Paper Citation Record · LEDGER

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models

As of 20 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 0 inbound Pith citation observations for arXiv:2504.15823.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2504.15823 v1

Coverage vector

measured 45 of 45 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-16T11:22:06.379253Z

measured 45 of 45 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-20T06:33:59.587034+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

45 of 45 outbound references displayed

verified exact0
verified fuzzy38
unresolved7
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 8bca8c91-5088-42ca-b92c-f63607f46651 · outbound

This paper cites Apple Platform Security , 2023.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Apple Platform Security , 2023

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.901169Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 14c42f73-5e3b-41f4-8ffc-d42e10d660e5 · outbound

This paper cites Towards evaluating the robustness of neural networks.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Towards evaluating the robustness of neural networks

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-16T11:22:06.225604Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a26f4a50-6306-409e-a6a4-339252bccf02 · outbound

This paper cites Facial recognition application for border control.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Facial recognition application for border control

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.883432Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 4ef8a41e-b90b-4e37-af29-8062f17a6876 · outbound

This paper cites Zoo: Zeroth order optimization based black- box attacks to deep neural networks without training substi- tute models.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Zoo: Zeroth order optimization based black- box attacks to deep neural networks without training substi- tute models

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.873351Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation c8b8c9ff-c6f2-4b9c-8276-e669940fe70b · outbound

This paper cites Universal adversarial attack on attention and the resulting dataset damagenet.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Universal adversarial attack on attention and the resulting dataset damagenet

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.863055Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 6fb0840c-3cb2-4caa-a0c7-8461c964edb5 · outbound

This paper cites Accessorize in the dark: A security analysis of near-infrared face recognition.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Accessorize in the dark: A security analysis of near-infrared face recognition

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.852555Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation d21906bc-8a36-4b6e-869a-1d3c3398613e · outbound

This paper cites The numerical evaluation of b-splines.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models The numerical evaluation of b-splines

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.842353Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 3313df00-2d43-460e-98b4-a51b985a71d7 · outbound

This paper cites Sparse-rs: a versatile framework for query-efficient sparse black-box ad- versarial attacks.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Sparse-rs: a versatile framework for query-efficient sparse black-box ad- versarial attacks

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.831895Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 9f3113f1-d6d2-4cee-9313-b0ffe1d5fa05 · outbound

This paper cites Boosting adversarial at- tacks with momentum.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Boosting adversarial at- tacks with momentum

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.820856Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation e749581b-cd4c-4a6d-a065-189c61acfc78 · outbound

This paper cites Efficient decision-based black- box adversarial attacks on face recognition.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Efficient decision-based black- box adversarial attacks on face recognition

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.810079Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation ab703ba7-9946-4e1d-944b-685b088ebf9d · outbound

This paper cites Dual variational generation for low shot heterogeneous face recognition.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Dual variational generation for low shot heterogeneous face recognition

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.799412Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation d79eb5a3-67d4-446f-b820-e1771b27ac85 · outbound

This paper cites Dvg-face: Dual variational generation for heterogeneous face recognition.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Dvg-face: Dual variational generation for heterogeneous face recognition

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.789093Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 8878687c-e985-435e-b4b3-075c5a9b2ccb · outbound

This paper cites Heterogeneous face recog- nition: recent advances in infrared-to-visible matching.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Heterogeneous face recog- nition: recent advances in infrared-to-visible matching

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.778861Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 4f43dec4-a45d-4fd9-97dd-5ba3d3369373 · outbound

This paper cites Dual face align- ment learning network for nir-vis face recognition.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Dual face align- ment learning network for nir-vis face recognition

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.768472Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 2e6fc408-e4fb-4af9-841a-fd285ed4d36a · outbound

This paper cites The buaa-visnir face database instructions.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models The buaa-visnir face database instructions

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.758170Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation f01755c8-73c8-44e4-a04f-81e9f58b1bd4 · outbound

This paper cites Mul- tilevel fusing paired visible light and near-infrared spectral images for face anti-spoofing.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Mul- tilevel fusing paired visible light and near-infrared spectral images for face anti-spoofing

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.747393Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 04650238-91e7-4ed9-936b-4f44c3c8cd33 · outbound

This paper cites Advhat: Real- world adversarial attack on arcface face id system.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Advhat: Real- world adversarial attack on arcface face id system

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.736189Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 6c296094-518b-41d7-9418-7178cf7794a5 · outbound

This paper cites Recent advances in visual and infrared face recognition—a review.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Recent advances in visual and infrared face recognition—a review

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.724991Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 3727fecf-0c33-4eff-bcab-886066ef86c1 · outbound

This paper cites Is facial recognition biased at near-infrared spectrum as well? In 2022 IEEE International Symposium on Technologies for Homeland Security (HST), pages 1–7.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Is facial recognition biased at near-infrared spectrum as well? In 2022 IEEE International Symposium on Technologies for Homeland Security (HST), pages 1–7

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.713999Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 737bb9ac-7c53-4496-be60-a537c11fff82 · outbound

This paper cites The casia nir-vis 2.0 face database.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models The casia nir-vis 2.0 face database

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.702937Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 4ca974fe-c718-43dd-a575-5d302f7b4d96 · outbound

This paper cites DPatch: An Adversarial Patch Attack on Object Detectors.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models DPatch: An Adversarial Patch Attack on Object Detectors

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-16T11:22:06.291708Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2bba1e4a-388e-46c6-a659-1d5402a58fce · outbound

This paper cites Delving into Transferable Adversarial Examples and Black-box Attacks.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Delving into Transferable Adversarial Examples and Black-box Attacks

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-16T11:22:06.295347Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a868c22d-ebe0-42f3-ab2f-bc832915889d · outbound

This paper cites Towards Deep Learning Models Resistant to Adversarial Attacks.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Towards Deep Learning Models Resistant to Adversarial Attacks

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-16T11:22:06.299153Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 34857e44-4c15-4ee9-986c-d982fa0d8118 · outbound

This paper cites Physically-based face render- ing for nir-vis face recognition.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Physically-based face render- ing for nir-vis face recognition

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.692072Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 69e14654-224f-4041-b4b8-802d8ed82f7b · outbound

This paper cites Windows Hello for Business Overview, 2023.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Windows Hello for Business Overview, 2023

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.680717Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 8dea9cc0-c859-4948-814e-2fce75064a06 · outbound

This paper cites Reflectance quantities in optical remote sensing—definitions and case studies.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Reflectance quantities in optical remote sensing—definitions and case studies

Reference 26

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.670250Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 9c0e32a3-65a1-41c9-8ad6-29fc43c31096 · outbound

This paper cites A simple explanation for the existence of adversarial examples with small hamming distance, 2019.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models A simple explanation for the existence of adversarial examples with small hamming distance, 2019

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.658495Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation f48eaadd-23fc-4b95-993e-4e13d9241f48 · outbound

This paper cites Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.646781Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 70b3bbeb-0e8c-40e7-8f82-b0621675614b · outbound

This paper cites Vla: A practical visible light-based attack on face recognition systems in physical world.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Vla: A practical visible light-based attack on face recognition systems in physical world

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.634578Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation c31ba6ed-142d-4f4d-96e9-3ca11b4dbcf1 · outbound

This paper cites Intriguing properties of neural networks.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Intriguing properties of neural networks

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-16T11:22:06.323606Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 96f35c2e-8413-48ed-a7ea-71b774029ef9 · outbound

This paper cites Hard-label black-box universal adversarial patch attack.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Hard-label black-box universal adversarial patch attack

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.622206Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 04d5e768-c81b-490f-b085-ee4c92d70a1b · outbound

This paper cites Face recognition in real-world surveillance videos with deep learning method.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Face recognition in real-world surveillance videos with deep learning method

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.611700Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 2903367c-b76e-421c-a9dd-f4ea48a3a7ba · outbound

This paper cites The invisible polyjuice potion: An effective physical ad- versarial attack against face recognition.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models The invisible polyjuice potion: An effective physical ad- versarial attack against face recognition

Reference 33

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.599185Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation bbcf5768-94b8-4a48-8b27-3345acff79bc · outbound

This paper cites Hotcold block: Fooling thermal infrared detectors with a novel wearable de- sign.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Hotcold block: Fooling thermal infrared detectors with a novel wearable de- sign

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.586000Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation b6a25723-a7c6-40ab-b8df-4d1a37fcdd82 · outbound

This paper cites Adversarial sticker: A stealthy attack method in the physical world.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Adversarial sticker: A stealthy attack method in the physical world

Reference 35

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.575033Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 7012f29d-6414-4535-aa84-e7763abb32b6 · outbound

This paper cites Uni- fied adversarial patch for cross-modal attacks in the physical world.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Uni- fied adversarial patch for cross-modal attacks in the physical world

Reference 36

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.563544Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation d2db6ce9-be37-42bb-a3d7-696093944a14 · outbound

This paper cites Defending Against Physically Realizable Attacks on Image Classification.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Defending Against Physically Realizable Attacks on Image Classification

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-16T11:22:06.348615Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9c85c1bc-3688-41be-80cc-80a7ba913654 · outbound

This paper cites A light cnn for deep face representation with noisy labels.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models A light cnn for deep face representation with noisy labels

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.551871Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 19b97f0a-9fb3-4569-a36d-cd78e4f04c60 · outbound

This paper cites Lamp-hq: A large-scale multi-pose high-quality database and benchmark for nir-vis face recognition.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Lamp-hq: A large-scale multi-pose high-quality database and benchmark for nir-vis face recognition

Reference 39

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.540138Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation bd260e49-2df6-405f-9ac9-ab9656accccf · outbound

This paper cites Resnest: Split-attention networks.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Resnest: Split-attention networks

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.527530Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 89e5ab8c-cecf-4ec3-b18a-72cdcf5338c4 · outbound

This paper cites Facial expression recognition from near- infrared videos.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Facial expression recognition from near- infrared videos

Reference 41

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.515571Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation cab2853d-1968-47de-bd70-f9ab9627dab1 · outbound

This paper cites Shadows can be dangerous: Stealthy and effective physical-world adversarial attack by natural phe- nomenon.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Shadows can be dangerous: Stealthy and effective physical-world adversarial attack by natural phe- nomenon

Reference 42

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.503547Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 3b7afb33-4f72-442e-9fb2-c5038b27cb45 · outbound

This paper cites Invisible Mask: Practical Attacks on Face Recognition with Infrared.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Invisible Mask: Practical Attacks on Face Recognition with Infrared

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-16T11:22:06.371342Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e0389ef2-1c74-4929-9e51-caecfffb8557 · outbound

This paper cites Fooling thermal infrared pedestrian detectors in real world using small bulbs.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Fooling thermal infrared pedestrian detectors in real world using small bulbs

Reference 44

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.491094Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation a478454a-7fb5-4416-a7ff-4a780d877cca · outbound

This paper cites Adversarial mask: Real-world universal adversarial at- tack on face recognition models.

Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models Adversarial mask: Real-world universal adversarial at- tack on face recognition models

Reference 45

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T11:22:06.478780Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Pith citing papers

No inbound Pith citation observations are available.