{"id":"https://openalex.org/W7131118560","doi":"https://doi.org/10.1109/iccvw69036.2025.00626","title":"On Adversarial Robustness of Face Presentation Attack Detection Algorithms","display_name":"On Adversarial Robustness of Face Presentation Attack Detection Algorithms","publication_year":2025,"publication_date":"2025-10-19","ids":{"openalex":"https://openalex.org/W7131118560","doi":"https://doi.org/10.1109/iccvw69036.2025.00626"},"language":null,"primary_location":{"id":"doi:10.1109/iccvw69036.2025.00626","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccvw69036.2025.00626","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/CVF International Conference on Computer Vision Workshops (ICCVW)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126649603","display_name":"Akshay Agarwa","orcid":null},"institutions":[{"id":"https://openalex.org/I288749910","display_name":"Indian Institute of Science Education and Research, Bhopal","ror":"https://ror.org/02rb21j89","country_code":"IN","type":"education","lineage":["https://openalex.org/I288749910"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Akshay Agarwa","raw_affiliation_strings":["IISER Bhopal,India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IISER Bhopal,India","institution_ids":["https://openalex.org/I288749910"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050521702","display_name":"Mayank Vatsa","orcid":"https://orcid.org/0000-0001-5952-2274"},"institutions":[{"id":"https://openalex.org/I154549908","display_name":"Indian Institute of Technology Jodhpur","ror":"https://ror.org/03yacj906","country_code":"IN","type":"education","lineage":["https://openalex.org/I154549908"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Mayank Vatsa","raw_affiliation_strings":["IIT Jodhpur,India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IIT Jodhpur,India","institution_ids":["https://openalex.org/I154549908"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5126653350","display_name":"Richa Singh","orcid":null},"institutions":[{"id":"https://openalex.org/I154549908","display_name":"Indian Institute of Technology Jodhpur","ror":"https://ror.org/03yacj906","country_code":"IN","type":"education","lineage":["https://openalex.org/I154549908"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Richa Singh","raw_affiliation_strings":["IIT Jodhpur,India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IIT Jodhpur,India","institution_ids":["https://openalex.org/I154549908"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"6015","last_page":"6023"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5022000074386597,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5022000074386597,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.14239999651908875,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.04430000111460686,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9107999801635742},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6603000164031982},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.5507000088691711},{"id":"https://openalex.org/keywords/presentation","display_name":"Presentation (obstetrics)","score":0.5497999787330627},{"id":"https://openalex.org/keywords/facial-recognition-system","display_name":"Facial recognition system","score":0.5317999720573425},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.3856000006198883}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9107999801635742},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.767300009727478},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6603000164031982},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6434999704360962},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.5507000088691711},{"id":"https://openalex.org/C2777601897","wikidata":"https://www.wikidata.org/wiki/Q3409113","display_name":"Presentation (obstetrics)","level":2,"score":0.5497999787330627},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.5317999720573425},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41670000553131104},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.3856000006198883},{"id":"https://openalex.org/C191070858","wikidata":"https://www.wikidata.org/wiki/Q5428343","display_name":"Face Recognition Grand Challenge","level":5,"score":0.37529999017715454},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3305000066757202},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3222000002861023},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.3212999999523163},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3102000057697296},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.30079999566078186},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.29679998755455017},{"id":"https://openalex.org/C2780966255","wikidata":"https://www.wikidata.org/wiki/Q5474306","display_name":"Foundation (evidence)","level":2,"score":0.25189998745918274}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iccvw69036.2025.00626","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccvw69036.2025.00626","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/CVF International Conference on Computer Vision Workshops (ICCVW)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":54,"referenced_works":["https://openalex.org/W1607979445","https://openalex.org/W1982209341","https://openalex.org/W2097117768","https://openalex.org/W2125320497","https://openalex.org/W2161969291","https://openalex.org/W2194775991","https://openalex.org/W2535873859","https://openalex.org/W2543927648","https://openalex.org/W2565867885","https://openalex.org/W2594656819","https://openalex.org/W2602244503","https://openalex.org/W2750305424","https://openalex.org/W2788741149","https://openalex.org/W2940483533","https://openalex.org/W2942039787","https://openalex.org/W2946566846","https://openalex.org/W2963428752","https://openalex.org/W2967878293","https://openalex.org/W2971848556","https://openalex.org/W2987959198","https://openalex.org/W2991827049","https://openalex.org/W3005552151","https://openalex.org/W3006525265","https://openalex.org/W3024244610","https://openalex.org/W3027378069","https://openalex.org/W3034823537","https://openalex.org/W3037702798","https://openalex.org/W3107328291","https://openalex.org/W3107990944","https://openalex.org/W3127986341","https://openalex.org/W3131158285","https://openalex.org/W3158978614","https://openalex.org/W3195269615","https://openalex.org/W4213360524","https://openalex.org/W4308178021","https://openalex.org/W4318464690","https://openalex.org/W4318586162","https://openalex.org/W4319299996","https://openalex.org/W4324395489","https://openalex.org/W4383896823","https://openalex.org/W4385801440","https://openalex.org/W4385801570","https://openalex.org/W4385805084","https://openalex.org/W4386065609","https://openalex.org/W4386066653","https://openalex.org/W4386076048","https://openalex.org/W4386076261","https://openalex.org/W4386076505","https://openalex.org/W4386600846","https://openalex.org/W4387339192","https://openalex.org/W4389169206","https://openalex.org/W4393154081","https://openalex.org/W4400019088","https://openalex.org/W4409916998"],"related_works":[],"abstract_inverted_index":{"It":[0,102],"is":[1,103],"observed":[2],"that":[3,78,82,105,129],"face":[4,49,99],"recognition":[5,50,100],"(FR)":[6],"algorithms":[7,159],"are":[8,116],"highly":[9],"vulnerable":[10],"to":[11,23,64,67,97,118,124,141],"two":[12,133,138],"prominent":[13,134],"attacks,":[14,135],"i.e.,":[15],"presentation":[16,108],"attacks":[17,31,88,163],"and":[18,47,86],"adversarial":[19,87],"attacks.":[20,122,149],"However,":[21],"interestingly,":[22],"the":[24,38,43,52,98,113,119,143,156,166],"best":[25],"of":[26,45,121],"our":[27],"knowledge,":[28],"both":[29,84],"these":[30,132,147],"have":[32],"been":[33],"dealt":[34],"with":[35],"independently":[36],"in":[37],"literature.":[39],"This":[40],"limitation":[41],"lacks":[42],"development":[44],"effective":[46],"secure":[48],"since":[51],"system":[53],"might":[54,61],"be":[55,62,90],"secured":[56],"from":[57],"one":[58],"attack,":[59],"but":[60,164],"open":[63],"another.":[65],"Therefore,":[66],"address":[68,142],"this,":[69],"we":[70,76,136],"proposed":[71,151],"a":[72,79,95,126],"two-fold":[73],"contribution.":[74],"First,":[75],"postulate":[77],"multi-point":[80,148],"attack":[81,109],"combines":[83],"physical":[85],"can":[89,130],"successfully":[91],"performed,":[92],"which":[93],"poses":[94],"challenge":[96],"systems.":[101,172],"showcased":[104],"current":[106],"state-of-the-art":[107],"detection":[110],"algorithms,":[111],"including":[112],"foundation":[114],"models,":[115],"sensitive":[117],"amalgamation":[120],"Henceforth,":[123],"develop":[125],"\u2018universal\u2019":[127],"security":[128],"counter":[131],"propose":[137],"defense":[139,158,171],"approaches":[140],"vulnerabilities":[144],"posed":[145],"by":[146],"The":[150],"solutions":[152],"not":[153],"only":[154],"surpass":[155],"existing":[157],"effectively":[160],"for":[161,168],"individual":[162],"pave":[165],"way":[167],"future":[169],"universal":[170]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-02-24T00:00:00"}