{"id":"https://openalex.org/W4308536654","doi":"https://doi.org/10.1109/nas55553.2022.9925338","title":"Transformations as Denoising: A Robust Approach to Weaken Adversarial Facial Images","display_name":"Transformations as Denoising: A Robust Approach to Weaken Adversarial Facial Images","publication_year":2022,"publication_date":"2022-10-01","ids":{"openalex":"https://openalex.org/W4308536654","doi":"https://doi.org/10.1109/nas55553.2022.9925338"},"language":"en","primary_location":{"id":"doi:10.1109/nas55553.2022.9925338","is_oa":false,"landing_page_url":"https://doi.org/10.1109/nas55553.2022.9925338","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE International Conference on Networking, Architecture and Storage (NAS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103074653","display_name":"Tian Pu","orcid":"https://orcid.org/0000-0002-5150-8053"},"institutions":[{"id":"https://openalex.org/I4322298","display_name":"Towson University","ror":"https://ror.org/044w7a341","country_code":"US","type":"education","lineage":["https://openalex.org/I4322298"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Pu Tian","raw_affiliation_strings":["Towson University,Dept. of Computer and Information Science,USA","Dept. of Computer and Information Science, Towson University, USA"],"affiliations":[{"raw_affiliation_string":"Towson University,Dept. of Computer and Information Science,USA","institution_ids":["https://openalex.org/I4322298"]},{"raw_affiliation_string":"Dept. of Computer and Information Science, Towson University, USA","institution_ids":["https://openalex.org/I4322298"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029226492","display_name":"Turhan Kimbrough","orcid":null},"institutions":[{"id":"https://openalex.org/I4322298","display_name":"Towson University","ror":"https://ror.org/044w7a341","country_code":"US","type":"education","lineage":["https://openalex.org/I4322298"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Turhan Kimbrough","raw_affiliation_strings":["Towson University,Dept. of Computer and Information Science,USA","Dept. of Computer and Information Science, Towson University, USA"],"affiliations":[{"raw_affiliation_string":"Towson University,Dept. of Computer and Information Science,USA","institution_ids":["https://openalex.org/I4322298"]},{"raw_affiliation_string":"Dept. of Computer and Information Science, Towson University, USA","institution_ids":["https://openalex.org/I4322298"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083406034","display_name":"Weixian Liao","orcid":"https://orcid.org/0000-0003-1444-8925"},"institutions":[{"id":"https://openalex.org/I4322298","display_name":"Towson University","ror":"https://ror.org/044w7a341","country_code":"US","type":"education","lineage":["https://openalex.org/I4322298"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Weixian Liao","raw_affiliation_strings":["Towson University,Dept. of Computer and Information Science,USA","Dept. of Computer and Information Science, Towson University, USA"],"affiliations":[{"raw_affiliation_string":"Towson University,Dept. of Computer and Information Science,USA","institution_ids":["https://openalex.org/I4322298"]},{"raw_affiliation_string":"Dept. of Computer and Information Science, Towson University, USA","institution_ids":["https://openalex.org/I4322298"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023894377","display_name":"Erik Blasch","orcid":"https://orcid.org/0000-0001-6894-6108"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Erik Blasch","raw_affiliation_strings":["MOVEJ Analytics,USA","MOVEJ Analytics, USA"],"affiliations":[{"raw_affiliation_string":"MOVEJ Analytics,USA","institution_ids":[]},{"raw_affiliation_string":"MOVEJ Analytics, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002139930","display_name":"Wei Yu","orcid":"https://orcid.org/0000-0003-4522-7340"},"institutions":[{"id":"https://openalex.org/I4322298","display_name":"Towson University","ror":"https://ror.org/044w7a341","country_code":"US","type":"education","lineage":["https://openalex.org/I4322298"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wei Yu","raw_affiliation_strings":["Towson University,Dept. of Computer and Information Science,USA","Dept. of Computer and Information Science, Towson University, USA"],"affiliations":[{"raw_affiliation_string":"Towson University,Dept. of Computer and Information Science,USA","institution_ids":["https://openalex.org/I4322298"]},{"raw_affiliation_string":"Dept. of Computer and Information Science, Towson University, USA","institution_ids":["https://openalex.org/I4322298"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5103074653"],"corresponding_institution_ids":["https://openalex.org/I4322298"],"apc_list":null,"apc_paid":null,"fwci":0.4137,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.68730739,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":96},"biblio":{"volume":"16","issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.98580002784729,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9123134613037109},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.80812668800354},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7499033212661743},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.602684736251831},{"id":"https://openalex.org/keywords/noise-reduction","display_name":"Noise reduction","score":0.4907435178756714},{"id":"https://openalex.org/keywords/facial-recognition-system","display_name":"Facial recognition system","score":0.48834678530693054},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.46043673157691956},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.38499343395233154},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3701973855495453},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.2984932065010071}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9123134613037109},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.80812668800354},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7499033212661743},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.602684736251831},{"id":"https://openalex.org/C163294075","wikidata":"https://www.wikidata.org/wiki/Q581861","display_name":"Noise reduction","level":2,"score":0.4907435178756714},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.48834678530693054},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.46043673157691956},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.38499343395233154},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3701973855495453},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2984932065010071},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/nas55553.2022.9925338","is_oa":false,"landing_page_url":"https://doi.org/10.1109/nas55553.2022.9925338","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE International Conference on Networking, Architecture and Storage (NAS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6899999976158142,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":54,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W1999360130","https://openalex.org/W2003921219","https://openalex.org/W2019464758","https://openalex.org/W2024922353","https://openalex.org/W2096733369","https://openalex.org/W2103559027","https://openalex.org/W2133665775","https://openalex.org/W2157558673","https://openalex.org/W2180612164","https://openalex.org/W2243397390","https://openalex.org/W2765424254","https://openalex.org/W2800017313","https://openalex.org/W2909303050","https://openalex.org/W2962785568","https://openalex.org/W2963001136","https://openalex.org/W2963184668","https://openalex.org/W2963466847","https://openalex.org/W2963542245","https://openalex.org/W2963857521","https://openalex.org/W2963920068","https://openalex.org/W2969985801","https://openalex.org/W2982255332","https://openalex.org/W2998293245","https://openalex.org/W3015646845","https://openalex.org/W3082511295","https://openalex.org/W3103557498","https://openalex.org/W3107185593","https://openalex.org/W3109496323","https://openalex.org/W3110144845","https://openalex.org/W3119278161","https://openalex.org/W3125771644","https://openalex.org/W3132832816","https://openalex.org/W3159964309","https://openalex.org/W3166371453","https://openalex.org/W3174143539","https://openalex.org/W3175215793","https://openalex.org/W3177432655","https://openalex.org/W4206097581","https://openalex.org/W4287111909","https://openalex.org/W4288359148","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6682865783","https://openalex.org/W6719080892","https://openalex.org/W6736780073","https://openalex.org/W6745272055","https://openalex.org/W6746402973","https://openalex.org/W6757875967","https://openalex.org/W6761839128","https://openalex.org/W6780116240","https://openalex.org/W6788785544","https://openalex.org/W6790138817"],"related_works":["https://openalex.org/W1989039360","https://openalex.org/W2908959303","https://openalex.org/W1560697087","https://openalex.org/W1548715306","https://openalex.org/W2146295394","https://openalex.org/W2545171730","https://openalex.org/W2098994635","https://openalex.org/W2136321227","https://openalex.org/W1555987077","https://openalex.org/W2607108626"],"abstract_inverted_index":{"While":[0],"facial":[1,71,130,138],"recognition":[2],"(FR)":[3],"has":[4],"been":[5,52],"widely":[6],"used":[7],"by":[8,39,95],"businesses":[9],"and":[10,108,125,149,154],"governments":[11],"for":[12,157],"various":[13,111],"purposes,":[14],"it":[15],"gives":[16],"rise":[17],"to":[18,35,43,54,86],"privacy":[19,98,161],"concerns":[20],"once":[21],"the":[22,56,65,104,122,126,135],"consent":[23],"of":[24,67,106,128,137,151,160],"users":[25],"is":[26,84],"not":[27],"handled":[28],"properly.":[29],"Hence,":[30],"researchers":[31],"have":[32,51],"proposed":[33,53,85],"methods":[34,50,153],"evade":[36],"FR":[37,97,152],"technology":[38],"attaching":[40],"adversarial":[41,60,70,89,141],"perturbations":[42,90],"user":[44,92],"profile":[45],"images.":[46,72],"Nonetheless,":[47],"image":[48],"denoising-based":[49],"increase":[55],"model":[57],"robustness":[58,136],"over":[59],"examples.":[61],"This":[62],"paper":[63],"investigates":[64],"impact":[66,121],"transformations":[68,119],"on":[69],"In":[73],"particular,":[74],"a":[75],"simple":[76,112,118],"but":[77],"effective":[78],"framework,":[79],"TaD":[80],"(Transformations":[81],"as":[82],"Denoising),":[83],"remove":[87],"possible":[88],"from":[91],"images":[93,139],"generated":[94],"popular":[96],"protection":[99,123],"frameworks.":[100],"Extensive":[101],"evaluations":[102],"show":[103],"reliability":[105],"Fawkes":[107],"LowKey":[109],"with":[110,140],"transformations.":[113],"Experimental":[114],"results":[115,145],"indicate":[116],"that":[117],"can":[120,133],"performance,":[124],"choice":[127],"DNN-based":[129],"feature":[131],"extractors":[132],"enhance":[134],"perturbations.":[142],"The":[143],"experimental":[144],"also":[146],"demonstrate":[147],"strengths":[148],"weaknesses":[150],"give":[155],"suggestions":[156],"further":[158],"improvements":[159],"safeguard":[162],"tools.":[163]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}
