cited_by_count":7,"area":null},{"id":"2112.00323","title":"Push Stricter to Decide Better: A Class-Conditional Feature Adaptive Framework for Improving Adversarial Robustness","created":"2021-12-01","cited_by_count":6,"area":null},{"id":"2202.01186","title":"Smoothed Embeddings for Certified Few-Shot Learning","created":"2022-02-02","cited_by_count":6,"area":null},{"id":"2305.03173","title":"New Adversarial Image Detection Based on Sentiment Analysis","created":"2023-05-03","cited_by_count":6,"area":null},{"id":"2207.06035","title":"Perturbation Inactivation Based Adversarial Defense for Face Recognition","created":"2022-07-13","cited_by_count":5,"area":null},{"id":"2303.06302","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","created":"2023-03-11","cited_by_count":5,"area":null},{"id":"2306.14640","title":"3D-Aware Adversarial Makeup Generation for Facial Privacy Protection","created":"2023-06-26","cited_by_count":5,"area":null},{"id":"2309.01582","title":"Improving Visual Quality and Transferability of Adversarial Attacks on Face Recognition Simultaneously with Adversarial Restoration","created":"2023-09-04","cited_by_count":5,"area":null},{"id":"2310.14637","title":"Semantic-Aware Adversarial Training for Reliable Deep Hashing Retrieval","created":"2023-10-23","cited_by_count":5,"area":null},{"id":"2312.14407","title":"AdvCloak: Customized Adversarial Cloak for Privacy Protection","created":"2023-12-22","cited_by_count":5,"area":null},{"id":"2309.09480","title":"Stealthy Physical Masked Face Recognition Attack via Adversarial Style Optimization","created":"2023-09-18","cited_by_count":4,"area":null},{"id":"2311.02803","title":"Fast and Interpretable Face Identification for Out-Of-Distribution Data Using Vision Transformers","created":"2023-11-06","cited_by_count":4,"area":null},{"id":"2405.12786","title":"Rethinking the Vulnerabilities of Face Recognition Systems:From a Practical Perspective","created":"2024-05-21","cited_by_count":4,"area":"safety"},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2410.16317","title":"A Survey on Physical Adversarial Attacks against Face Recognition Systems","created":"2024-10-10","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2502.10801","title":"FaceSwapGuard: Safeguarding Facial Privacy from DeepFake Threats through Identity Obfuscation","created":"2025-02-15","cited_by_count":4,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2211.12314","title":"Attacking Image Splicing Detection and Localization Algorithms Using Synthetic Traces","created":"2022-11-22","cited_by_count":3,"area":null},{"id":"2305.13548","title":"Attribute-Guided Encryption with Facial Texture Masking","created":"2023-05-22","cited_by_count":3,"area":null},{"id":"2310.03166","title":"Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors","created":"2023-10-04","cited_by_count":3,"area":null},{"id":"2404.14693","title":"DIP-Watermark: A Double Identity Protection Method Based on Robust Adversarial Watermark","created":"2024-04-23","cited_by_count":3,"area":null},{"id":"2405.09403","title":"Identity Overlap Between Face Recognition Train/Test Data: Causing Optimistic Bias in Accuracy Measurement","created":"2024-05-15","cited_by_count":3,"area":null},{"id":"2405.15965","title":"Goldilocks Test Sets for Face Verification","created":"2024-05-24","cited_by_count":3,"area":null},{"id":"2407.11941","title":"Beyond Spatial Explanations: Explainable Face Recognition in the Frequency Domain","created":"2024-07-16","cited_by_count":3,"area":null},{"id":"2408.08205","title":"A Multi-task Adversarial Attack Against Face Authentication","created":"2024-08-15","cited_by_count":3,"area":null},{"id":"2410.02240","title":"SCA: Improve Semantic Consistent in Unrestricted Adversarial Attacks via DDPM Inversion","created":"2024-10-03","cited_by_count":3,"area":"diffusion"},{"id":"2507.06078","title":"ScoreAdv: Score-based Targeted Generation of Natural Adversarial Examples via Diffusion Models","created":"2025-07-08","cited_by_count":3,"area":"diffusion"},{"id":"2406.18144","title":"Artificial Immune System of Secure Face Recognition Against Adversarial Attacks","created":"2024-06-26","cited_by_count":2,"area":null},{"id":"2407.08514","title":"Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2409.16491","title":"Proactive Schemes: A Survey of Adversarial Attacks for Social Good","created":"2024-09-24","cited_by_count":2,"area":null},{"id":"2210.08288","title":"Transformer-based dimensionality reduction","created":"2022-10-15","cited_by_count":1,"area":null},{"id":"2301.12046","title":"Semantic Adversarial Attacks on Face Recognition through Significant Attributes","created":"2023-01-28","cited_by_count":1,"area":null},{"id":"2401.01575","title":"Enhancing Generalization of Invisible Facial Privacy Cloak via Gradient Accumulation","created":"2024-01-03","cited_by_count":1,"area":null},{"id":"2409.04208","title":"Learning to Learn Transferable Generative Attack for Person Re-Identification","created":"2024-09-06","cited_by_count":1,"area":null},{"id":"2409.16056","title":"Adversarial Watermarking for Face Recognition","created":"2024-09-24","cited_by_count":1,"area":null},{"id":"2412.17038","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","created":"2024-12-22","cited_by_count":1,"area":null},{"id":"2502.05542","title":"Democratic Training Against Universal Adversarial Perturbations","created":"2025-02-08","cited_by_count":1,"area":null},{"id":"2505.16714","title":"Experimental robustness benchmarking of quantum neural networks on a superconducting quantum processor","created":"2025-05-22","cited_by_count":1,"area":null},{"id":"2109.03329","title":"Real-World Adversarial Examples involving Makeup Application","created":"2021-09-04","cited_by_count":0,"area":null},{"id":"2210.09153","title":"Face Pasting Attack","created":"2022-10-17","cited_by_count":0,"area":null},{"id":"2301.03966","title":"AdvBiom: Adversarial Attacks on Biometric Matchers","created":"2023-01-10","cited_by_count":0,"area":null},{"id":"2309.05879","title":"Generalized Attacks on Face Verification Systems","created":"2023-09-12","cited_by_count":0,"area":null},{"id":"2311.11753","title":"AdvGen: Physical Adversarial Attack on Face Presentation Attack Detection Systems","created":"2023-11-20","cited_by_count":0,"area":null},{"id":"2311.17332","title":"NeRFTAP: Enhancing Transferability of Adversarial Patches on Face Recognition using Neural Radiance Fields","created":"2023-11-29","cited_by_count":0,"area":null},{"id":"2412.13507","title":"Novel AI Camera Camouflage: Face Cloaking Without Full Disguise","created":"2024-12-18","cited_by_count":0,"area":null},{"id":"2502.19710","title":"SAP-DIFF: Semantic Adversarial Patch Generation for Black-Box Face Recognition Models via Diffusion Models","created":"2025-02-27","cited_by_count":0,"area":"diffusion"},{"id":"2607.16414","title":"Signal-based Model Access Risk Analysis for AI System Operations Security","created":"2026-07-17","cited_by_count":0,"area":null},{"id":"2607.25926","title":"Face De-Identification: A Domain-Centric Survey from Capture to Processing","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2609.27022","title":"Adversarial Attacks and Identity Leakage in De-Identification Systems: An Empirical Study","created":"2026-09-22","cited_by_count":0,"area":null}],"next_cursor":null}