{"id":"https://openalex.org/W4403780698","doi":"https://doi.org/10.1145/3664647.3681440","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","display_name":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","publication_year":2024,"publication_date":"2024-10-26","ids":{"openalex":"https://openalex.org/W4403780698","doi":"https://doi.org/10.1145/3664647.3681440"},"language":"en","primary_location":{"id":"doi:10.1145/3664647.3681440","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3664647.3681440","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 32nd ACM International Conference on Multimedia","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014365121","display_name":"Fengfan Zhou","orcid":"https://orcid.org/0000-0002-1117-1126"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Fengfan Zhou","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031210225","display_name":"Qianyu Zhou","orcid":"https://orcid.org/0000-0002-5331-050X"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qianyu Zhou","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110764613","display_name":"Bangjie Yin","orcid":"https://orcid.org/0000-0002-7825-943X"},"institutions":[{"id":"https://openalex.org/I4210088738","display_name":"Wanfang Data (China)","ror":"https://ror.org/00502tg50","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210088738","https://openalex.org/I4210120069","https://openalex.org/I4210127390"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bangjie Yin","raw_affiliation_strings":["Shanghai Shizhuang Information Technology Co., Ltd, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Shanghai Shizhuang Information Technology Co., Ltd, Shanghai, China","institution_ids":["https://openalex.org/I4210088738"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050096231","display_name":"Harold Zheng","orcid":"https://orcid.org/0009-0006-6841-4682"},"institutions":[{"id":"https://openalex.org/I4210088738","display_name":"Wanfang Data (China)","ror":"https://ror.org/00502tg50","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210088738","https://openalex.org/I4210120069","https://openalex.org/I4210127390"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hui Zheng","raw_affiliation_strings":["Shanghai Shizhuang Information Technology Co., Ltd, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Shanghai Shizhuang Information Technology Co., Ltd, Shanghai, China","institution_ids":["https://openalex.org/I4210088738"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019288783","display_name":"Xuequan Lu","orcid":"https://orcid.org/0000-0003-0959-408X"},"institutions":[{"id":"https://openalex.org/I196829312","display_name":"La Trobe University","ror":"https://ror.org/01rxfrp27","country_code":"AU","type":"education","lineage":["https://openalex.org/I196829312"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xuequan Lu","raw_affiliation_strings":["La Trobe University, Melbourne, Australia"],"affiliations":[{"raw_affiliation_string":"La Trobe University, Melbourne, Australia","institution_ids":["https://openalex.org/I196829312"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084218062","display_name":"Lizhuang Ma","orcid":"https://orcid.org/0000-0003-1653-4341"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lizhuang Ma","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037263298","display_name":"Hefei Ling","orcid":"https://orcid.org/0000-0001-6797-7412"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hefei Ling","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5014365121"],"corresponding_institution_ids":["https://openalex.org/I47720641"],"apc_list":null,"apc_paid":null,"fwci":1.2464,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.8137996,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"2487","last_page":"2496"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10331","display_name":"Video Surveillance and Tracking Methods","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.6320044994354248},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6316038370132446},{"id":"https://openalex.org/keywords/facial-recognition-system","display_name":"Facial recognition system","score":0.5525762438774109},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5144098401069641},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2577711045742035},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.1765415072441101},{"id":"https://openalex.org/keywords/linguistics","display_name":"Linguistics","score":0.057153522968292236}],"concepts":[{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.6320044994354248},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6316038370132446},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.5525762438774109},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5144098401069641},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2577711045742035},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.1765415072441101},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.057153522968292236},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3664647.3681440","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3664647.3681440","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 32nd ACM International Conference on Multimedia","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4099999964237213,"display_name":"Gender equality","id":"https://metadata.un.org/sdg/5"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W2096733369","https://openalex.org/W2754049786","https://openalex.org/W2913668833","https://openalex.org/W2962770929","https://openalex.org/W2962898354","https://openalex.org/W2964016283","https://openalex.org/W2982232682","https://openalex.org/W2998469040","https://openalex.org/W3015646845","https://openalex.org/W3034303554","https://openalex.org/W3035693354","https://openalex.org/W3107942585","https://openalex.org/W3110144845","https://openalex.org/W3166898278","https://openalex.org/W3169129566","https://openalex.org/W3171288285","https://openalex.org/W3179647175","https://openalex.org/W3193394794","https://openalex.org/W3195059668","https://openalex.org/W3201440326","https://openalex.org/W3205621936","https://openalex.org/W3207416200","https://openalex.org/W3214186397","https://openalex.org/W3217435001","https://openalex.org/W4234552385","https://openalex.org/W4283317927","https://openalex.org/W4304092679","https://openalex.org/W4306309425","https://openalex.org/W4309951129","https://openalex.org/W4312777424","https://openalex.org/W4312937923","https://openalex.org/W4367190582","https://openalex.org/W4384518911","https://openalex.org/W4386065609","https://openalex.org/W4386065714","https://openalex.org/W4386066653","https://openalex.org/W4386076048","https://openalex.org/W4386076261","https://openalex.org/W4386076336","https://openalex.org/W4386076380","https://openalex.org/W4386081609","https://openalex.org/W4387967929","https://openalex.org/W4390871946","https://openalex.org/W4390873484","https://openalex.org/W4390889737","https://openalex.org/W4392904202","https://openalex.org/W4402727826","https://openalex.org/W4402754002"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W2384651879"],"abstract_inverted_index":{"Face":[0],"Recognition":[1],"(FR)":[2],"systems":[3],"can":[4,192],"be":[5],"easily":[6],"deceived":[7],"by":[8,166],"adversarial":[9,70,97,130,153,199,217],"examples":[10,71,98,154,200],"that":[11,66],"manipulate":[12],"benign":[13],"face":[14],"images":[15],"through":[16],"imperceptible":[17],"perturbations.":[18],"Adversarial":[19,91,120],"attacks":[20,28,78,171],"on":[21,41,53,139,172],"FR":[22,54],"encompass":[23],"two":[24],"types:":[25],"impersonation":[26,39,75,107,195],"(targeted)":[27],"and":[29,76,114,133,164],"dodging":[30,51,77,102,170,186,204],"(untargeted)":[31],"attacks.":[32],"Previous":[33],"methods":[34],"often":[35],"achieve":[36],"a":[37,49,85,189],"successful":[38,50],"attack":[40,52,87,218],"FR,":[42],"however,":[43],"it":[44],"does":[45],"not":[46],"necessarily":[47],"guarantee":[48],"in":[55],"the":[56,67,125,152,157,162,173,177,181,194,209],"black-box":[57],"setting.":[58],"In":[59],"this":[60,81],"paper,":[61],"our":[62,212],"key":[63],"insight":[64],"is":[65,148],"generation":[68],"of":[69,111,128,160,180,197,211],"should":[72],"perform":[73],"both":[74,161],"simultaneously.":[79],"To":[80],"end,":[82],"we":[83,118,191],"propose":[84,119],"novel":[86],"method":[88,213],"termed":[89],"as":[90],"Pruning":[92],"(Adv-Pruning),":[93],"to":[94,99,123,150,155],"fine-tune":[95],"existing":[96],"enhance":[100],"their":[101,106],"capabilities":[103,196],"while":[104,184,201],"preserving":[105,176],"capabilities.":[108,205],"Adv-Pruning":[109],"consists":[110],"Priming,":[112],"Pruning,":[113],"Restoration":[115],"stages.":[116],"Concretely,":[117],"Priority":[121],"Quantification":[122],"measure":[124],"region-wise":[126],"priority":[127],"original":[129,182,198],"perturbations,":[131],"identifying":[132],"releasing":[134],"those":[135],"with":[136,215],"minimal":[137],"impact":[138],"absolute":[140],"model":[141],"output":[142],"variances.":[143],"Then,":[144],"Biased":[145],"Gradient":[146],"Adaptation":[147],"presented":[149],"adapt":[151],"traverse":[156],"decision":[158],"boundaries":[159],"attacker":[163],"victim":[165],"adding":[167],"perturbations":[168,183],"favoring":[169],"vacated":[174],"regions,":[175],"prioritized":[178],"features":[179],"boosting":[185],"performance.":[187],"As":[188],"result,":[190],"maintain":[193],"effectively":[202],"enhancing":[203],"Comprehensive":[206],"experiments":[207],"demonstrate":[208],"superiority":[210],"compared":[214],"state-of-the-art":[216],"methods.":[219]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}
