{"total":63,"rows":[{"id":"2308.07026","title":"AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learning","created":"2023-08-14","cited_by_count":103,"area":null},{"id":"2306.10008","title":"CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Search","created":"2023-06-16","cited_by_count":43,"area":null},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2307.12280","title":"Downstream-agnostic Adversarial Examples","created":"2023-07-23","cited_by_count":32,"area":null},{"id":"2403.10801","title":"Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples","created":"2024-03-16","cited_by_count":21,"area":null},{"id":"2410.22705","title":"Geometry Cloak: Preventing TGS-based 3D Reconstruction from Copyrighted Images","created":"2024-10-30","cited_by_count":15,"area":null},{"id":"2301.06083","title":"Discrete Point-wise Attack Is Not Enough: Generalized Manifold Adversarial Attack for Face Recognition","created":"2022-12-19","cited_by_count":14,"area":null},{"id":"2503.08269","title":"Adv-CPG: A Customized Portrait Generation Framework with Facial Adversarial Attacks","created":"2025-03-11","cited_by_count":14,"area":null},{"id":"2312.08898","title":"Detection and Defense of Unlearnable Examples","created":"2023-12-14","cited_by_count":13,"area":null},{"id":"2304.11579","title":"StyLess: Boosting the Transferability of Adversarial Examples","created":"2023-04-23","cited_by_count":11,"area":null},{"id":"2407.13975","title":"Personalized Privacy Protection Mask Against Unauthorized Facial Recognition","created":"2024-07-19","cited_by_count":11,"area":null},{"id":"2211.12294","title":"PointCA: Evaluating the Robustness of 3D Point Cloud Completion Models Against Adversarial Examples","created":"2022-11-22","cited_by_count":9,"area":null},{"id":"2305.02143","title":"GANonymization: A GAN-based Face Anonymization Framework for Preserving Emotional Expressions","created":"2023-05-03","cited_by_count":9,"area":null},{"id":"2411.09863","title":"Face De-identification: State-of-the-art Methods and Comparative Studies","created":"2024-11-15","cited_by_count":9,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2408.12387","title":"Makeup-Guided Facial Privacy Protection via Untrained Neural Network Priors","created":"2024-08-20","cited_by_count":8,"area":null},{"id":"2210.16117","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Beneficial Perturbation Feature Augmentation","created":"2022-10-28","cited_by_count":7,"area":null},{"id":"2206.05751","title":"Consistent Attack: Universal Adversarial Perturbation on Embodied Vision Navigation","created":"2022-06-12","cited_by_count":6,"area":null},{"id":"2308.05983","title":"Face Encryption via Frequency-Restricted Identity-Agnostic Attacks","created":"2023-08-11","cited_by_count":6,"area":null},{"id":"2404.00673","title":"A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasures","created":"2024-03-31","cited_by_count":6,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2306.14640","title":"3D-Aware Adversarial Makeup Generation for Facial Privacy Protection","created":"2023-06-26","cited_by_count":5,"area":null},{"id":"2309.01582","title":"Improving Visual Quality and Transferability of Adversarial Attacks on Face Recognition Simultaneously with Adversarial Restoration","created":"2023-09-04","cited_by_count":5,"area":null},{"id":"2405.06948","title":"Training-free Subject-Enhanced Attention Guidance for Compositional Text-to-image Generation","created":"2024-05-11","cited_by_count":5,"area":null},{"id":"2504.21646","title":"Diffusion-based Adversarial Identity Manipulation for Facial Privacy Protection","created":"2025-04-30","cited_by_count":5,"area":null},{"id":"2203.03810","title":"Towards Efficient Data-Centric Robust Machine Learning with Noise-based Augmentation","created":"2022-03-08","cited_by_count":4,"area":null},{"id":"2304.11359","title":"Detecting Adversarial Faces Using Only Real Face Self-Perturbations","created":"2023-04-22","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2411.11231","title":"BeautyBank: Encoding Facial Makeup in Latent Space","created":"2024-11-18","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2503.12793","title":"Improving Generalization of Universal Adversarial Perturbation via Dynamic Maximin Optimization","created":"2025-03-17","cited_by_count":4,"area":null},{"id":"2206.08638","title":"Minimum Noticeable Difference based Adversarial Privacy Preserving Image Generation","created":"2022-06-17","cited_by_count":3,"area":null},{"id":"2305.13548","title":"Attribute-Guided Encryption with Facial Texture Masking","created":"2023-05-22","cited_by_count":3,"area":null},{"id":"2404.14693","title":"DIP-Watermark: A Double Identity Protection Method Based on Robust Adversarial Watermark","created":"2024-04-23","cited_by_count":3,"area":null},{"id":"2508.05994","title":"EvoMakeup: High-Fidelity and Controllable Makeup Editing with MakeupQuad","created":"2025-08-08","cited_by_count":3,"area":null},{"id":"2406.03684","title":"Principles of Designing Robust Remote Face Anti-Spoofing Systems","created":"2024-06-06","cited_by_count":2,"area":null},{"id":"2409.16491","title":"Proactive Schemes: A Survey of Adversarial Attacks for Social Good","created":"2024-09-24","cited_by_count":2,"area":null},{"id":"2507.12107","title":"Non-Adaptive Adversarial Face Generation","created":"2025-07-16","cited_by_count":2,"area":null},{"id":"2508.02034","title":"Protego: User-Centric Pose-Invariant Privacy Protection Against Face Recognition-Induced Digital Footprint Exposure","created":"2025-08-04","cited_by_count":2,"area":null},{"id":"2508.03241","title":"FFHQ-Makeup: Paired Synthetic Makeup Dataset with Facial Consistency Across Multiple Styles","created":"2025-08-05","cited_by_count":2,"area":null},{"id":"2601.11635","title":"Now You See Me, Now You Don't: A Unified Framework for Expression Consistent Anonymization in Talking Head Videos","created":"2026-01-14","cited_by_count":2,"area":null},{"id":"2608.04314","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","created":"2026-08-05","cited_by_count":2,"area":null},{"id":"2301.12046","title":"Semantic Adversarial Attacks on Face Recognition through Significant Attributes","created":"2023-01-28","cited_by_count":1,"area":null},{"id":"2405.16226","title":"Detecting Adversarial Data using Perturbation Forgery","created":"2024-05-25","cited_by_count":1,"area":null},{"id":"2412.17038","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","created":"2024-12-22","cited_by_count":1,"area":null},{"id":"2602.22197","title":"Off-The-Shelf Image-to-Image Models Are All You Need To Defeat Image Protection Schemes","created":"2026-02-25","cited_by_count":1,"area":null},{"id":"2603.03665","title":"Machine Pareidolia: Protecting Facial Image with Emotional Editing","created":"2026-03-04","cited_by_count":1,"area":null},{"id":"2603.13121","title":"FDeID-Toolbox: Face De-Identification Toolbox","created":"2026-03-13","cited_by_count":1,"area":null},{"id":"2205.01226","title":"Adversarial attacks on an optical neural network","created":"2022-04-29","cited_by_count":0,"area":null},{"id":"2307.09146","title":"PRO-Face S: Privacy-preserving Reversible Obfuscation of Face Images via Secure Flow","created":"2023-07-18","cited_by_count":0,"area":null},{"id":"2310.12590","title":"PrivacyGAN: robust generative image privacy","created":"2023-10-19","cited_by_count":0,"area":null},{"id":"2310.15590","title":"Facial Data Minimization: Shallow Model as Your Privacy Filter","created":"2023-10-24","cited_by_count":0,"area":null},{"id":"2312.02124","title":"VerA: Versatile Anonymization Applicable to Clinical Facial Photographs","created":"2023-12-04","cited_by_count":0,"area":null},{"id":"2409.17568","title":"Showing Many Labels in Multi-label Classification Models: An Empirical Study of Adversarial Examples","created":"2024-09-26","cited_by_count":0,"area":null},{"id":"2503.21164","title":"Adversarial Wear and Tear: Exploiting Natural Damage for Generating Physical-World Adversarial Examples","created":"2025-03-27","cited_by_count":0,"area":null},{"id":"2602.04994","title":"SIDeR: Semantic Identity Decoupling for Unrestricted Face Privacy","created":"2026-02-04","cited_by_count":0,"area":null},{"id":"2602.11204","title":"Zero-Sacrifice Persistent-Robustness Adversarial Defense for Pre-Trained Encoders","created":"2026-02-10","cited_by_count":0,"area":null},{"id":"2602.19539","title":"Can a Teenager Fool an AI? Evaluating Low-Cost Cosmetic Attacks on Age Estimation Systems","created":"2026-02-23","cited_by_count":0,"area":null},{"id":"2603.05446","title":"NaiLIA: Multimodal Nail Design Retrieval Based on Dense Intent Descriptions and Palette Queries","created":"2026-03-05","cited_by_count":0,"area":null},{"id":"2605.19032","title":"Personalized Face Privacy Protection From a Single Image","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2606.31703","title":"Phantom: A Unified Face-Swap Deepfake Protection Framework with Latent and Spatial Constraints","created":"2026-06-30","cited_by_count":0,"area":null},{"id":"2607.25926","title":"Face De-Identification: A Domain-Centric Survey from Capture to Processing","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2610.17323","title":"SSM-Attack: Learning Where to Perturb for Black-Box Face Privacy","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}