{"id":"https://openalex.org/W4414360063","doi":"https://doi.org/10.24963/ijcai.2025/278","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","display_name":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","publication_year":2025,"publication_date":"2025-09-01","ids":{"openalex":"https://openalex.org/W4414360063","doi":"https://doi.org/10.24963/ijcai.2025/278"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2025/278","is_oa":false,"landing_page_url":"https://doi.org/10.24963/ijcai.2025/278","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Fourth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://admin.research-repository.uwa.edu.au/en/publications/e358a941-7ffe-4d2a-a35c-6cbd0a1e17ea","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014365121","display_name":"Fengfan Zhou","orcid":"https://orcid.org/0000-0002-1117-1126"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fengfan Zhou","raw_affiliation_strings":["School of Computer Science and Technology, Huazhong University of Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031210225","display_name":"Qianyu Zhou","orcid":"https://orcid.org/0000-0002-5331-050X"},"institutions":[{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]},{"id":"https://openalex.org/I4210108141","display_name":"Ministry of Education","ror":"https://ror.org/01hw7wf62","country_code":"IR","type":"government","lineage":["https://openalex.org/I4210108141"]}],"countries":["CN","IR"],"is_corresponding":false,"raw_author_name":"Qianyu Zhou","raw_affiliation_strings":["College of Computer Science and Technology, Jilin University","Key Laboratory of Symbolic Computation and Knowledge Engineering of Ministry of Education, JLU"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University","institution_ids":["https://openalex.org/I194450716"]},{"raw_affiliation_string":"Key Laboratory of Symbolic Computation and Knowledge Engineering of Ministry of Education, JLU","institution_ids":["https://openalex.org/I4210108141"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025788196","display_name":"Heifei Ling","orcid":null},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Heifei Ling","raw_affiliation_strings":["School of Computer Science and Technology, Huazhong University of Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5111901938","display_name":"Xuequan Lu","orcid":null},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xuequan Lu","raw_affiliation_strings":["Department of Computer Science and Software Engineering, The University of Western Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Software Engineering, The University of Western Australia","institution_ids":["https://openalex.org/I177877127"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.28338551,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2494","last_page":"2502"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.9524999856948853,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9222000241279602},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.6814000010490417},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.6654999852180481},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.6359000205993652},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.612500011920929},{"id":"https://openalex.org/keywords/facial-recognition-system","display_name":"Facial recognition system","score":0.5472999811172485}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9222000241279602},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7505000233650208},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.6814000010490417},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.6654999852180481},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.6359000205993652},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.612500011920929},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.5472999811172485},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5159000158309937},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4097000062465668},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.33570000529289246},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.30410000681877136},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.28189998865127563},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.27720001339912415},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2759999930858612},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.2603999972343445}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.24963/ijcai.2025/278","is_oa":false,"landing_page_url":"https://doi.org/10.24963/ijcai.2025/278","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Fourth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.atira.dk:openaire/e358a941-7ffe-4d2a-a35c-6cbd0a1e17ea","is_oa":true,"landing_page_url":"https://admin.research-repository.uwa.edu.au/en/publications/e358a941-7ffe-4d2a-a35c-6cbd0a1e17ea","pdf_url":null,"source":{"id":"https://openalex.org/S4306402523","display_name":"UWA Profiles and Research Repository (University of Western Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Zhou, F, Zhou, Q, Ling, H & Lu, X 2025, Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models. in J Kwok (ed.), Proceedings of the 34th International Joint Conference on Artificial Intelligence, IJCAI 2025. IJCAI International Joint Conference on Artificial Intelligence, International Joint Conferences on Artificial Intelligence, Canada, pp. 2494-2502, 34th Internationa Joint Conference on Artificial Intelligence, IJCAI 2025, Montreal, Canada, 16/08/25. https://doi.org/10.24963/ijcai.2025/278","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:pure.atira.dk:openaire/e358a941-7ffe-4d2a-a35c-6cbd0a1e17ea","is_oa":true,"landing_page_url":"https://admin.research-repository.uwa.edu.au/en/publications/e358a941-7ffe-4d2a-a35c-6cbd0a1e17ea","pdf_url":null,"source":{"id":"https://openalex.org/S4306402523","display_name":"UWA Profiles and Research Repository (University of Western Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Zhou, F, Zhou, Q, Ling, H & Lu, X 2025, Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models. in J Kwok (ed.), Proceedings of the 34th International Joint Conference on Artificial Intelligence, IJCAI 2025. IJCAI International Joint Conference on Artificial Intelligence, International Joint Conferences on Artificial Intelligence, Canada, pp. 2494-2502, 34th Internationa Joint Conference on Artificial Intelligence, IJCAI 2025, Montreal, Canada, 16/08/25. https://doi.org/10.24963/ijcai.2025/278","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Adversarial":[0],"attacks":[1,69,93],"on":[2,70,94],"Face":[3,25],"Recognition":[4],"(FR)":[5],"systems":[6,22],"have":[7],"demonstrated":[8],"significant":[9],"effectiveness":[10],"against":[11,144],"standalone":[12],"FR":[13,21,58,72,96,125],"models.":[14,99,128,146],"However,":[15],"their":[16],"practicality":[17],"diminishes":[18],"in":[19,121],"complete":[20],"that":[23,55],"incorporate":[24],"Anti-Spoofing":[26],"(FAS)":[27],"models,":[28],"as":[29],"these":[30],"models":[31,61],"can":[32],"detect":[33],"and":[34,59,97,126],"mitigate":[35],"a":[36,51,77,132,151],"substantial":[37],"number":[38],"of":[39,67,91,141,163,170],"adversarial":[40,68,142,177],"examples.":[41],"To":[42],"address":[43,118],"this":[44],"critical":[45],"yet":[46],"under-explored":[47],"challenge,":[48],"we":[49,75,110,130,149],"introduce":[50,150],"novel":[52],"attack":[53,79,173],"setting":[54],"targets":[56],"both":[57,95],"FAS":[60,98,127,145],"simultaneously,":[62],"thereby":[63],"enhancing":[64],"the":[65,89,119,139,168],"practicability":[66],"integrated":[71],"systems.":[73],"Specifically,":[74],"propose":[76,111],"new":[78],"method,":[80],"termed":[81],"Reference-free":[82,133],"Multi-level":[83,152],"Alignment":[84,154],"(RMA),":[85],"designed":[86],"to":[87,117,137,156,175],"improve":[88,138],"capacity":[90],"black-box":[92],"The":[100],"RMA":[101],"framework":[102],"is":[103],"built":[104],"upon":[105],"three":[106],"key":[107],"components.":[108],"Firstly,":[109],"an":[112],"Adaptive":[113],"Gradient":[114],"Maintenance":[115],"module":[116,136,155],"imbalances":[120],"gradient":[122],"contributions":[123],"between":[124],"Secondly,":[129],"develop":[131],"Intermediate":[134],"Biasing":[135],"transferability":[140],"examples":[143],"In":[147],"addition,":[148],"Feature":[153],"reduce":[157],"feature":[158],"discrepancies":[159],"at":[160],"various":[161],"levels":[162],"representation.":[164],"Extensive":[165],"experiments":[166],"showcase":[167],"superiority":[169],"our":[171],"proposed":[172],"method":[174],"state-of-the-art":[176],"attacks.":[178]},"counts_by_year":[],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}