{"id":"https://openalex.org/W4323338672","doi":"https://doi.org/10.1109/tai.2023.3253083","title":"Crafting Transferable Adversarial Examples Against Face Recognition via Gradient Eroding","display_name":"Crafting Transferable Adversarial Examples Against Face Recognition via Gradient Eroding","publication_year":2023,"publication_date":"2023-03-06","ids":{"openalex":"https://openalex.org/W4323338672","doi":"https://doi.org/10.1109/tai.2023.3253083"},"language":"en","primary_location":{"id":"doi:10.1109/tai.2023.3253083","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2023.3253083","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029867593","display_name":"Huipeng Zhou","orcid":"https://orcid.org/0000-0002-4840-6558"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Huipeng Zhou","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-4840-6558","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100455413","display_name":"Yajie Wang","orcid":"https://orcid.org/0000-0002-0962-4464"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yajie Wang","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0962-4464","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003198271","display_name":"Yu\u2010an Tan","orcid":"https://orcid.org/0000-0001-6404-8853"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu-an Tan","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6404-8853","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090304311","display_name":"Shangbo Wu","orcid":"https://orcid.org/0000-0002-0737-7420"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shangbo Wu","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0737-7420","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101756800","display_name":"Yuhang Zhao","orcid":"https://orcid.org/0000-0002-9598-5687"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuhang Zhao","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9598-5687","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017675981","display_name":"Quanxin Zhang","orcid":"https://orcid.org/0000-0002-5094-7388"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Quanxin Zhang","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-5094-7388","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026287089","display_name":"Yuanzhang Li","orcid":"https://orcid.org/0000-0002-1931-366X"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuanzhang Li","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1931-366X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5029867593"],"corresponding_institution_ids":["https://openalex.org/I125839683"],"apc_list":null,"apc_paid":null,"fwci":0.852,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.7756863,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"5","issue":"1","first_page":"412","last_page":"419"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.9796000123023987,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8203380703926086},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.6294103264808655},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4844474792480469},{"id":"https://openalex.org/keywords/facial-recognition-system","display_name":"Facial recognition system","score":0.41701316833496094},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.402351975440979},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.32706648111343384},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.3225405812263489},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.24410492181777954},{"id":"https://openalex.org/keywords/sociology","display_name":"Sociology","score":0.23414114117622375}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8203380703926086},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.6294103264808655},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4844474792480469},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.41701316833496094},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.402351975440979},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.32706648111343384},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.3225405812263489},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.24410492181777954},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.23414114117622375},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tai.2023.3253083","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2023.3253083","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3814875541","display_name":null,"funder_award_id":"U1936218","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6454313764","display_name":null,"funder_award_id":"62072037","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W1509966554","https://openalex.org/W2038952578","https://openalex.org/W2060451775","https://openalex.org/W2096733369","https://openalex.org/W2168572310","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2408141691","https://openalex.org/W2543927648","https://openalex.org/W2570685808","https://openalex.org/W2765424254","https://openalex.org/W2774644650","https://openalex.org/W2787970001","https://openalex.org/W2795727551","https://openalex.org/W2896078964","https://openalex.org/W2962847335","https://openalex.org/W2962898354","https://openalex.org/W2963542245","https://openalex.org/W2963976704","https://openalex.org/W2969542116","https://openalex.org/W2969985801","https://openalex.org/W2997583194","https://openalex.org/W3040853377","https://openalex.org/W3096750792","https://openalex.org/W3097096317","https://openalex.org/W3103557498","https://openalex.org/W3110012676","https://openalex.org/W3167407409","https://openalex.org/W3184701780","https://openalex.org/W3189402954","https://openalex.org/W3215147048","https://openalex.org/W4200088049","https://openalex.org/W4226210732","https://openalex.org/W4246193833","https://openalex.org/W4287094557","https://openalex.org/W4293062122","https://openalex.org/W4293761272","https://openalex.org/W4304782753","https://openalex.org/W6630649318","https://openalex.org/W6637162671","https://openalex.org/W6637373629","https://openalex.org/W6638046521","https://openalex.org/W6640425456","https://openalex.org/W6714069269","https://openalex.org/W6731927902","https://openalex.org/W6739868092","https://openalex.org/W6748406123","https://openalex.org/W6768366551","https://openalex.org/W6780245556","https://openalex.org/W6798883673"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119","https://openalex.org/W2098693229","https://openalex.org/W2384651879"],"abstract_inverted_index":{"In":[0],"recent":[1],"years,":[2],"deep":[3],"neural":[4],"networks":[5],"(DNNs)":[6],"have":[7,17],"made":[8],"significant":[9],"progress":[10],"on":[11,36,78],"face":[12],"recognition":[13],"(FR).":[14],"However,":[15],"DNNs":[16],"been":[18],"found":[19],"to":[20,23,27,51,126],"be":[21,122],"vulnerable":[22],"adversarial":[24,41,72,92,109,112],"examples,":[25],"leading":[26],"fatal":[28],"consequences":[29],"in":[30,101],"real-world":[31],"applications.":[32],"This":[33],"article":[34],"focuses":[35],"improving":[37],"the":[38,53,56,63,89,117],"transferability":[39,90],"of":[40,55,91,119,142],"examples":[42,113],"against":[43,94],"FR":[44,95,135],"models.":[45,96],"We":[46,66],"propose":[47,68],"gradient":[48,54],"eroding":[49,62],"(GE)":[50],"make":[52],"residual":[57],"blocks":[58],"more":[59],"diverse,":[60],"by":[61,115,124],"back-propagation":[64],"dynamically.":[65],"also":[67],"a":[69,138],"novel":[70],"black-box":[71,106],"attack":[73,76,130],"named":[74],"corrasion":[75,129],"based":[77],"GE.":[79],"Extensive":[80],"experiments":[81],"demonstrate":[82],"that":[83],"our":[84],"approach":[85,98],"can":[86,121],"effectively":[87],"improve":[88],"attacks":[93],"Our":[97],"overperforms":[99],"29.35%":[100],"fooling":[102,140],"rate":[103,141],"than":[104],"state-of-the-art":[105],"attacks.":[107],"Leveraging":[108],"training":[110],"with":[111],"generated":[114],"us,":[116],"robustness":[118],"models":[120],"improved":[123],"up":[125],"43.2%.":[127],"Besides,":[128],"successfully":[131],"breaks":[132],"two":[133],"online":[134],"systems,":[136],"achieving":[137],"highest":[139],"89.8%.":[143]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}