{"total":87,"rows":[{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2203.03121","title":"Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer","created":"2022-03-07","cited_by_count":78,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2106.14948","title":"Deep Learning for Face Anti-Spoofing: A Survey","created":"2021-06-28","cited_by_count":65,"area":null},{"id":"2203.15674","title":"Exploring Frequency Adversarial Attacks for Face Forgery Detection","created":"2022-03-29","cited_by_count":45,"area":null},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43,"area":null},{"id":"2306.10008","title":"CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Search","created":"2023-06-16","cited_by_count":43,"area":null},{"id":"2303.12512","title":"Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition","created":"2023-03-22","cited_by_count":34,"area":null},{"id":"2408.01428","title":"Transferable Adversarial Facial Images for Privacy Protection","created":"2024-07-18","cited_by_count":27,"area":null},{"id":"2109.09320","title":"Robust Physical-World Attacks on Face Recognition","created":"2021-09-20","cited_by_count":26,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2108.06968","title":"3D High-Fidelity Mask Face Presentation Attack Detection Challenge","created":"2021-08-16","cited_by_count":19,"area":null},{"id":"2111.10759","title":"Adversarial Mask: Real-World Universal Adversarial Attack on Face Recognition Model","created":"2021-11-21","cited_by_count":19,"area":null},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2109.06467","title":"Dodging Attack Using Carefully Crafted Natural Makeup","created":"2021-09-14","cited_by_count":17,"area":null},{"id":"2209.14692","title":"Digital and Physical Face Attacks: Reviewing and One Step Further","created":"2022-09-29","cited_by_count":17,"area":null},{"id":"2303.14133","title":"Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges","created":"2023-03-24","cited_by_count":17,"area":null},{"id":"2305.01074","title":"Physical Adversarial Attacks for Surveillance: A Survey","created":"2023-05-01","cited_by_count":15,"area":null},{"id":"2301.06083","title":"Discrete Point-wise Attack Is Not Enough: Generalized Manifold Adversarial Attack for Face Recognition","created":"2022-12-19","cited_by_count":14,"area":null},{"id":"2308.11443","title":"Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging","created":"2023-08-22","cited_by_count":14,"area":null},{"id":"2503.08269","title":"Adv-CPG: A Customized Portrait Generation Framework with Facial Adversarial Attacks","created":"2025-03-11","cited_by_count":14,"area":null},{"id":"2112.06658","title":"Learning to Learn Transferable Attack","created":"2021-12-10","cited_by_count":13,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2411.09863","title":"Face De-identification: State-of-the-art Methods and Comparative Studies","created":"2024-11-15","cited_by_count":9,"area":null},{"id":"2303.12249","title":"State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems","created":"2023-03-22","cited_by_count":8,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2408.12387","title":"Makeup-Guided Facial Privacy Protection via Untrained Neural Network Priors","created":"2024-08-20","cited_by_count":8,"area":null},{"id":"2204.00972","title":"DST: Dynamic Substitute Training for Data-free Black-box Attack","created":"2022-04-03","cited_by_count":7,"area":null},{"id":"2206.12590","title":"RSTAM: An Effective Black-Box Impersonation Attack on Face Recognition using a Mobile and Compact Printer","created":"2022-06-25","cited_by_count":7,"area":null},{"id":"2210.16117","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Beneficial Perturbation Feature Augmentation","created":"2022-10-28","cited_by_count":7,"area":null},{"id":"2306.13091","title":"Evading Forensic Classifiers with Attribute-Conditioned Adversarial Faces","created":"2023-06-22","cited_by_count":6,"area":null},{"id":"2310.16061","title":"Segue: Side-information Guided Generative Unlearnable Examples for Facial Privacy Protection in Real World","created":"2023-10-24","cited_by_count":6,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2306.14640","title":"3D-Aware Adversarial Makeup Generation for Facial Privacy Protection","created":"2023-06-26","cited_by_count":5,"area":null},{"id":"2309.01582","title":"Improving Visual Quality and Transferability of Adversarial Attacks on Face Recognition Simultaneously with Adversarial Restoration","created":"2023-09-04","cited_by_count":5,"area":null},{"id":"2412.11735","title":"Transferable Adversarial Face Attack with Text Controlled Attribute","created":"2024-12-16","cited_by_count":5,"area":null},{"id":"2504.21646","title":"Diffusion-based Adversarial Identity Manipulation for Facial Privacy Protection","created":"2025-04-30","cited_by_count":5,"area":null},{"id":"2304.11359","title":"Detecting Adversarial Faces Using Only Real Face Self-Perturbations","created":"2023-04-22","cited_by_count":4,"area":null},{"id":"2309.09480","title":"Stealthy Physical Masked Face Recognition Attack via Adversarial Style Optimization","created":"2023-09-18","cited_by_count":4,"area":null},{"id":"2404.09961","title":"Ti-Patch: Tiled Physical Adversarial Patch for no-reference video quality metrics","created":"2024-04-15","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2407.14972","title":"ARoFace: Alignment Robustness to Improve Low-Quality Face Recognition","created":"2024-07-20","cited_by_count":4,"area":null},{"id":"2410.16317","title":"A Survey on Physical Adversarial Attacks against Face Recognition Systems","created":"2024-10-10","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2206.08638","title":"Minimum Noticeable Difference based Adversarial Privacy Preserving Image Generation","created":"2022-06-17","cited_by_count":3,"area":null},{"id":"2305.13548","title":"Attribute-Guided Encryption with Facial Texture Masking","created":"2023-05-22","cited_by_count":3,"area":null},{"id":"2308.02116","title":"AdvFAS: A robust face anti-spoofing framework against adversarial examples","created":"2023-08-04","cited_by_count":3,"area":null},{"id":"2404.14693","title":"DIP-Watermark: A Double Identity Protection Method Based on Robust Adversarial Watermark","created":"2024-04-23","cited_by_count":3,"area":null},{"id":"2201.06427","title":"Masked Faces with Faced Masks","created":"2022-01-17","cited_by_count":2,"area":null},{"id":"2401.00151","title":"CamPro: Camera-based Anti-Facial Recognition","created":"2023-12-30","cited_by_count":2,"area":null},{"id":"2501.06533","title":"DivTrackee versus DynTracker: Promoting Diversity in Anti-Facial Recognition against Dynamic FR Strategy","created":"2025-01-11","cited_by_count":2,"area":null},{"id":"2507.12107","title":"Non-Adaptive Adversarial Face Generation","created":"2025-07-16","cited_by_count":2,"area":null},{"id":"2608.04314","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","created":"2026-08-05","cited_by_count":2,"area":null},{"id":"2404.10408","title":"Adversarial Identity Injection for Semantic Face Image Synthesis","created":"2024-04-16","cited_by_count":1,"area":null},{"id":"2405.16226","title":"Detecting Adversarial Data using Perturbation Forgery","created":"2024-05-25","cited_by_count":1,"area":null},{"id":"2408.07642","title":"Boosting Unconstrained Face Recognition with Targeted Style Adversary","created":"2024-08-14","cited_by_count":1,"area":null},{"id":"2410.05680","title":"Convolutional neural networks applied to modification of images","created":"2024-10-08","cited_by_count":1,"area":null},{"id":"2412.12217","title":"Comprehensive Survey on Adversarial Examples in Cybersecurity: Impacts, Challenges, and Mitigation Strategies","created":"2024-12-16","cited_by_count":1,"area":null},{"id":"2412.17038","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","created":"2024-12-22","cited_by_count":1,"area":null},{"id":"2603.03665","title":"Machine Pareidolia: Protecting Facial Image with Emotional Editing","created":"2026-03-04","cited_by_count":1,"area":null},{"id":"2603.13121","title":"FDeID-Toolbox: Face De-Identification Toolbox","created":"2026-03-13","cited_by_count":1,"area":null},{"id":"2606.25376","title":"Transferable Attack against Face Swapping in an Extended Space","created":"2026-06-24","cited_by_count":1,"area":null},{"id":"2109.03329","title":"Real-World Adversarial Examples involving Makeup Application","created":"2021-09-04","cited_by_count":0,"area":null},{"id":"2212.03412","title":"Artificial Intelligence Security Competition (AISC)","created":"2022-12-07","cited_by_count":0,"area":null},{"id":"2212.06431","title":"Object-fabrication Targeted Attack for Object Detection","created":"2022-12-13","cited_by_count":0,"area":null},{"id":"2301.03966","title":"AdvBiom: Adversarial Attacks on Biometric Matchers","created":"2023-01-10","cited_by_count":0,"area":null},{"id":"2308.05320","title":"Generating Transferable and Stealthy Adversarial Patch via Attention-guided Adversarial Inpainting","created":"2023-08-10","cited_by_count":0,"area":null},{"id":"2401.02342","title":"Evasive Hardware Trojan through Adversarial Power Trace","created":"2024-01-04","cited_by_count":0,"area":null},{"id":"2403.03674","title":"Adversarial Infrared Geometry: Using Geometry to Perform Adversarial Attack against Infrared Pedestrian Detectors","created":"2024-03-06","cited_by_count":0,"area":null},{"id":"2412.02270","title":"Sustainable Self-evolution Adversarial Training","created":"2024-12-03","cited_by_count":0,"area":null},{"id":"2501.08258","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","created":"2025-01-14","cited_by_count":0,"area":null},{"id":"2501.14005","title":"Device-aware Optical Adversarial Attack for a Portable Projector-camera System","created":"2025-01-23","cited_by_count":0,"area":null},{"id":"2501.15653","title":"A Privacy Enhancing Technique to Evade Detection by Street Video Cameras Without Using Adversarial Accessories","created":"2025-01-26","cited_by_count":0,"area":null},{"id":"2502.05669","title":"Rigid Body Adversarial Attacks","created":"2025-02-08","cited_by_count":0,"area":null},{"id":"2510.17169","title":"Investigating Adversarial Robustness against Preprocessing used in Blackbox Face Recognition","created":"2025-10-20","cited_by_count":0,"area":null},{"id":"2602.04994","title":"SIDeR: Semantic Identity Decoupling for Unrestricted Face Privacy","created":"2026-02-04","cited_by_count":0,"area":null},{"id":"2602.19539","title":"Can a Teenager Fool an AI? Evaluating Low-Cost Cosmetic Attacks on Age Estimation Systems","created":"2026-02-23","cited_by_count":0,"area":null},{"id":"2603.21867","title":"Adversarial Camouflage","created":"2026-03-23","cited_by_count":0,"area":null},{"id":"2605.01217","title":"Asymmetric Invertible Threat: Learning Reversible Privacy Defense for Face Recognition","created":"2026-05-02","cited_by_count":0,"area":null},{"id":"2605.19032","title":"Personalized Face Privacy Protection From a Single Image","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2606.31703","title":"Phantom: A Unified Face-Swap Deepfake Protection Framework with Latent and Spatial Constraints","created":"2026-06-30","cited_by_count":0,"area":null},{"id":"2607.05996","title":"Unlearnable Faces: Privacy Protection Surviving Extraction Pipeline","created":"2026-07-07","cited_by_count":0,"area":null},{"id":"2607.23292","title":"Hiding in Plain Sight: An Effective Physical Adversarial Patch Attack against Visual-Infrared Fused Face Detection","created":"2026-07-25","cited_by_count":0,"area":null},{"id":"2607.25926","title":"Face De-Identification: A Domain-Centric Survey from Capture to Processing","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2609.27022","title":"Adversarial Attacks and Identity Leakage in De-Identification Systems: An Empirical Study","created":"2026-09-22","cited_by_count":0,"area":null},{"id":"2610.17323","title":"SSM-Attack: Learning Where to Perturb for Black-Box Face Privacy","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}