{"id":"https://openalex.org/W7101416339","doi":"https://doi.org/10.1109/tifs.2025.3625635","title":"Adv-Inversion: Stealthy Adversarial Attacks via GAN-Inversion for Facial Privacy Protection","display_name":"Adv-Inversion: Stealthy Adversarial Attacks via GAN-Inversion for Facial Privacy Protection","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W7101416339","doi":"https://doi.org/10.1109/tifs.2025.3625635"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2025.3625635","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3625635","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Haobo Wang","orcid":"https://orcid.org/0000-0002-2081-156X"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haobo Wang","raw_affiliation_strings":["Guangdong Province Key Laboratory of Information Security Technology and the School of Computer Science and Engineering, Sun Yat-sen University, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-2081-156X","affiliations":[{"raw_affiliation_string":"Guangdong Province Key Laboratory of Information Security Technology and the School of Computer Science and Engineering, Sun Yat-sen University, Guangdong, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Weiqi Luo","orcid":"https://orcid.org/0000-0002-8999-6064"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiqi Luo","raw_affiliation_strings":["Guangdong Province Key Laboratory of Information Security Technology and the School of Computer Science and Engineering, Sun Yat-sen University, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-8999-6064","affiliations":[{"raw_affiliation_string":"Guangdong Province Key Laboratory of Information Security Technology and the School of Computer Science and Engineering, Sun Yat-sen University, Guangdong, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xiaohua Xie","orcid":"https://orcid.org/0000-0002-0310-4679"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaohua Xie","raw_affiliation_strings":["Guangdong Province Key Laboratory of Information Security Technology and the School of Computer Science and Engineering, Sun Yat-sen University, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-0310-4679","affiliations":[{"raw_affiliation_string":"Guangdong Province Key Laboratory of Information Security Technology and the School of Computer Science and Engineering, Sun Yat-sen University, Guangdong, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Peijia Zheng","orcid":"https://orcid.org/0000-0003-0979-8613"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peijia Zheng","raw_affiliation_strings":["Guangdong Province Key Laboratory of Information Security Technology and the School of Computer Science and Engineering, Sun Yat-sen University, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0003-0979-8613","affiliations":[{"raw_affiliation_string":"Guangdong Province Key Laboratory of Information Security Technology and the School of Computer Science and Engineering, Sun Yat-sen University, Guangdong, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Wenmin Huang","orcid":"https://orcid.org/0000-0002-6655-903X"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenmin Huang","raw_affiliation_strings":["Guangdong Province Key Laboratory of Information Security Technology and the School of Computer Science and Engineering, Sun Yat-sen University, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-6655-903X","affiliations":[{"raw_affiliation_string":"Guangdong Province Key Laboratory of Information Security Technology and the School of Computer Science and Engineering, Sun Yat-sen University, Guangdong, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"last","author":{"id":null,"display_name":"Jiwu Huang","orcid":"https://orcid.org/0000-0002-7625-5689"},"institutions":[{"id":"https://openalex.org/I4388482657","display_name":"Shenzhen MSU-BIT University","ror":"https://ror.org/02q963474","country_code":null,"type":"education","lineage":["https://openalex.org/I4388482657"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiwu Huang","raw_affiliation_strings":["Guangdong Laboratory of Machine Perception and Intelligent Computing, Faculty of Engineering, Shenzhen MSU-BIT University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-7625-5689","affiliations":[{"raw_affiliation_string":"Guangdong Laboratory of Machine Perception and Intelligent Computing, Faculty of Engineering, Shenzhen MSU-BIT University, Shenzhen, China","institution_ids":["https://openalex.org/I4388482657"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.3626,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.94504906,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"20","issue":null,"first_page":"11892","last_page":"11906"},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T13638","display_name":"Human auditory perception and evaluation","score":0.020899999886751175,"subfield":{"id":"https://openalex.org/subfields/2202","display_name":"Aerospace Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T13638","display_name":"Human auditory perception and evaluation","score":0.020899999886751175,"subfield":{"id":"https://openalex.org/subfields/2202","display_name":"Aerospace Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14335","display_name":"Educational Robotics and Engineering","score":0.018400000408291817,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13800","display_name":"Earthquake and Disaster Impact Studies","score":0.011699999682605267,"subfield":{"id":"https://openalex.org/subfields/3313","display_name":"Transportation"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8303999900817871},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6312999725341797},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.5318999886512756},{"id":"https://openalex.org/keywords/facial-recognition-system","display_name":"Facial recognition system","score":0.4986000061035156},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.49709999561309814},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.43369999527931213},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.3962000012397766},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.3919000029563904},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.388700008392334},{"id":"https://openalex.org/keywords/identity","display_name":"Identity (music)","score":0.3668000102043152}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8733000159263611},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8303999900817871},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6312999725341797},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.5318999886512756},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5049999952316284},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.4986000061035156},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.49709999561309814},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.475600004196167},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.43369999527931213},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3962000012397766},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.3919000029563904},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.388700008392334},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.3668000102043152},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.35659998655319214},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3441999852657318},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.34389999508857727},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33980000019073486},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.31439998745918274},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3131999969482422},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3111000061035156},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.3073999881744385},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.3043999969959259},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.289000004529953},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.28369998931884766},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.2827000021934509},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.27070000767707825},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.26829999685287476},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.26750001311302185},{"id":"https://openalex.org/C108801101","wikidata":"https://www.wikidata.org/wiki/Q15032","display_name":"Steganography","level":3,"score":0.267300009727478},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.260699987411499},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25839999318122864},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.25609999895095825}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3625635","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3625635","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G173065042","display_name":null,"funder_award_id":"2023B1212060026","funder_id":"https://openalex.org/F4320329883","funder_display_name":"Guangdong Province Key Laboratory of Information Security Technology"},{"id":"https://openalex.org/G2798491371","display_name":null,"funder_award_id":"2025A1515012823","funder_id":"https://openalex.org/F4320321921","funder_display_name":"Natural Science Foundation of Guangdong Province"},{"id":"https://openalex.org/G5773341303","display_name":null,"funder_award_id":"2023A1515030087","funder_id":"https://openalex.org/F4320337111","funder_display_name":"Basic and Applied Basic Research Foundation of Guangdong Province"},{"id":"https://openalex.org/G8979393200","display_name":null,"funder_award_id":"62472458","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321921","display_name":"Natural Science Foundation of Guangdong Province","ror":null},{"id":"https://openalex.org/F4320329883","display_name":"Guangdong Province Key Laboratory of Information Security Technology","ror":null},{"id":"https://openalex.org/F4320337111","display_name":"Basic and Applied Basic Research Foundation of Guangdong Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W2026254891","https://openalex.org/W2096733369","https://openalex.org/W2133665775","https://openalex.org/W2194775991","https://openalex.org/W2243397390","https://openalex.org/W2296659146","https://openalex.org/W2417915283","https://openalex.org/W2535873859","https://openalex.org/W2607219512","https://openalex.org/W2739722733","https://openalex.org/W2752782242","https://openalex.org/W2774644650","https://openalex.org/W2962770929","https://openalex.org/W2962785568","https://openalex.org/W2962847335","https://openalex.org/W2963542245","https://openalex.org/W2969542116","https://openalex.org/W2969664989","https://openalex.org/W2969985801","https://openalex.org/W2972986629","https://openalex.org/W3015646845","https://openalex.org/W3034431451","https://openalex.org/W3035574324","https://openalex.org/W3107942585","https://openalex.org/W3176913662","https://openalex.org/W3178406257","https://openalex.org/W3179647175","https://openalex.org/W3189402954","https://openalex.org/W3193394794","https://openalex.org/W3196904463","https://openalex.org/W3201878193","https://openalex.org/W3203420446","https://openalex.org/W4200559159","https://openalex.org/W4285124635","https://openalex.org/W4287825176","https://openalex.org/W4293846201","https://openalex.org/W4312688508","https://openalex.org/W4312933868","https://openalex.org/W4312937923","https://openalex.org/W4386066653","https://openalex.org/W4386076306","https://openalex.org/W4386076336","https://openalex.org/W4386299120","https://openalex.org/W4393149534","https://openalex.org/W4393159397","https://openalex.org/W4396982245","https://openalex.org/W4402623739"],"related_works":[],"abstract_inverted_index":{"With":[0],"the":[1,12,101,105,116,211],"rapid":[2],"advancement":[3],"of":[4,15,213],"deep":[5],"face":[6,161,164],"recognition":[7],"(FR)":[8],"systems,":[9],"concerns":[10],"over":[11,91],"unauthorized":[13],"use":[14],"facial":[16,70],"data":[17],"have":[18,25],"become":[19],"increasingly":[20],"serious.":[21],"Although":[22],"adversarial":[23,66,89,97,203],"attacks":[24,90],"been":[26],"employed":[27],"to":[28,87],"obscure":[29],"identity":[30],"information":[31],"and":[32,50,64,113,137,163,167,182,193],"protect":[33],"user":[34],"privacy,":[35],"existing":[36],"methods":[37,178],"often":[38],"struggle":[39],"with":[40],"degraded":[41],"visual":[42,194],"quality,":[43],"low":[44],"success":[45,144,191],"rates":[46],"in":[47,179,189],"black-box":[48,142],"attacks,":[49],"dependence":[51],"on":[52,159],"identity-specific":[53,119,131,183],"training.":[54,120],"To":[55],"overcome":[56],"these":[57],"limitations,":[58],"we":[59,122],"introduce":[60,123],"Adv-Inversion,":[61],"a":[62,82],"novel":[63],"stealthy":[65],"attack":[67,111,143,190],"technique":[68],"for":[69,118,130],"privacy":[71],"protection.":[72],"Our":[73,217],"approach":[74],"leverages":[75],"an":[76,124,146],"encoder-based":[77],"GAN":[78],"inversion":[79],"framework,":[80],"incorporating":[81],"redesigned":[83],"feature":[84,102],"style":[85],"encoder":[86],"prioritize":[88],"traditional":[92],"editing":[93],"tasks.":[94],"By":[95],"embedding":[96],"perturbations":[98],"iteratively":[99],"into":[100],"tensor":[103],"space,":[104],"method":[106],"ensures":[107],"high":[108],"imperceptibility,":[109],"robust":[110],"transferability,":[112],"flexibility":[114],"without":[115],"need":[117],"Additionally,":[121],"Identity":[125],"Prior":[126],"Feature":[127],"Fusion":[128],"Module":[129],"scenarios,":[132,185],"enabling":[133],"alignment":[134],"between":[135],"reconstructed":[136],"target":[138],"faces":[139],"while":[140,197],"enhancing":[141],"through":[145],"ensemble":[147],"training":[148,184],"strategy.":[149],"Extensive":[150],"experiments":[151],"across":[152],"two":[153,168],"datasets,":[154],"four":[155],"open-source":[156],"FR":[157,170],"models":[158],"both":[160,180],"verification":[162],"identification":[165],"tasks,":[166],"commercial":[169],"APIs":[171],"demonstrate":[172],"that":[173],"Adv-Inversion":[174],"significantly":[175],"outperforms":[176],"related":[177],"identity-free":[181],"achieving":[186],"state-of-the-art":[187],"results":[188],"rate":[192],"quality":[195],"metrics,":[196],"also":[198],"exhibiting":[199],"robustness":[200],"against":[201],"common":[202],"defense":[204],"methods.":[205],"Multiple":[206],"ablation":[207],"studies":[208],"further":[209],"confirm":[210],"effectiveness":[212],"our":[214],"model":[215],"design.":[216],"code":[218],"is":[219],"available":[220],"at.":[221]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-28T00:00:00"}