{"id":"https://openalex.org/W3011747062","doi":"https://doi.org/10.2478/popets-2021-0032","title":"Face-Off: Adversarial Face Obfuscation","display_name":"Face-Off: Adversarial Face Obfuscation","publication_year":2021,"publication_date":"2021-01-29","ids":{"openalex":"https://openalex.org/W3011747062","doi":"https://doi.org/10.2478/popets-2021-0032","mag":"3011747062"},"language":"en","primary_location":{"id":"doi:10.2478/popets-2021-0032","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2021-0032","pdf_url":"https://www.sciendo.com/pdf/10.2478/popets-2021-0032","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://www.sciendo.com/pdf/10.2478/popets-2021-0032","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009092703","display_name":"Varun Chandrasekaran","orcid":"https://orcid.org/0000-0003-0661-6378"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Varun Chandrasekaran","raw_affiliation_strings":["University of Wisconsin\u2013Madison","University of Wisconsin-Madison, #TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin\u2013Madison","institution_ids":["https://openalex.org/I135310074"]},{"raw_affiliation_string":"University of Wisconsin-Madison, #TAB#","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045511121","display_name":"Chuhan Gao","orcid":"https://orcid.org/0009-0001-5443-5590"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]},{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chuhan Gao","raw_affiliation_strings":["Microsoft, work done while at University of Wisconsin\u2013Madison"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft, work done while at University of Wisconsin\u2013Madison","institution_ids":["https://openalex.org/I1290206253","https://openalex.org/I135310074"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108757471","display_name":"Brian Tang","orcid":"https://orcid.org/0000-0001-6140-922X"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Brian Tang","raw_affiliation_strings":["University of Wisconsin\u2013Madison","University of Wisconsin-Madison, #TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin\u2013Madison","institution_ids":["https://openalex.org/I135310074"]},{"raw_affiliation_string":"University of Wisconsin-Madison, #TAB#","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042450214","display_name":"Kassem Fawaz","orcid":"https://orcid.org/0000-0002-4609-7691"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Kassem Fawaz","raw_affiliation_strings":["University of Wisconsin\u2013Madison","University of Wisconsin-Madison, #TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin\u2013Madison","institution_ids":["https://openalex.org/I135310074"]},{"raw_affiliation_string":"University of Wisconsin-Madison, #TAB#","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088826068","display_name":"Somesh Jha","orcid":"https://orcid.org/0000-0001-5877-0436"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Somesh Jha","raw_affiliation_strings":["University of Wisconsin\u2013Madison","University of Wisconsin-Madison, #TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin\u2013Madison","institution_ids":["https://openalex.org/I135310074"]},{"raw_affiliation_string":"University of Wisconsin-Madison, #TAB#","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033218913","display_name":"Suman Banerjee","orcid":"https://orcid.org/0000-0003-1761-5944"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Suman Banerjee","raw_affiliation_strings":["University of Wisconsin\u2013Madison","University of Wisconsin-Madison, #TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin\u2013Madison","institution_ids":["https://openalex.org/I135310074"]},{"raw_affiliation_string":"University of Wisconsin-Madison, #TAB#","institution_ids":["https://openalex.org/I135310074"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5042450214"],"corresponding_institution_ids":["https://openalex.org/I135310074"],"apc_list":null,"apc_paid":null,"fwci":0.7804,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.76727833,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"2021","issue":"2","first_page":"369","last_page":"390"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.7558574080467224},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7046900987625122},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.6732890009880066},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6316978931427002},{"id":"https://openalex.org/keywords/facial-recognition-system","display_name":"Facial recognition system","score":0.5847249031066895},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5710309147834778},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.549627423286438},{"id":"https://openalex.org/keywords/social-media","display_name":"Social media","score":0.5485039353370667},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.49802184104919434},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.4843938946723938},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.43505001068115234},{"id":"https://openalex.org/keywords/scarcity","display_name":"Scarcity","score":0.4330734610557556},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.41995131969451904},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3632466793060303},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3237631320953369},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.23623618483543396},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.2043028175830841},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.1106971800327301},{"id":"https://openalex.org/keywords/marketing","display_name":"Marketing","score":0.08119267225265503}],"concepts":[{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.7558574080467224},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7046900987625122},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.6732890009880066},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6316978931427002},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.5847249031066895},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5710309147834778},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.549627423286438},{"id":"https://openalex.org/C518677369","wikidata":"https://www.wikidata.org/wiki/Q202833","display_name":"Social media","level":2,"score":0.5485039353370667},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49802184104919434},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.4843938946723938},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.43505001068115234},{"id":"https://openalex.org/C109747225","wikidata":"https://www.wikidata.org/wiki/Q815758","display_name":"Scarcity","level":2,"score":0.4330734610557556},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.41995131969451904},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3632466793060303},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3237631320953369},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.23623618483543396},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2043028175830841},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.1106971800327301},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.08119267225265503},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.2478/popets-2021-0032","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2021-0032","pdf_url":"https://www.sciendo.com/pdf/10.2478/popets-2021-0032","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2003.08861","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2003.08861","pdf_url":"https://arxiv.org/pdf/2003.08861","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},{"id":"mag:3011747062","is_oa":true,"landing_page_url":"http://export.arxiv.org/pdf/2003.08861","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2003.08861","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2003.08861","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.2478/popets-2021-0032","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2021-0032","pdf_url":"https://www.sciendo.com/pdf/10.2478/popets-2021-0032","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":66,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W1545190392","https://openalex.org/W1673923490","https://openalex.org/W1782590233","https://openalex.org/W1945616565","https://openalex.org/W1951319388","https://openalex.org/W2096733369","https://openalex.org/W2098693229","https://openalex.org/W2100556411","https://openalex.org/W2106053110","https://openalex.org/W2112507308","https://openalex.org/W2113533904","https://openalex.org/W2117154949","https://openalex.org/W2121044470","https://openalex.org/W2143002484","https://openalex.org/W2143331350","https://openalex.org/W2145287260","https://openalex.org/W2158551678","https://openalex.org/W2170003605","https://openalex.org/W2179402106","https://openalex.org/W2274565976","https://openalex.org/W2341528187","https://openalex.org/W2408141691","https://openalex.org/W2515770085","https://openalex.org/W2516672586","https://openalex.org/W2520774990","https://openalex.org/W2535873859","https://openalex.org/W2543927648","https://openalex.org/W2570685808","https://openalex.org/W2603766943","https://openalex.org/W2612637113","https://openalex.org/W2620038827","https://openalex.org/W2640329709","https://openalex.org/W2741234481","https://openalex.org/W2754049786","https://openalex.org/W2769823506","https://openalex.org/W2782017896","https://openalex.org/W2783555701","https://openalex.org/W2786977288","https://openalex.org/W2788481061","https://openalex.org/W2797132229","https://openalex.org/W2803187616","https://openalex.org/W2805329444","https://openalex.org/W2897355816","https://openalex.org/W2911634294","https://openalex.org/W2949506549","https://openalex.org/W2950864148","https://openalex.org/W2953106684","https://openalex.org/W2963149332","https://openalex.org/W2963207607","https://openalex.org/W2963466847","https://openalex.org/W2963744840","https://openalex.org/W2963759070","https://openalex.org/W2963839617","https://openalex.org/W2963857521","https://openalex.org/W2964153729","https://openalex.org/W2964253222","https://openalex.org/W2974723675","https://openalex.org/W2981892732","https://openalex.org/W3013925760","https://openalex.org/W3036952806","https://openalex.org/W3099206234","https://openalex.org/W3101998545","https://openalex.org/W3103836116","https://openalex.org/W3107185593","https://openalex.org/W3118608800"],"related_works":["https://openalex.org/W3133898321","https://openalex.org/W3111960435","https://openalex.org/W1993384921","https://openalex.org/W2738911098","https://openalex.org/W1899080347","https://openalex.org/W2568097085","https://openalex.org/W2904229111","https://openalex.org/W1968417201","https://openalex.org/W2913088671","https://openalex.org/W617812783","https://openalex.org/W3086496416","https://openalex.org/W38637888","https://openalex.org/W2182977639","https://openalex.org/W2990149395","https://openalex.org/W3203847958","https://openalex.org/W1984786275","https://openalex.org/W2524231807","https://openalex.org/W2246840329","https://openalex.org/W2504610522","https://openalex.org/W3004998422"],"abstract_inverted_index":{"Abstract":[0],"Advances":[1],"in":[2,81],"deep":[3],"learning":[4],"have":[5,31],"made":[6],"face":[7,111,135,161],"recognition":[8,58,136,162],"technologies":[9],"pervasive.":[10],"While":[11],"useful":[12],"to":[13,54,75,106,112,129,154],"social":[14,40,70],"media":[15,71],"platforms":[16],"and":[17,45,87,138,151,167],"users,":[18,33],"this":[19,90,94],"technology":[20],"carries":[21],"significant":[22],"privacy":[23,78,86],"threats.":[24],"Coupled":[25],"with":[26,39,172],"the":[27,49,109,130,139,178,186],"abundant":[28],"information":[29],"they":[30],"about":[32],"service":[34],"providers":[35],"can":[36],"associate":[37],"users":[38],"interactions,":[41],"visited":[42],"places,":[43],"activities,":[44],"preferences\u2013some":[46],"of":[47,108,126,133,141],"which":[48],"user":[50,170],"may":[51],"not":[52],"want":[53],"share.":[55],"Additionally,":[56],"facial":[57],"models":[59],"used":[60],"by":[61,66,96],"various":[62],"agencies":[63],"are":[64],"trained":[65],"data":[67],"scraped":[68],"from":[69,115,164],"platforms.":[72],"Existing":[73],"approaches":[74],"mitigate":[76],"associated":[77],"risks":[79],"result":[80],"an":[82,182],"imbalanced":[83],"trade-off":[84,95],"between":[85],"utility.":[88],"In":[89],"paper,":[91],"we":[92,122],"address":[93],"proposing":[97],"Face-Off,":[98,121],"a":[99,124],"privacy-preserving":[100],"framework":[101],"that":[102,156,177],"introduces":[103],"strategic":[104],"perturbations":[105,179],"images":[107],"user\u2019s":[110],"prevent":[113],"it":[114,157],"being":[116],"correctly":[117],"recognized.":[118],"To":[119],"realize":[120],"overcome":[123],"set":[125],"challenges":[127],"related":[128],"black-box":[131],"nature":[132],"commercial":[134,160],"services,":[137],"scarcity":[140],"literature":[142],"for":[143,185],"adversarial":[144],"attacks":[145],"on":[146],"metric":[147],"networks.":[148],"We":[149],"implement":[150],"evaluate":[152],"Face-Off":[153],"find":[155],"deceives":[158],"three":[159],"services":[163],"Microsoft,":[165],"Amazon,":[166],"Face++.":[168],"Our":[169],"study":[171],"423":[173],"participants":[174],"further":[175],"shows":[176],"come":[180],"at":[181],"acceptable":[183],"cost":[184],"users.":[187]},"counts_by_year":[{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":4}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}