{"id":"https://openalex.org/W4361802097","doi":"https://doi.org/10.1109/tifs.2023.3262156","title":"Information-Containing Adversarial Perturbation for Combating Facial Manipulation Systems","display_name":"Information-Containing Adversarial Perturbation for Combating Facial Manipulation Systems","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4361802097","doi":"https://doi.org/10.1109/tifs.2023.3262156"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2023.3262156","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3262156","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101567069","display_name":"Yao Zhu","orcid":"https://orcid.org/0000-0003-0991-1970"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yao Zhu","raw_affiliation_strings":["College of Biomedical Engineering and Instrument Science, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-0991-1970","affiliations":[{"raw_affiliation_string":"College of Biomedical Engineering and Instrument Science, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039044021","display_name":"Yuefeng Chen","orcid":"https://orcid.org/0000-0001-9027-3421"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]},{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuefeng Chen","raw_affiliation_strings":["College of Biomedical Engineering and Instrument Science, Zhejiang University, Hangzhou, China","Security Department, Alibaba Group, Hangzhou, China","Security Department of Alibaba Group, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-9027-3421","affiliations":[{"raw_affiliation_string":"College of Biomedical Engineering and Instrument Science, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"Security Department, Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]},{"raw_affiliation_string":"Security Department of Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100433314","display_name":"Xiaodan Li","orcid":"https://orcid.org/0000-0002-5025-4805"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaodan Li","raw_affiliation_strings":["Security Department, Alibaba Group, Hangzhou, China","Security Department of Alibaba Group, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5025-4805","affiliations":[{"raw_affiliation_string":"Security Department, Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]},{"raw_affiliation_string":"Security Department of Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100451786","display_name":"Rong Zhang","orcid":"https://orcid.org/0000-0002-2288-2847"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rong Zhang","raw_affiliation_strings":["Security Department, Alibaba Group, Hangzhou, China","Security Department of Alibaba Group, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-2288-2847","affiliations":[{"raw_affiliation_string":"Security Department, Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]},{"raw_affiliation_string":"Security Department of Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102008887","display_name":"Xiang Tian","orcid":"https://orcid.org/0000-0003-0735-8454"},"institutions":[{"id":"https://openalex.org/I4210141176","display_name":"Communication University of Zhejiang","ror":"https://ror.org/04t7gxr16","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210141176"]},{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang Tian","raw_affiliation_strings":["College of Biomedical Engineering and Instrument Science, Zhejiang University, Hangzhou, China","Zhejiang Provincial Key Laboratory for Network Multimedia Technologies, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-0735-8454","affiliations":[{"raw_affiliation_string":"College of Biomedical Engineering and Instrument Science, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"Zhejiang Provincial Key Laboratory for Network Multimedia Technologies, Hangzhou, China","institution_ids":["https://openalex.org/I4210141176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063699066","display_name":"Bolun Zheng","orcid":"https://orcid.org/0000-0001-8788-1725"},"institutions":[{"id":"https://openalex.org/I4210141176","display_name":"Communication University of Zhejiang","ror":"https://ror.org/04t7gxr16","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210141176"]},{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bolun Zheng","raw_affiliation_strings":["Zhejiang Provincial Key Laboratory for Network Multimedia Technologies, Hangzhou, China","School of Automation, Hangzhou Dianzi University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-8788-1725","affiliations":[{"raw_affiliation_string":"Zhejiang Provincial Key Laboratory for Network Multimedia Technologies, Hangzhou, China","institution_ids":["https://openalex.org/I4210141176"]},{"raw_affiliation_string":"School of Automation, Hangzhou Dianzi University, Hangzhou, China","institution_ids":["https://openalex.org/I50760025"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008526350","display_name":"Yaowu Chen","orcid":"https://orcid.org/0000-0002-6037-0631"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]},{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yaowu Chen","raw_affiliation_strings":["College of Biomedical Engineering and Instrument Science, Zhejiang University, Hangzhou, China","Security Department, Alibaba Group, Hangzhou, China","Zhejiang University Embedded System Engineering Research Center, Ministry of Education of China, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-6037-0631","affiliations":[{"raw_affiliation_string":"College of Biomedical Engineering and Instrument Science, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"Security Department, Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]},{"raw_affiliation_string":"Zhejiang University Embedded System Engineering Research Center, Ministry of Education of China, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.3117,"has_fulltext":false,"cited_by_count":25,"citation_normalized_percentile":{"value":0.93533945,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"18","issue":null,"first_page":"2046","last_page":"2059"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8591853380203247},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6962195634841919},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6009727716445923},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5772749781608582},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.5310226678848267}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8591853380203247},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6962195634841919},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6009727716445923},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5772749781608582},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.5310226678848267},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2023.3262156","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3262156","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6200000047683716,"display_name":"Gender equality","id":"https://metadata.un.org/sdg/5"}],"awards":[{"id":"https://openalex.org/G5389520754","display_name":"\u8111\u8bb0\u5fc6\u9a71\u52a8\u7684\u591a\u6a21\u534f\u540c\u5b66\u4e60\u7406\u8bba\u548c\u65b9\u6cd5","funder_award_id":"LDT23F01013F01","funder_id":"https://openalex.org/F4320338464","funder_display_name":"Natural Science Foundation of Zhejiang Province"},{"id":"https://openalex.org/G7946490163","display_name":null,"funder_award_id":"2020AAA0140000","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null},{"id":"https://openalex.org/F4320338464","display_name":"Natural Science Foundation of Zhejiang Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":64,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W1834627138","https://openalex.org/W2073942619","https://openalex.org/W2084498688","https://openalex.org/W2133665775","https://openalex.org/W2141143336","https://openalex.org/W2164413944","https://openalex.org/W2194775991","https://openalex.org/W2301937176","https://openalex.org/W2558151185","https://openalex.org/W2604721644","https://openalex.org/W2883233582","https://openalex.org/W2911424785","https://openalex.org/W2914447220","https://openalex.org/W2917583897","https://openalex.org/W2962770929","https://openalex.org/W2962785568","https://openalex.org/W2962793481","https://openalex.org/W2963767194","https://openalex.org/W2981988113","https://openalex.org/W2982163850","https://openalex.org/W2997517962","https://openalex.org/W3000442796","https://openalex.org/W3015646845","https://openalex.org/W3021344608","https://openalex.org/W3034196597","https://openalex.org/W3034500918","https://openalex.org/W3035063907","https://openalex.org/W3067169454","https://openalex.org/W3081492798","https://openalex.org/W3092709185","https://openalex.org/W3099363577","https://openalex.org/W3101631197","https://openalex.org/W3110144845","https://openalex.org/W3112848342","https://openalex.org/W3113824005","https://openalex.org/W3116818516","https://openalex.org/W3127084502","https://openalex.org/W3154331786","https://openalex.org/W3158530087","https://openalex.org/W3164572690","https://openalex.org/W3175906703","https://openalex.org/W3176101515","https://openalex.org/W3176241004","https://openalex.org/W3176406820","https://openalex.org/W3176913662","https://openalex.org/W3191630110","https://openalex.org/W3193750732","https://openalex.org/W3196878101","https://openalex.org/W3200491672","https://openalex.org/W3206071277","https://openalex.org/W4205302377","https://openalex.org/W4293846201","https://openalex.org/W4311415873","https://openalex.org/W6621378261","https://openalex.org/W6631190155","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6685014904","https://openalex.org/W6729756640","https://openalex.org/W6745560452","https://openalex.org/W6755405303","https://openalex.org/W6762931180","https://openalex.org/W6766639543"],"related_works":["https://openalex.org/W2755342338","https://openalex.org/W2058170566","https://openalex.org/W2036807459","https://openalex.org/W2775347418","https://openalex.org/W1969923398","https://openalex.org/W2166024367","https://openalex.org/W2772917594","https://openalex.org/W3116076068","https://openalex.org/W2229312674","https://openalex.org/W2079911747"],"abstract_inverted_index":{"With":[0],"the":[1,7,22,25,69,108,114,169,200,203,207,229,232,247,250,260],"development":[2],"of":[3,24,38,116,231],"deep":[4],"learning":[5],"technology,":[6],"facial":[8,27,60,100,137,146,161,204,235,261],"manipulation":[9,101,162,262],"system":[10],"has":[11],"become":[12],"powerful":[13],"and":[14,34,48,148,184,257],"easy":[15],"to":[16,45,56,66,98,143,152,164,181,198,220,223],"use.":[17],"Such":[18],"systems":[19,40,102,163],"can":[20,81,104,158,245],"modify":[21],"attributes":[23],"given":[26],"images,":[28],"such":[29,39],"as":[30],"hair":[31],"color,":[32],"gender,":[33],"age.":[35],"Malicious":[36],"applications":[37],"pose":[41],"a":[42,121,145,153,175,190,216],"serious":[43],"threat":[44],"individuals\u2019":[46],"privacy":[47],"reputation.":[49],"Existing":[50],"studies":[51],"have":[52],"proposed":[53,243],"various":[54],"approaches":[55],"protect":[57,89],"images":[58,90,97,205],"against":[59,234],"manipulations.":[61],"Passive":[62],"defense":[63,87],"methods":[64,88],"aim":[65],"detect":[67],"whether":[68,107],"face":[70],"is":[71,110,195],"real":[72],"or":[73],"fake,":[74],"which":[75,131,157],"works":[76],"for":[77,136],"posterior":[78],"forensics":[79],"but":[80,103],"not":[82,105],"prevent":[83],"malicious":[84],"manipulation.":[85,236],"Initiative":[86],"upfront":[91],"by":[92],"injecting":[93],"adversarial":[94,155,172,251],"perturbations":[95],"into":[96],"disrupt":[99,159,259],"identify":[106],"image":[109,147,186],"fake.":[111],"To":[112],"address":[113],"limitation":[115],"existing":[117],"methods,":[118],"we":[119,214],"propose":[120,215],"novel":[122],"two-tier":[123],"protection":[124,135],"method":[125,219],"named":[126],"Information-containing":[127],"Adversarial":[128],"Perturbation":[129],"(IAP),":[130],"provides":[132],"more":[133,196],"comprehensive":[134],"images.":[138],"We":[139,188],"use":[140],"an":[141],"encoder":[142],"map":[144],"its":[149],"identity":[150],"message":[151,170,233],"cross-model":[154],"example":[156],"multiple":[160],"achieve":[165],"initiative":[166],"protection.":[167],"Recovering":[168],"in":[171],"examples":[173,252],"with":[174,253],"decoder":[176],"serves":[177],"passive":[178],"protection,":[179],"contributing":[180],"provenance":[182],"tracking":[183],"fake":[185],"detection.":[187],"introduce":[189],"feature-level":[191],"correlation":[192],"measurement":[193],"that":[194,241],"suitable":[197],"measure":[199],"difference":[201],"between":[202],"than":[206],"commonly":[208],"used":[209],"mean":[210],"squared":[211],"error.":[212],"Moreover,":[213],"spectral":[217],"diffusion":[218],"spread":[221],"messages":[222,248],"different":[224],"frequency":[225],"channels,":[226],"thereby":[227],"improving":[228],"robustness":[230],"Extensive":[237],"experimental":[238],"results":[239],"demonstrate":[240],"our":[242],"IAP":[244],"recover":[246],"from":[249],"high":[254],"average":[255],"accuracy":[256],"effectively":[258],"systems.":[263]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":11}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}