{"id":"https://openalex.org/W4406258250","doi":"https://doi.org/10.1109/tai.2025.3527923","title":"Defense Against Adversarial Faces at the Source: Strengthened Faces Based on Hidden Disturbances","display_name":"Defense Against Adversarial Faces at the Source: Strengthened Faces Based on Hidden Disturbances","publication_year":2025,"publication_date":"2025-01-10","ids":{"openalex":"https://openalex.org/W4406258250","doi":"https://doi.org/10.1109/tai.2025.3527923"},"language":"en","primary_location":{"id":"doi:10.1109/tai.2025.3527923","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2025.3527923","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Shuangliang Li","orcid":"https://orcid.org/0009-0002-4978-2296"},"institutions":[{"id":"https://openalex.org/I200845125","display_name":"Nanjing University of Information Science and Technology","ror":"https://ror.org/02y0rxk19","country_code":"CN","type":"education","lineage":["https://openalex.org/I200845125"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuangliang Li","raw_affiliation_strings":["School of Software, Nanjing University of Information Science and Technology, Nanjing, China"],"raw_orcid":"https://orcid.org/0009-0002-4978-2296","affiliations":[{"raw_affiliation_string":"School of Software, Nanjing University of Information Science and Technology, Nanjing, China","institution_ids":["https://openalex.org/I200845125"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100630403","display_name":"Jinwei Wang","orcid":"https://orcid.org/0000-0002-9366-5671"},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinwei Wang","raw_affiliation_strings":["College of Cryptology and Cyber Science, Nankai University, Tianjing, China"],"raw_orcid":"https://orcid.org/0000-0002-9366-5671","affiliations":[{"raw_affiliation_string":"College of Cryptology and Cyber Science, Nankai University, Tianjing, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070440437","display_name":"Hao Wu","orcid":"https://orcid.org/0000-0003-2324-2152"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hao Wu","raw_affiliation_strings":["State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-2324-2152","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063622836","display_name":"Jiawei Zhang","orcid":"https://orcid.org/0000-0003-1745-7763"},"institutions":[{"id":"https://openalex.org/I10535382","display_name":"Chongqing University of Posts and Telecommunications","ror":"https://ror.org/03dgaqz26","country_code":"CN","type":"education","lineage":["https://openalex.org/I10535382"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiawei Zhang","raw_affiliation_strings":["School of Cyber Security and Information Law, Chongqing University of Posts and Telecommunications, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0003-1745-7763","affiliations":[{"raw_affiliation_string":"School of Cyber Security and Information Law, Chongqing University of Posts and Telecommunications, Chongqing, China","institution_ids":["https://openalex.org/I10535382"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027019785","display_name":"Xin Cheng","orcid":"https://orcid.org/0000-0002-0570-6139"},"institutions":[{"id":"https://openalex.org/I200845125","display_name":"Nanjing University of Information Science and Technology","ror":"https://ror.org/02y0rxk19","country_code":"CN","type":"education","lineage":["https://openalex.org/I200845125"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Cheng","raw_affiliation_strings":["School of Computer Science, Nanjing University of Information Science and Technology, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-0570-6139","affiliations":[{"raw_affiliation_string":"School of Computer Science, Nanjing University of Information Science and Technology, Nanjing, China","institution_ids":["https://openalex.org/I200845125"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102018721","display_name":"Xiangyang Luo","orcid":"https://orcid.org/0000-0001-6062-2950"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiangyang Luo","raw_affiliation_strings":["State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-6062-2950","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100749734","display_name":"Bin Ma","orcid":"https://orcid.org/0000-0002-9030-7393"},"institutions":[{"id":"https://openalex.org/I152269853","display_name":"Qilu University of Technology","ror":"https://ror.org/04hyzq608","country_code":"CN","type":"education","lineage":["https://openalex.org/I152269853"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Ma","raw_affiliation_strings":["Shandong Provincial Key Laboratory of Computer Networks and Qilu University of Technology, Shangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-9030-7393","affiliations":[{"raw_affiliation_string":"Shandong Provincial Key Laboratory of Computer Networks and Qilu University of Technology, Shangdong, China","institution_ids":["https://openalex.org/I152269853"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2644,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.82260616,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"6","issue":"7","first_page":"1761","last_page":"1775"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.9897000193595886,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9688000082969666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8218930959701538},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.7785817384719849},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7469466924667358},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6581242084503174},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6261734962463379},{"id":"https://openalex.org/keywords/facial-recognition-system","display_name":"Facial recognition system","score":0.5835450291633606},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5698769688606262},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.5555670857429504},{"id":"https://openalex.org/keywords/safeguarding","display_name":"Safeguarding","score":0.4903604984283447},{"id":"https://openalex.org/keywords/gradient-descent","display_name":"Gradient descent","score":0.4584803581237793},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.43069469928741455},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.3990475535392761},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3862820267677307},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3493291735649109},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.32698988914489746}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8218930959701538},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.7785817384719849},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7469466924667358},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6581242084503174},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6261734962463379},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.5835450291633606},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5698769688606262},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.5555670857429504},{"id":"https://openalex.org/C2776743756","wikidata":"https://www.wikidata.org/wiki/Q5097921","display_name":"Safeguarding","level":2,"score":0.4903604984283447},{"id":"https://openalex.org/C153258448","wikidata":"https://www.wikidata.org/wiki/Q1199743","display_name":"Gradient descent","level":3,"score":0.4584803581237793},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.43069469928741455},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3990475535392761},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3862820267677307},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3493291735649109},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.32698988914489746},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C159110408","wikidata":"https://www.wikidata.org/wiki/Q121176","display_name":"Nursing","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tai.2025.3527923","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2025.3527923","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1036700179","display_name":null,"funder_award_id":"BK20200750","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"},{"id":"https://openalex.org/G3291271152","display_name":null,"funder_award_id":"U1804263","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4899784454","display_name":"\u5f69\u8272\u56fe\u50cf\u7684\u8d85\u590d\u6570\u6df1\u5ea6\u53d6\u8bc1\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"62072250","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5582996192","display_name":"\u9762\u5411\u4f4e\u6982\u7387\u6545\u969c\u8fc7\u7a0b\u7684\u591a\u53d8\u91cf\u63a7\u5236\u56fe\u7edf\u8ba1\u548c\u7ecf\u6d4e\u8bbe\u8ba1\u7814\u7a76","funder_award_id":"71802110","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5706494817","display_name":null,"funder_award_id":"U20B2065","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G699590998","display_name":null,"funder_award_id":"61872203","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7798291704","display_name":null,"funder_award_id":"62172435","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8147635778","display_name":null,"funder_award_id":"61802212","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W1509966554","https://openalex.org/W1522301498","https://openalex.org/W1673923490","https://openalex.org/W1686810756","https://openalex.org/W1782590233","https://openalex.org/W1945616565","https://openalex.org/W2096733369","https://openalex.org/W2160815625","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2302255633","https://openalex.org/W2327501763","https://openalex.org/W2535873859","https://openalex.org/W2607219512","https://openalex.org/W2618492571","https://openalex.org/W2774644650","https://openalex.org/W2775795276","https://openalex.org/W2783482415","https://openalex.org/W2962710014","https://openalex.org/W2962759300","https://openalex.org/W2962898354","https://openalex.org/W2963001136","https://openalex.org/W2963384482","https://openalex.org/W2963431851","https://openalex.org/W2963448658","https://openalex.org/W2963466847","https://openalex.org/W2963542245","https://openalex.org/W2963744840","https://openalex.org/W2963857521","https://openalex.org/W2963920068","https://openalex.org/W2963976704","https://openalex.org/W2964082701","https://openalex.org/W2969542116","https://openalex.org/W2969664989","https://openalex.org/W2969985801","https://openalex.org/W2981597369","https://openalex.org/W3096831136","https://openalex.org/W3102720581","https://openalex.org/W3105009650","https://openalex.org/W3119391778","https://openalex.org/W3173324345","https://openalex.org/W3189402954","https://openalex.org/W3193394794","https://openalex.org/W4226030132","https://openalex.org/W4291653574","https://openalex.org/W4293846201","https://openalex.org/W4307823382","https://openalex.org/W4312937923","https://openalex.org/W4323338672","https://openalex.org/W4380607097"],"related_works":["https://openalex.org/W4288055406","https://openalex.org/W4200630034","https://openalex.org/W3137894200","https://openalex.org/W3092178728","https://openalex.org/W4226402597","https://openalex.org/W3132910851","https://openalex.org/W4377864639","https://openalex.org/W4409346678","https://openalex.org/W4392340763","https://openalex.org/W2997056298"],"abstract_inverted_index":{"Face":[0],"Recognition":[1],"(FR)":[2],"systems,":[3],"while":[4,62],"widely":[5],"used":[6],"across":[7,157],"various":[8],"sectors,":[9],"are":[10],"vulnerable":[11],"to":[12,25,81,100],"adversarial":[13,39,116,129],"attacks,":[14],"particularly":[15],"those":[16],"based":[17],"on":[18],"deep":[19],"neural":[20],"networks.":[21],"Despite":[22],"existing":[23],"efforts":[24],"enhance":[26],"the":[27,35,70,73,90,102,110,121,133],"robustness":[28],"of":[29,37,106,123,135,153],"FR":[30,64,136],"models,":[31],"they":[32],"still":[33],"face":[34,57,75,87,139],"risk":[36],"secondary":[38,67],"attacks.":[40,68,117],"To":[41],"address":[42],"this,":[43],"we":[44,93],"propose":[45,94],"a":[46],"novel":[47],"approach":[48],"employing":[49],"\u201cstrengthened":[50],"face\u201d":[51],"with":[52],"preemptive":[53],"defensive":[54],"perturbations.":[55],"Strengthened":[56],"ensures":[58],"original":[59],"recognition":[60],"accuracy":[61],"safeguarding":[63],"systems":[65],"against":[66,114,128],"In":[69],"white-box":[71],"scenario,":[72,92],"strengthened":[74,107,124],"utilizes":[76],"gradient-based":[77],"and":[78,112],"optimization-based":[79],"methods":[80],"minimize":[82],"feature":[83],"representation":[84],"differences":[85],"between":[86],"pairs.":[88],"For":[89],"black-box":[91],"Shielded":[95],"Gradient":[96],"Sign":[97],"Descent":[98],"(SGSD)":[99],"optimize":[101],"gradient":[103],"update":[104],"direction":[105],"faces,":[108],"ensuring":[109],"transferability":[111,156],"effectiveness":[113],"unknown":[115],"Experimental":[118],"results":[119],"demonstrate":[120],"efficacy":[122],"faces":[125,130],"in":[126,155],"defending":[127],"without":[131],"compromising":[132],"performance":[134,151],"models":[137],"or":[138],"image":[140],"visual":[141],"quality.":[142],"Moreover,":[143],"SGSD":[144],"outperforms":[145],"conventional":[146],"methods,":[147],"achieving":[148],"an":[149],"average":[150],"improvement":[152],"4%":[154],"different":[158],"attack":[159],"intensities.":[160]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}