{"id":"https://openalex.org/W4224322083","doi":"https://doi.org/10.1145/3510548.3519369","title":"Adversarial Robustness is Not Enough","display_name":"Adversarial Robustness is Not Enough","publication_year":2022,"publication_date":"2022-04-18","ids":{"openalex":"https://openalex.org/W4224322083","doi":"https://doi.org/10.1145/3510548.3519369"},"language":"en","primary_location":{"id":"doi:10.1145/3510548.3519369","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3510548.3519369","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM on International Workshop on Security and Privacy Analytics","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031359796","display_name":"Sander Joos","orcid":"https://orcid.org/0000-0001-9292-6449"},"institutions":[{"id":"https://openalex.org/I4210114974","display_name":"IMEC","ror":"https://ror.org/02kcbn207","country_code":"BE","type":"nonprofit","lineage":["https://openalex.org/I4210114974"]},{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Sander Joos","raw_affiliation_strings":["imec-DistriNet, KU Leuven, Leuven, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"imec-DistriNet, KU Leuven, Leuven, Belgium","institution_ids":["https://openalex.org/I4210114974","https://openalex.org/I99464096"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071615327","display_name":"Tim Van hamme","orcid":"https://orcid.org/0000-0003-0366-4470"},"institutions":[{"id":"https://openalex.org/I4210114974","display_name":"IMEC","ror":"https://ror.org/02kcbn207","country_code":"BE","type":"nonprofit","lineage":["https://openalex.org/I4210114974"]},{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Tim Van hamme","raw_affiliation_strings":["imec-DistriNet, KU Leuven, Leuven, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"imec-DistriNet, KU Leuven, Leuven, Belgium","institution_ids":["https://openalex.org/I4210114974","https://openalex.org/I99464096"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069939159","display_name":"Davy Preuveneers","orcid":"https://orcid.org/0000-0001-6279-4430"},"institutions":[{"id":"https://openalex.org/I4210114974","display_name":"IMEC","ror":"https://ror.org/02kcbn207","country_code":"BE","type":"nonprofit","lineage":["https://openalex.org/I4210114974"]},{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Davy Preuveneers","raw_affiliation_strings":["imec-DistriNet, KU Leuven, Leuven, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"imec-DistriNet, KU Leuven, Leuven, Belgium","institution_ids":["https://openalex.org/I4210114974","https://openalex.org/I99464096"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054031138","display_name":"Wouter Joosen","orcid":"https://orcid.org/0000-0002-7710-5092"},"institutions":[{"id":"https://openalex.org/I4210114974","display_name":"IMEC","ror":"https://ror.org/02kcbn207","country_code":"BE","type":"nonprofit","lineage":["https://openalex.org/I4210114974"]},{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Wouter Joosen","raw_affiliation_strings":["imec-DistriNet, KU Leuven, Leuven, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"imec-DistriNet, KU Leuven, Leuven, Belgium","institution_ids":["https://openalex.org/I4210114974","https://openalex.org/I99464096"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2","last_page":"12"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12268","display_name":"Deception detection and forensic psychology","score":0.9686999917030334,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9595999717712402,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8655247092247009},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8417497873306274},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7216920256614685},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5248669981956482},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4454869031906128},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3734740614891052}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8655247092247009},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8417497873306274},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7216920256614685},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5248669981956482},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4454869031906128},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3734740614891052},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3510548.3519369","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3510548.3519369","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM on International Workshop on Security and Privacy Analytics","raw_type":"proceedings-article"},{"id":"pmh:oai:lirias2repo.kuleuven.be:20.500.12942/694883","is_oa":false,"landing_page_url":"https://lirias.kuleuven.be/bitstream/20.500.12942/694883/3/IWSPA_22_Adversarial_robustness_is_not_enough__practical_limitations_for_securing_facial_authentication.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S7407055369","display_name":"Lirias","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"8th ACM International Workshop on Security and Privacy Analytics (IWSPA 2022), MD, Baltimore, USA, 27 April 2022","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7799999713897705,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W1608718905","https://openalex.org/W2096733369","https://openalex.org/W2194775991","https://openalex.org/W2341528187","https://openalex.org/W2520774990","https://openalex.org/W2535873859","https://openalex.org/W2783301790","https://openalex.org/W2797558164","https://openalex.org/W2962898354","https://openalex.org/W2963265635","https://openalex.org/W2963839617","https://openalex.org/W2964082701","https://openalex.org/W2969985801","https://openalex.org/W2989013751","https://openalex.org/W3006711782","https://openalex.org/W3101998545","https://openalex.org/W3103367901","https://openalex.org/W3144035815","https://openalex.org/W4233655449"],"related_works":["https://openalex.org/W4303857474","https://openalex.org/W4311734044","https://openalex.org/W3035729345","https://openalex.org/W3193857078","https://openalex.org/W4306177400","https://openalex.org/W4312741812","https://openalex.org/W4287549955","https://openalex.org/W2952919291","https://openalex.org/W3114774860","https://openalex.org/W3203565254"],"abstract_inverted_index":{"The":[0,72],"current":[1],"body":[2],"of":[3,38,44,75,101,126,132,191,202,206,215,223],"work":[4],"on":[5,64],"adversarial":[6,15,52,137,150,171,224,241],"robustness":[7,13,40,87,109,203,225],"seems":[8],"to":[9,18,90,98,120,143,148,155,173,211,234],"imply":[10],"that":[11,27,107,139,152,162,196,220],"theoretical":[12],"against":[14],"examples":[16,138,151],"leads":[17],"more":[19,192,229],"secure":[20,93],"systems.":[21],"In":[22],"this":[23,28,76],"paper":[24,77],"we":[25,232],"demonstrate":[26],"premise":[29],"is":[30,78],"erroneous":[31],"by":[32,68],"assessing":[33],"the":[34,65,69,144,156,189,213,221],"strengths":[35],"and":[36,81,115,186,226],"limitations":[37,214],"prominent":[39,86],"methods":[41,88,110],"in":[42,204],"light":[43,205],"facial":[45,127,133,207],"authentication,":[46],"a":[47,55,61,92,244],"realistic":[48],"use":[49],"case":[50],"where":[51,240],"perturbations":[53,172,242],"pose":[54,243],"real":[56],"threat,":[57],"which":[58],"allows":[59],"for":[60,122,182],"natural":[62],"reflection":[63,83],"security":[66,227,245],"gained":[67],"obtained":[70],"robustness.":[71,103],"main":[73],"contribution":[74],"an":[79,160],"evaluation":[80,201],"critical":[82],"upon":[84],"why":[85],"fail":[89],"deliver":[91],"system":[94],"despite":[95],"living":[96],"up":[97],"their":[99,175],"promises":[100],"adding":[102],"Our":[104,199],"analysis":[105],"shows":[106],"state-of-the-art":[108],"such":[111],"as":[112,146],"Adversarial":[113],"Training":[114],"Guided":[116],"Complement":[117],"Entropy":[118],"struggle":[119],"accommodate":[121],"two":[123],"key":[124],"requirements":[125],"authentication:":[128],"(1)~the":[129],"threat":[130],"model":[131],"authentication":[134,208],"assumes":[135],"physical":[136],"can":[140,163],"be":[141],"added":[142],"scene":[145],"opposed":[147],"\"classical\"":[149],"are":[153,179,228],"applied":[154],"digital":[157,166],"input.":[158],"Moreover,":[159],"attacker":[161],"directly":[164],"perturb":[165],"input,":[167],"does":[168],"not":[169],"require":[170],"impersonate":[174],"victim;":[176],"(2)~robustness":[177],"properties":[178],"only":[180],"validated":[181],"standard":[183],"classification":[184],"problems,":[185],"often":[187],"ignore":[188],"impact":[190],"practical":[193],"training":[194],"paradigms":[195],"re-purpose":[197],"models.":[198],"extensive":[200],"allowed":[209],"us":[210],"pinpoint":[212],"these":[216],"methods.":[217],"To":[218],"ensure":[219],"concepts":[222],"tightly":[230],"coupled,":[231],"recommend":[233],"evaluate":[235],"new":[236],"defences":[237],"with":[238],"applications":[239],"threat.":[246]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}