Pith. sign in

REVIEW 4 major objections 4 minor 278 references

Hiding in Plain Sight: An Effective Physical Adversarial Patch Attack against Visual-Infrared Fused Face Detection

T0 review · 4 major / 4 minor · reviewed 2026-07-31 · deepseek-v4-flash

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗ Review JSON

Pith's one-line read A gradient mask and band-aid can hide faces from visible and thermal cameras at once.

desk verdict Genuinely new joint visual+thermal patch attack, but the headline claim overreaches: no fused detector is ever tested, so the >90% ASR proves simultaneous single-modality failures, not defeat of a fusion system. read the letter →

arxiv 2607.23292 v1 pith:WYQMSQO4 submitted 2026-07-25 cs.CR cs.CV

Qiucheng Yu , Tao Ni , Yihe Zhou , Jiayimei Wang , Qingchuan Zhao This is my paper · ORCID
classification cs.CRcs.CV
keywords adversarialpatchphysicalattackvisual-infraredfusionfacedetectionthermalinfraredblack-boxstealthinessdifferentialevolution
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

VIPatch is a physical adversarial patch attack aimed at systems that fuse visible-light and thermal-infrared face detection. It uses two everyday-looking accessories—a gradient-color mask and a band-aid sticker—and optimizes both elements jointly across the two image modalities. The paper reports over 90% attack success in digital simulations and in physical tests across distances, angles, and lighting levels, while the patches stay visually unobtrusive. The authors argue this reveals a practical vulnerability in real-world visual-infrared fused face detection systems.

What carries the argument

The load-bearing mechanism is the joint optimization of two physical accessories: a face mask whose colors form a vertical gradient, and a band-aid sticker. Mask colors are chosen by Differential Evolution under a harmonic-template color constraint and applied row-by-row with a gradient formula; the band-aid's location and angle are optimized in the same search. Expectation over Transformation injects realistic noise, brightness, and placement perturbations during optimization, and a 3D face model renders the mask and sticker onto facial images with plausible geometry. These components bridge the digital-to-physical gap, which is why the optimized patterns survive being printed and worn.

What would settle it

Run VIPatch's optimized patches against a deployed fused detector that actually combines the two modalities—for example, by requiring detections from both cameras to overlap, or by averaging their confidence—and test on held-out subjects not used in the optimization. If the fusion layer can still detect the face from either modality alone or uses cross-modal spatial consistency, the reported >90% attack success should drop sharply.

Watch

Extended reading notes

Core claim

The paper's central claim is that a single physical accessory set—a printed gradient-color mask worn together with a band-aid—can make a person undetectable to visual-infrared fused face detectors. VIPatch optimizes the mask's gradient color combination and the band-aid's position and angle, all under a color-harmonization constraint so the mask blends into the face, with the band-aid restricted to areas away from the eyes. In the infrared image the mask is modeled as a cold block, simulating the thermal insulation of a real mask. After optimization, the digital patches are printed and placed on the face. Across nine visible-light and seven infrared face detectors, the paper reports average

Load-bearing premise

The paper never tests a system that truly fuses the two camera types; it attacks each camera's detector separately and assumes that failing both separately fails the fused system, and it does not report keeping the people it tests separate from the ones used to optimize the patches.

Editorial extensions

If this is right

  • Thermal screening and surveillance systems relying on fused visible-infrared face detection could be evaded by ordinary-looking accessories, with no special equipment needed.
  • The attack transfers across multiple off-the-shelf face detectors despite black-box query-only access, indicating the vulnerability is not model-specific.
  • Jointly attacking both modalities is essential: optimizing on one modality alone drops success to roughly 61–79%, so defenses must be designed against cross-modal attacks, not per-modality patches.
  • Physical factors such as distance, angle, and lighting that cripple earlier patch attacks have limited effect here, making physical adversarial patches practical outside tightly controlled camera positions.
  • The combination of mask and band-aid is stronger than either alone, suggesting that redundant, mutually supporting physical elements can raise attack reliability.

Reading between the lines

Editorial extensions of the paper, not claims the author makes directly.

  • Because the paper optimizes each modality's detector separately and never tests a true fusion layer, the strongest unverified implication is that fusion architectures with cross-modal consistency checks would still fall; testing VIPatch against score-level or feature-level fusion models would settle this.
  • The infrared attack's high physical success may owe as much to the cold gel's thermal insulation as to the learned sticker pattern; a controlled ablation that swaps the gel for a non-thermal placeholder would identify which factor matters.
  • The color-harmonization constraint offers a general recipe for stealthy physical patches: restrict adversarial changes to the subspace of natural appearance, which may generalize to other face or person attacks.
  • Since no held-out identity or image split is reported, the practical claim needs replication on subjects and poses never touched by the Differential Evolution search to rule out overfitting to the evaluation set.
Share X Bluesky LinkedIn Reddit HN

Signed reviews

No signed human review yet.

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, and a circularity audit.

Referee Report

4 major / 4 minor

Summary. The paper presents VIPatch, a physical adversarial patch attack intended to defeat visual-infrared fused face detection. The patch combines a gradient-color face mask and a band-aid sticker; the mask colors and sticker pose are optimized with differential evolution using only the detector confidence as a black-box signal, under expectation-over-transformation and color-harmonization constraints. The authors report digital attack success rates above 90% for several visible-light and infrared face detectors, and physical ASRs in the same range. An ablation shows that optimizing the two modalities jointly and combining mask plus band-aid improves ASR. The central claim, however, is that one physical accessory defeats visual-infrared fused detection; the evaluation does not include any actual fused detector and does not document a held-out split.

Significance. If confirmed, this is a potentially important security contribution: a natural-looking mask and band-aid would bypass the combined visual/thermal face detectors used in access and temperature-screening systems. Strengths of the paper include its joint visual-infrared patch formulation, the use of physical constraints and EOT, the physical fabrication with a real thermal camera, and the clear ablation evidence that joint optimization matters. The paper is less convincing on its headline claim because no fusion architecture is ever exercised, and no train/test separation is reported. The contribution is publishable in principle, but the evaluation needs substantial additional work before the claimed threat against fused face detection can be accepted.

major comments (4)
  1. [Threat Model, Eq. (1)] Eq. (1) is the core optimization, but it contains no fusion function: it is two independent arg mins over sigma_v and sigma_i with per-modality detectors f_v and f_i. Tables 2 and 3 likewise report visible-only and infrared-only ASRs; Tables 5 and 6 use "Fused" to mean jointly optimized patches evaluated on one modality, not an actual fusion model. The paper therefore does not demonstrate that VIPatch defeats a visual-infrared fused detector. A fusion system using OR/max-score fusion, cross-modal consistency, or a single modality that still detects would invalidate the physical-world claim. Please either implement and attack true early/score/decision fusion models, or reframe the claims to per-modality detectors.
  2. [Experiment Setup / Evaluation Split] The evaluation never states whether the SPEAKINGFACES images used during DE optimization are disjoint from the images used to compute ASR. Without a subject-disjoint split, the reported >90% ASR could be partly an artifact of optimizing and testing on the same data. Please report the split, the number of queries consumed per run, and ASR variability (e.g., over subjects or bootstraps).
  3. [Physical Domain Attack] Fig. 6 reports physical ASR for visual detectors only, and Table 4 reports physical ASR for infrared detectors only. There is no physical experiment in which visible and infrared streams are captured simultaneously and evaluated by a fused detector. Thus the conclusion that "VIPatch reliably bypasses the target models in the physical world" is not supported for the fused system that is the paper's stated target.
  4. [Ablation Study, Tables 5-6] The ablation text states that "jointly optimizing over the visual-infrared fused detectors raises the ASR." Given Eq. (1), these experiments optimize over two separate detectors, not a fused one. The term "fused" is misleading and propagates the unsupported central claim. Rename the columns to "joint two-modality optimization" and treat the absence of a test-time fusion rule as a limitation.
minor comments (4)
  1. [Eq. (4)] The crossover equation and its surrounding text disagree: the prose says the mutation vector replaces the original when rand > gamma_c, while Eq. (4) appears to assign the parent vector in that case. Please align equation and text.
  2. [Physical Domain Attack, Fig. 6] Physical ASRs are quoted to two decimals without confidence intervals, number of subjects, or per-trial variability. A 600-frame video can produce a point estimate, but not the precision claimed. Please report trial counts and variance.
  3. [Abstract / Stealthiness] The paper claims the patches are "unobtrusive to human observers," but no human perceptual study or quantitative stealth metric (e.g., user study, detection-rate test) is reported. Please either add such an evaluation or soften the claim to "visually harmonized by design."
  4. [Throughout] Notation and reference hygiene should be cleaned: e.g., "Mogface" vs "MogFace," "d link" as an author name, duplicated URLs, and the unexpanded table color legend.

Circularity Check

0 steps flagged · score 0.0 of 10

No construction-level circularity; the fused-detector concern is an external-validity gap, not a circular derivation.

full rationale

I walked the optimization and evaluation chain. The attack objective Eq. (1) is two independent per-modality arg mins over sigma_v and sigma_i; no fusion function appears, and Tables 2-6 report per-modality ASRs. The 'Fused' columns in Tables 5-6 correspond to the jointly optimized patch evaluated on a single-modality detector, not to a defined fused detector. That is a mismatch between the title/abstract claim and the measurement, i.e., an external-validity/transferability gap, not a circular reduction: the reported ASR is not constructed from the same quantity it is claimed to predict. The DE color optimization uses the detector probability as fitness, and the paper does not state whether the SPEAKINGFACES images used for scoring are disjoint from those used for optimization; if they overlap, digital ASR would partly measure fit. However, I cannot exhibit a quote establishing that overlap, and the physical experiments (participants, printed patches, real cameras) provide an external anchor. No load-bearing self-citation: prior works by the authors are cited as related work or component implementations (FMA-3D, adv-sticker, 3DMM), not as justification for the central effectiveness claim. Therefore, under the hard rule that circularity must be exhibited by quote and specific reduction, I find no significant circularity.

Assumptions & free parameters 6 free parameters · 5 assumptions · 0 invented entities

The central claim is empirical, not derived: the numerical inputs are DE hyperparameters, the optimized mask colors/band-aid pose, and the domain assumptions that query feedback is available, that per-modality failures transfer to fused systems, and that the dataset approximates physical deployment.

free parameters (6)
  • DE population size n
    Eq. (2) initializes n color combinations; n is never reported and controls optimization cost/quality.
  • DE mutation rate gamma_m = 0.5
    Set in Experiment Details; chosen by hand and affects convergence.
  • DE crossover rate gamma_c = 0.6
    Set in Experiment Details; chosen by hand and affects exploration.
  • Harmonic template type = type T
    Color harmonization constraint chosen from Fig. 4; the template choice restricts allowed mask colors.
  • Max query budget Q = 10,000
    Threat-model budget bounding the number of queries; no sensitivity analysis is provided.
  • Optimized mask color endpoints and band-aid pose
    DE outputs for each attack; without these values the physical reproduction and audit of reported ASRs are impossible.
assumptions (5)
  • domain assumption Attacker has black-box query access to detector confidence scores with fewer than 10,000 queries.
    Threat Model section; this capability enables using the detector probability as the DE fitness score.
  • domain assumption Attacking visible and infrared detectors independently and simultaneously defeats a visual-infrared fused system.
    Eq. (1) optimizes each detector's loss separately, and Tables 2-6 evaluate per-modality detectors rather than a true fusion model.
  • domain assumption The SPEAKINGFACES visual-thermal dataset is representative, and the lack of a stated train/test split does not bias reported ASR.
    Datasets section; no held-out image/subject split is described, so transfer from optimization to evaluation is assumed.
  • domain assumption The digital rendering of the mask, band-aid, and cold block approximates physical printing, 3D face curvature, and thermal insulation.
    VIPatch Design / 3D Transformation and Physical Domain Attack sections; this bridge is asserted via EOT and manual cold gel, not measured in detail.
  • standard math Background algorithms (differential evolution, Reinhard color transfer, 3DMM, FMA-3D, adv-sticker) are correct and applicable as used.
    Used off-the-shelf; the paper provides no proofs or detailed adaptation analysis for this specific use.

how reviews work

0 comments
Cite this review

Pith. "Pith review of Hiding in Plain Sight: An Effective Physical Adversarial Patch Attack against Visual-Infrared Fused Face Detection." pith.science (2026). https://pith.science/paper/WYQMSQO4

@misc{pith2026260723292,
  author       = {Pith},
  title        = {Pith review of: Hiding in Plain Sight: An Effective Physical Adversarial Patch Attack against Visual-Infrared Fused Face Detection},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/WYQMSQO4}},
  note         = {Machine review of arXiv:2607.23292}
}
read the original abstract

Deep learning-based visual-infrared fused face detection models are increasingly deployed across a wide range of applications, yet they remain susceptible to adversarial patch attacks. Most prior attacks target either the visual or the infrared image alone in the digital domain, which renders them ineffective against fused models in the physical world. Moreover, many of these methods are readily noticeable, as their patch patterns deviate substantially from those seen in the real world. In this paper, we introduce VIPatch (Visual-Infrared Patch), a novel physical adversarial patch attack that produces inconspicuous, realistic, and natural-looking patches for facial images. Specifically, VIPatch crafts a gradient-color mask together with a band-aid sticker across both the visual and infrared images, and jointly optimizes these two elements; the resulting digital patches further guide the fabrication of their physical counterparts. Experimental results show that VIPatch achieves competitive attack success rates (over 90%) in both the digital and physical domains, while keeping the patches unobtrusive to human observers.

Figures

Figures reproduced from arXiv: 2607.23292 by the authors.

Figure 1
Figure 1. An adversary spoofs and bypasses the visual [PITH_FULL_IMAGE:figures/full_fig_p001_1.png] view at source ↗
Figure 2
Figure 2. Overview of VIPatch. Image Harmonization. To minimize the disparity be￾tween the digital and physical domains, we employ actual masks rather than mask patterns and utilize UV mapping to apply them to the human face. UV mapping involves the projection of a 3D model’s surface onto a 2D image for texture mapping, thereby preserving the 3D information of the images. In our approach, the facial landmarks are extracted us… view at source ↗
Figure 3
Figure 3. Patch images versus Texture Preservation. [PITH_FULL_IMAGE:figures/full_fig_p003_3.png] view at source ↗
Figures from the paper (2 more)
Figure 5
Figure 5. Figure 5: Images with visual and infrared patches. [PITH_FULL_IMAGE:figures/full_fig_p004_5.png]
Figure 6
Figure 6. Figure 6: VIPatch’s ASRs at different angles, light conditions and distances [PITH_FULL_IMAGE:figures/full_fig_p007_6.png]

Discussion (0). Continue with ORCID to comment.

Reference graph

Works this paper leans on

278 extracted references · 36 linked inside Pith

  1. [1]

    Abdrakhmanova, M.; Kuzdeuov, A.; Jarju, S.; Khassanov, Y.; Lewis, M.; and Varol, H. A. 2021. Speakingfaces: A large-scale multimodal dataset of voice commands with visual and thermal video streams. Sensors

    2021

  2. [2]

    Athalye, A.; Engstrom, L.; Ilyas, A.; and Kwok, K. 2018. Synthesizing robust adversarial examples. In Proceedings of International Conference on Machine Learning (ICML)

    2018

  3. [3]

    Barik, S. 2020. COVID-19: Kerala Deploys Thermal Imaging Camera With ‘Face Detection’ Capability. https://www.medianama.com/2020/05/223-kerala-thermal-imaging-camera-face-detection/

    2020

  4. [4]

    Blanz, V.; and Vetter, T. 2023. A morphable model for the synthesis of 3D faces. In Seminal Graphics Papers: Pushing the Boundaries

    2023

  5. [5]

    Bradski, G. 2000. The openCV library. Dr. Dobb's Journal: Software Tools for the Professional Programmer

    2000

  6. [6]

    I.; and Wainwright, M

    Chen, J.; Jordan, M. I.; and Wainwright, M. J. 2020. Hopskipjumpattack: A query-efficient decision-based attack. In Proceedings of IEEE Symposium on Security and Privacy (SP)

    2020

  7. [7]

    Chen, P.-Y.; Zhang, H.; Sharma, Y.; Yi, J.; and Hsieh, C.-J. 2017. Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models. In Proceedings of the 10th ACM workshop on Artificial Intelligence and Security (AISec)

    2017

  8. [8]

    D.; Flammarion, N.; and Hein, M

    Croce, F.; Andriushchenko, M.; Singh, N. D.; Flammarion, N.; and Hein, M. 2022. Sparse-rs: a versatile framework for query-efficient sparse black-box adversarial attacks. In Proceedings of AAAI Conference on Artificial Intelligence (AAAI)

    2022

Show all 278 references
  1. [9]

    d link. 2020. d-link, human temperature mearsuring and fever warning systems. https://www.dlink.com.au/business-solutions/DCS-9500T-Thermal-Security-Solution-with-Facial-Recognition-Software

    2020

  2. [11]

    derronqi . 2023. yolov8-face. https://github.com/derronqi/yolov8-face?tab=readme-ov-file

    2023

  3. [12]

    G.; Xue, M.; Ma, S.; Abbasnejad, E.; and Ranasinghe, D

    Doan, B. G.; Xue, M.; Ma, S.; Abbasnejad, E.; and Ranasinghe, D. C. 2022. Tnt attacks! universal naturalistic adversarial patches against deep neural network systems. IEEE Transactions on Information Forensics and Security (TIFS)

    2022

  4. [13]

    G.; and Weinberger, K

    Guo, C.; Gardner, J.; You, Y.; Wilson, A. G.; and Weinberger, K. 2019. Simple black-box adversarial attacks. In Proceedings of International Conference on Machine Learning (ICML)

    2019

  5. [16]

    Howard. 2020. Enhance Surveillance with Thermal Security Cameras. https://community.fs.com/article/enhance-surveillance-with-thermal-security-cameras.html

    2020

  6. [17]

    Hu, C.; Shi, W.; Jiang, T.; Yao, W.; Tian, L.; Chen, X.; Zhou, J.; and Li, W. 2024. Adversarial Infrared Blocks: A Multi-View Black-Box Attack to Thermal Infrared Detectors in Physical World. Neural Networks

    2024

  7. [18]

    Hu, Z.; Huang, S.; Zhu, X.; Sun, F.; Zhang, B.; and Hu, X. 2022. Adversarial texture for fooling person detectors in the physical world. In Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)

    2022

  8. [19]

    King, D. E. 2009. Dlib-ml: A machine learning toolkit. The Journal of Machine Learning Research (JMLR)

    2009

  9. [20]

    Komkov, S.; and Petiushko, A. 2021. Advhat: Real-world adversarial attack on arcface face id system. In Proceedings of International Conference on Pattern Recognition (ICPR)

    2021

  10. [21]

    Kumar, A.; Kaur, A.; and Kumar, M. 2019. Face detection techniques: a review. Artificial Intelligence Review

    2019

  11. [22]

    Kuzdeuov, A.; Aubakirova, D.; Koishigarina, D.; and Varol, H. A. 2022. TFW: Annotated thermal faces in the wild dataset. IEEE Transactions on Information Forensics and Security (TIFS)

    2022

  12. [23]

    Li, H. 2019. Guide Sense, human temperature mearsuring and fever warning systems. https://www.guideir.com/products/fever-screeninges/qt/data_152.html

    2019

  13. [24]

    Li, H.; Xu, X.; Zhang, X.; Yang, S.; and Li, B. 2020. Qeba: Query-efficient boundary-based blackbox attack. In Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)

    2020

  14. [25]

    linzai . 2019. Ultra-Light-Fast-Generic-Face-Detector-1MB. https://github.com/Linzaer/Ultra-Light-Fast-Generic-Face-Detector-1MB

    2019

  15. [26]

    Liu, Y.; Wang, F.; Deng, J.; Zhou, Z.; Sun, B.; and Li, H. 2022. Mogface: Towards a deeper appreciation on face detection. In Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)

    2022

  16. [27]

    T.; and Wang, Z

    Liu, Y.; Wei, H.; Jia, C.; Xiao, R.; Ruan, W.; Wei, X.; Zhou, J. T.; and Wang, Z. 2025. ProjAttacker: A Configurable Physical Adversarial Attack for Face Recognition via Projector. In Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)

    2025

  17. [28]

    Meng, X.; Wang, L.; Guo, S.; Ju, L.; and Zhao, Q. 2024. Ava: Inconspicuous attribute variation-based adversarial attack bypassing deepfake detection. In 2024 IEEE Symposium on Security and Privacy (SP), 74--90. IEEE

    2024

  18. [29]

    Mohd, M. N. H.; Kashima, M.; Sato, K.; and Watanabe, M. 2014. Facial visual-infrared stereo vision fusion measurement as an alternative for physiological measurement. J. Biomedical Image Processing (JBIP)

    2014

  19. [30]

    S.; Wu, Y.; and Yang, H

    Nguyen, D.-L.; Arora, S. S.; Wu, Y.; and Yang, H. 2020. Adversarial light projection attacks on face recognition systems: A feasibility study. In Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops

    2020

  20. [31]

    Ni, T. 2024. Sensor security in virtual reality: Exploration and mitigation. In Proceedings of the 22nd Annual International Conference on Mobile Systems, Applications and Services, 758--759

    2024

  21. [32]

    Ni, T.; Chen, Y.; Song, K.; and Xu, W. 2021. A simple and fast human activity recognition system using radio frequency energy harvesting. In Adjunct Proceedings of the 2021 ACM International Joint Conference on Pervasive and Ubiquitous Computing and Proceedings of the 2021 ACM...

    2021

  22. [33]

    Ni, T.; Chen, Y.; Xu, W.; Xue, L.; and Zhao, Q. 2023 a . Xporter: A study of the multi-port charger security on privacy leakage and voice injection. In Proceedings of the 29th annual international conference on mobile computing and networking, 1--15

    2023

  23. [35]

    Ni, T.; Lan, G.; Wang, J.; Zhao, Q.; and Xu, W. 2023 b . Eavesdropping mobile app activity via \ Radio-Frequency \ energy harvesting. In 32nd USENIX Security Symposium (USENIX Security 23), 3511--3528

    2023

  24. [36]

    Ni, T.; Li, J.; Zhang, X.; Zuo, C.; Wang, W.; Xu, W.; Luo, X.; and Zhao, Q. 2023 c . Exploiting contactless side channels in wireless charging power banks for user privacy inference via few-shot learning. In Proceedings of the 29th annual international conference on mobile com...

    2023

  25. [37]

    Ni, T.; Sun, Z.; Chen, Y.; Zhou, Y.; Wang, J.; Xu, W.; Zhao, Q.; and Wang, C. 2025 a . When Good Becomes Evil: Exploring Crosstalk Attack Surfaces on Multi-Port USB Chargers. IEEE Transactions on Mobile Computing

    2025

  26. [38]

    Ni, T.; Sun, Z.; Han, M.; Xie, Y.; Lan, G.; Li, Z.; Gu, T.; and Xu, W. 2024 b . Rehsense: Towards battery-free wireless sensing via radio frequency energy harvesting. In Proceedings of the Twenty-Fifth International Symposium on Theory, Algorithmic Foundations, and Protocol De...

    2024

  27. [39]

    Ni, T.; Sun, Z.; Zhao, Q.; Lee, W.-B.; and Wang, C. 2026. When VR meets BCI:(Un) observable brainwave-aware privacy reconstruction in the metaverse via unrestricted inbuilt motion sensors. In 2026 IEEE Symposium on Security and Privacy (SP), 961--979. IEEE

    2026

  28. [40]

    Ni, T.; Zhang, X.; and Zhao, Q. 2023. Recovering fingerprints from in-display fingerprint sensors via electromagnetic side channel. In Proceedings of the 2023 ACM SIGSAC conference on computer and communications security, 253--267

    2023

  29. [41]

    Ni, T.; Zhang, X.; Zuo, C.; Li, J.; Wang, W.; Xu, W.; Luo, X.; and Zhao, Q. 2025 b . Characterizing Contactless Side-channel Eavesdropping on Wireless Chargers. IEEE Transactions on Dependable and Secure Computing

    2025

  30. [42]

    Ni, T.; Zhang, X.; Zuo, C.; Li, J.; Yan, Z.; Wang, W.; Xu, W.; Luo, X.; and Zhao, Q. 2023 d . Uncovering user interactions on smartphones via contactless wireless charging side channels. In 2023 IEEE Symposium on Security and Privacy (SP), 3399--3415. IEEE

    2023

  31. [43]

    Oh, B.-S.; Oh, K.; Teoh, A. B. J.; Lin, Z.; and Toh, K.-A. 2017. A Gabor-based network for heterogeneous face recognition. Neurocomputing

    2017

  32. [44]

    C.; and Wang, X

    Ouyang, S.; Hospedales, T.; Song, Y.-Z.; Li, X.; Loy, C. C.; and Wang, X. 2016. A survey on heterogeneous face recognition: Sketch, infrared, 3D and low-resolution. Image and Vision Computing

    2016

  33. [45]

    Pautov, M.; Melnikov, G.; Kaziakhmedov, E.; Kireev, K.; and Petiushko, A. 2019. On adversarial patches: real-world attack on arcface-100 face recognition system. In Proceedings of IEEE International Multi-Conference on Engineering, Computer and Information Sciences (SIBIRCON)

    2019

  34. [46]

    Qi, D.; Tan, W.; Yao, Q.; and Liu, J. 2022. YOLO5Face: why reinventing a face detector. In Proceedings of European Conference on Computer Vision (ECCV)

    2022

  35. [48]

    Reinhard, E.; Adhikhmin, M.; Gooch, B.; and Shirley, P. 2001. Color transfer between images. IEEE Computer Graphics and Applications

    2001

  36. [49]

    Sharif, M.; Bhagavatula, S.; Bauer, L.; and Reiter, M. K. 2016. Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition. In Proceedings of ACM SIGSAC Conference on Computer and Communications Security (CCS)

    2016

  37. [50]

    Singh, S.; and Prasad, S. 2018. Techniques and challenges of face recognition: A critical review. Procedia Computer Science

    2018

  38. [51]

    Storn, R.; and Price, K. 1997. Differential evolution--a simple and efficient heuristic for global optimization over continuous spaces. Journal of Global Optimization

    1997

  39. [52]

    Sun, Z.; Ni, T.; Chen, Y.; Duan, D.; Liu, K.; and Xu, W. 2024. Rf-egg: An rf solution for fine-grained multi-target and multi-task egg incubation sensing. In Proceedings of the 30th Annual International Conference on Mobile Computing and Networking, 528--542

    2024

  40. [53]

    Sun, Z.; Ni, T.; Hu, P.; Gu, T.; and Xu, W. 2025. SpaceSched: A Constellation-Wide Scheduling System for Resolving Ground Track Congestion in Remote Sensing. In Proceedings of the 31st Annual International Conference on Mobile Computing and Networking, 832--847

    2025

  41. [54]

    Surveillance-thermal. 2021. Enhance Surveillance with Thermal Security Cameras. https://www.gst-ir.net/?gad_source=1&gclid=CjwKCAjwuJ2xBhA3EiwAMVjkVI5_TLxF7H6xn7kf8CCU5cb0uHSC04fmwI_Sn2zYYo5tfmOx9u7vChoCHkYQAvD_BwE

    2021

  42. [55]

    Tao, G.; An, S.; Cheng, S.; Shen, G.; and Zhang, X. 2023. Hard-label black-box universal adversarial patch attack. In Proceedings of USENIX Security Symposium (USENIX Security)

    2023

  43. [56]

    Thys, S.; Van Ranst, W.; and Goedem \'e , T. 2019. Fooling automated surveillance cameras: adversarial patches to attack person detection. In Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops

    2019

  44. [57]

    Wang, J.; Liang, J.; Hu, H.; and Li, Y. 2007. Performance evaluation of infrared and visible image fusion algorithms for face recognition. In Proceedings of International Conference on Intelligent Systems and Knowledge Engineering (ISKE)

    2007

  45. [58]

    Wang, J.; Liu, Y.; Hu, Y.; Shi, H.; and Mei, T. 2021. Facex-zoo: A pytorch toolbox for face recognition. In Proceedings of ACM International Conference on Multimedia (MM)

    2021

  46. [60]

    Wang, J.; Ni, T.; Xu, G.; Zhao, Q.; and Wang, C. 2026. Adversarial patch EXterminator: Zero-shot and patch-agnostic defense framework against adversarial patch attacks. In 35th USENIX Security Symposium (USENIX Security 26)

    2026

  47. [61]

    Wang, Y.; Liu, Z.; Luo, B.; Hui, R.; and Li, F. 2024. The Invisible Polyjuice Potion: an Effective Physical Adversarial Attack against Face Recognition. In Proceedings of ACM SIGSAC Conference on Computer and Communications Security (CCS)

    2024

  48. [62]

    Wei, H.; Wang, Z.; Jia, X.; Zheng, Y.; Tang, H.; Satoh, S.; and Wang, Z. 2023. Hotcold block: Fooling thermal infrared detectors with a novel wearable design. In Proceedings of AAAI Conference on Artificial Intelligence (AAAI)

    2023

  49. [63]

    Wei, X.; Guo, Y.; and Yu, J. 2022. Adversarial sticker: A stealthy attack method in the physical world. IEEE Transactions on Pattern Analysis and Machine Intelligence (T-PAMI)

    2022

  50. [64]

    Wei, X.; Guo, Y.; Yu, J.; and Zhang, B. 2022. Simultaneously optimizing perturbations and positions for black-box adversarial patch attacks. IEEE Transactions on Pattern Analysis and Machine Intelligence (T-PAMI)

    2022

  51. [65]

    Wei, X.; Yu, J.; and Huang, Y. 2023. Physically Adversarial Infrared Patches With Learnable Shapes and Locations. In Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)

    2023

  52. [66]

    Wu, R.; Ni, T.; Sun, Z.; Sun, J.; and Xu, W. 2025. RingByte: Enhancing Text-Entry Practicality via A Singular Wearable Rotating Smart Ring. In Proceedings of the 38th Annual ACM Symposium on User Interface Software and Technology, 1--15

    2025

  53. [67]

    S.; and Goldstein, T

    Wu, Z.; Lim, S.-N.; Davis, L. S.; and Goldstein, T. 2020. Making an invisibility cloak: Real world adversarial attacks on object detectors. In Proceedings of European Conference on Computer Vision (ECCV)

    2020

  54. [68]

    Yakovleva, O.; Kovtunenko, A.; Liubchenko, V.; Honcharenko, V.; and Kobylin, O. 2023. Face Detection for Video Surveillance-based Security System. In Proceedings of International Conference on Computational Linguistics and Intelligent Systems (COLINS)

    2023

  55. [69]

    Yang, X.; Wei, F.; Zhang, H.; and Zhu, J. 2020. Design and interpretation of universal adversarial patches in face detection. In Proceedings of European Conference on Computer Vision (ECCV)

    2020

  56. [70]

    Yang, X.; Xu, L.; Pang, T.; Dong, Y.; Wang, Y.; Su, H.; and Zhu, J. 2025. Face3DAdv: Exploiting Robust Adversarial 3D Patches on Physical Face Recognition. International Journal of Computer Vision (IJCV)

    2025

  57. [72]

    Yuan, S.; Han, X.; Li, H.; Xu, G.; Jiang, W.; Ni, T.; Zhao, Q.; and Fang, Y. 2026. The fluorescent veil: A stealthy and effective physical adversarial patch against traffic sign recognition. Advances in Neural Information Processing Systems, 38: 98864--98890

    2026

  58. [74]

    Yuan, S.; Li, H.; Zhang, R.; Cao, H.; Jiang, W.; Ni, T.; Fan, W.; Zhao, Q.; and Xu, G. 2025 a . Omni-Angle Assault: An Invisible and Powerful Physical Adversarial Attack on Face Recognition. In Proceedings of International Conference on Machine Learning (ICML)

    2025

  59. [75]

    Yuan, S.; Xu, G.; Li, H.; Zhang, R.; Cao, H.; Qian, X.; Ni, T.; Zhao, Q.; and Fang, Y. 2025 b . No Trespassing: Ground-view Adversarial Patches for Privacy-aware Management in COTS Robot Vacuum Cleaner. IEEE Transactions on Dependable and Secure Computing

    2025

  60. [77]

    Zhang, K.; Zhang, Z.; Li, Z.; and Qiao, Y. 2016. Joint face detection and alignment using multitask cascaded convolutional networks. IEEE Signal Processing Letters (SPL)

    2016

  61. [78]

    Zhang, Q.; Guo, Q.; Gao, R.; Juefei-Xu, F.; Yu, H.; and Feng, W. 2024. Adversarial relighting against face recognition. IEEE Transactions on Information Forensics and Security (TIFS)

    2024

  62. [80]

    Zhao, Q.; Zuo, C.; Blasco, J.; and Lin, Z. 2022. Periscope: Comprehensive vulnerability analysis of mobile app-defined bluetooth peripherals. In Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security, 521--533

    2022

  63. [82]

    Zhu, X.; Hu, Z.; Huang, S.; Li, J.; and Hu, X. 2022. Infrared invisible clothing: Hiding from infrared detectors at multiple angles in real world. In Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)

    2022

  64. [83]

    Zolfi, A.; Avidan, S.; Elovici, Y.; and Shabtai, A. 2022. Adversarial Mask: Real-World Universal Adversarial Attack on Face Recognition Models. In Proceedings of Joint European Conference on Machine Learning and Knowledge Discovery in Databases (ECML-PKDD)

    2022

  65. [84]

    J.; and Khurshid, K

    Zulfiqar, M.; Syed, F.; Khan, M. J.; and Khurshid, K. 2019. Deep face recognition for biometric authentication. In Proceedings of International Conference on Electrical, Communication, and Computer Engineering (ICECCE)

    2019

  66. [85]

    FirstName Alpher , title =

  67. [86]

    Journal of Foo , volume = 13, number = 1, pages =

    FirstName Alpher and FirstName Fotheringham-Smythe , title =. Journal of Foo , volume = 13, number = 1, pages =

  68. [87]

    Journal of Foo , volume = 14, number = 1, pages =

    FirstName Alpher and FirstName Fotheringham-Smythe and FirstName Gamow , title =. Journal of Foo , volume = 14, number = 1, pages =

  69. [88]

    FirstName Alpher and FirstName Gamow , title =

  70. [89]

    Computer Vision -- ECCV 2022 , year =

    2022

  71. [90]

    arXiv preprint arXiv:1712.09665 , year=

    Adversarial patch , author=. arXiv preprint arXiv:1712.09665 , year=

    arXiv

  72. [91]

    arXiv preprint arXiv:1910.06261 , year=

    Real-world attack on MTCNN face detection system , author=. arXiv preprint arXiv:1910.06261 , year=

    1910 arXiv

  73. [92]

    arXiv preprint arXiv:1806.02299 , year=

    Dpatch: An adversarial patch attack on object detectors , author=. arXiv preprint arXiv:1806.02299 , year=

    arXiv

  74. [93]

    35th USENIX Security Symposium (USENIX Security 26) , year=

    Adversarial patch EXterminator: Zero-shot and patch-agnostic defense framework against adversarial patch attacks , author=. 35th USENIX Security Symposium (USENIX Security 26) , year=

  75. [94]

    2023 IEEE Symposium on Security and Privacy (SP) , pages=

    Uncovering user interactions on smartphones via contactless wireless charging side channels , author=. 2023 IEEE Symposium on Security and Privacy (SP) , pages=. 2023 , organization=

    2023

  76. [95]

    32nd USENIX Security Symposium (USENIX Security 23) , pages=

    Eavesdropping mobile app activity via \ Radio-Frequency \ energy harvesting , author=. 32nd USENIX Security Symposium (USENIX Security 23) , pages=

  77. [96]

    Proceedings of the 2023 ACM SIGSAC conference on computer and communications security , pages=

    Recovering fingerprints from in-display fingerprint sensors via electromagnetic side channel , author=. Proceedings of the 2023 ACM SIGSAC conference on computer and communications security , pages=

    2023

  78. [97]

    Proceedings of the 29th annual international conference on mobile computing and networking , pages=

    Exploiting contactless side channels in wireless charging power banks for user privacy inference via few-shot learning , author=. Proceedings of the 29th annual international conference on mobile computing and networking , pages=

  79. [98]

    Proceedings of the 29th annual international conference on mobile computing and networking , pages=

    Xporter: A study of the multi-port charger security on privacy leakage and voice injection , author=. Proceedings of the 29th annual international conference on mobile computing and networking , pages=

  80. [99]

    Proceedings of the 38th Annual ACM Symposium on User Interface Software and Technology , pages=

    RingByte: Enhancing Text-Entry Practicality via A Singular Wearable Rotating Smart Ring , author=. Proceedings of the 38th Annual ACM Symposium on User Interface Software and Technology , pages=

  81. [100]

    Proceedings of the 30th Annual International Conference on Mobile Computing and Networking , pages=

    Rf-egg: An rf solution for fine-grained multi-target and multi-task egg incubation sensing , author=. Proceedings of the 30th Annual International Conference on Mobile Computing and Networking , pages=

  82. [101]

    Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security , pages=

    Periscope: Comprehensive vulnerability analysis of mobile app-defined bluetooth peripherals , author=. Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security , pages=

    2022

  83. [102]

    A simple and fast human activity recognition system using radio frequency energy harvesting , author=. Adjunct Proceedings of the 2021 ACM International Joint Conference on Pervasive and Ubiquitous Computing and Proceedings of the 2021 ACM International Symposium on Wearable C...

    2021

  84. [103]

    Proceedings of the 31st Annual International Conference on Mobile Computing and Networking , pages=

    SpaceSched: A Constellation-Wide Scheduling System for Resolving Ground Track Congestion in Remote Sensing , author=. Proceedings of the 31st Annual International Conference on Mobile Computing and Networking , pages=

  85. [104]

    arXiv preprint arXiv:2412.14815 , year=

    Non-intrusive and unconstrained keystroke inference in vr platforms via infrared side channel , author=. arXiv preprint arXiv:2412.14815 , year=

    arXiv

  86. [105]

    arXiv preprint arXiv:2502.05224 , year=

    A survey on backdoor threats in large language models (llms): Attacks, defenses, and evaluations , author=. arXiv preprint arXiv:2502.05224 , year=

    arXiv

  87. [106]

    arXiv preprint arXiv:2502.18474 , year=

    A contemporary survey of large language model assisted program analysis , author=. arXiv preprint arXiv:2502.18474 , year=

    arXiv

  88. [107]

    Advances in Neural Information Processing Systems , volume=

    The fluorescent veil: A stealthy and effective physical adversarial patch against traffic sign recognition , author=. Advances in Neural Information Processing Systems , volume=

  89. [108]

    arXiv preprint arXiv:2401.10586 , year=

    Puridefense: Randomized local implicit adversarial purification for defending black-box query-based attacks , author=. arXiv preprint arXiv:2401.10586 , year=

    arXiv

  90. [109]

    arXiv preprint arXiv:2508.18805 , year=

    Hidden tail: Adversarial image causing stealthy resource consumption in vision-language models , author=. arXiv preprint arXiv:2508.18805 , year=

    arXiv

  91. [110]

    2024 IEEE Symposium on Security and Privacy (SP) , pages=

    Ava: Inconspicuous attribute variation-based adversarial attack bypassing deepfake detection , author=. 2024 IEEE Symposium on Security and Privacy (SP) , pages=. 2024 , organization=

    2024

  92. [111]

    IEEE Transactions on Mobile Computing , year=

    When Good Becomes Evil: Exploring Crosstalk Attack Surfaces on Multi-Port USB Chargers , author=. IEEE Transactions on Mobile Computing , year=

  93. [112]

    IEEE Transactions on Dependable and Secure Computing , year=

    Characterizing Contactless Side-channel Eavesdropping on Wireless Chargers , author=. IEEE Transactions on Dependable and Secure Computing , year=

  94. [113]

    2026 IEEE Symposium on Security and Privacy (SP) , pages=

    When VR meets BCI:(Un) observable brainwave-aware privacy reconstruction in the metaverse via unrestricted inbuilt motion sensors , author=. 2026 IEEE Symposium on Security and Privacy (SP) , pages=. 2026 , organization=

    2026

  95. [114]

    Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops , year=

    Fooling automated surveillance cameras: adversarial patches to attack person detection , author=. Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops , year=

  96. [115]

    Proceedings of AAAI Conference on Artificial Intelligence (AAAI) , year=

    Fooling thermal infrared pedestrian detectors in real world using small bulbs , author=. Proceedings of AAAI Conference on Artificial Intelligence (AAAI) , year=

  97. [116]

    Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , year=

    Infrared invisible clothing: Hiding from infrared detectors at multiple angles in real world , author=. Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , year=

  98. [117]

    Proceedings of AAAI Conference on Artificial Intelligence (AAAI) , year=

    Hotcold block: Fooling thermal infrared detectors with a novel wearable design , author=. Proceedings of AAAI Conference on Artificial Intelligence (AAAI) , year=

  99. [118]

    Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , year=

    Physically Adversarial Infrared Patches With Learnable Shapes and Locations , author=. Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , year=

  100. [119]

    Neural Networks , year=

    Adversarial Infrared Blocks: A Multi-View Black-Box Attack to Thermal Infrared Detectors in Physical World , author=. Neural Networks , year=

  101. [120]

    Proceedings of ACM SIGSAC Conference on Computer and Communications Security (CCS) , year=

    Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition , author=. Proceedings of ACM SIGSAC Conference on Computer and Communications Security (CCS) , year=

  102. [121]

    Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

    Improving transferability of adversarial patches on face recognition with generative models , author=. Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

  103. [122]

    Sensors , volume=

    Adversarial Patch Attacks on Deep-Learning-Based Face Recognition Systems Using Generative Adversarial Networks , author=. Sensors , volume=. 2023 , publisher=

    2023

  104. [123]

    arXiv preprint arXiv:2011.13526 , year=

    Robust attacks on deep learning face recognition in the physical world , author=. arXiv preprint arXiv:2011.13526 , year=

    2011 arXiv

  105. [124]

    IEEE Transactions on Pattern Analysis and Machine Intelligence (T-PAMI) , year=

    Adversarial sticker: A stealthy attack method in the physical world , author=. IEEE Transactions on Pattern Analysis and Machine Intelligence (T-PAMI) , year=

  106. [125]

    Proceedings of Joint European Conference on Machine Learning and Knowledge Discovery in Databases (ECML-PKDD) , year=

    Adversarial Mask: Real-World Universal Adversarial Attack on Face Recognition Models , author=. Proceedings of Joint European Conference on Machine Learning and Knowledge Discovery in Databases (ECML-PKDD) , year=

  107. [126]

    Proceedings of European Conference on Computer Vision (ECCV) , year=

    YOLO5Face: why reinventing a face detector , author=. Proceedings of European Conference on Computer Vision (ECCV) , year=

  108. [127]

    International Conference on Machine Learning , pages=

    Lavan: Localized and visible adversarial noise , author=. International Conference on Machine Learning , pages=. 2018 , organization=

    2018

  109. [128]

    Proceedings of the AAAI conference on artificial intelligence , volume=

    Perceptual-sensitive gan for generating adversarial patches , author=. Proceedings of the AAAI conference on artificial intelligence , volume=

  110. [129]

    Proceedings of the 10th ACM workshop on Artificial Intelligence and Security (AISec) , year=

    Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models , author=. Proceedings of the 10th ACM workshop on Artificial Intelligence and Security (AISec) , year=

  111. [130]

    Advances in neural information processing systems , volume=

    Improving black-box adversarial attacks with a transfer-based prior , author=. Advances in neural information processing systems , volume=

  112. [131]

    Proceedings of AAAI Conference on Artificial Intelligence (AAAI) , year=

    Sparse-rs: a versatile framework for query-efficient sparse black-box adversarial attacks , author=. Proceedings of AAAI Conference on Artificial Intelligence (AAAI) , year=

  113. [132]

    International conference on machine learning , pages=

    Black-box adversarial attacks with limited queries and information , author=. International conference on machine learning , pages=. 2018 , organization=

    2018

  114. [133]

    arXiv preprint arXiv:1807.07978 , year=

    Prior convictions: Black-box adversarial attacks with bandits and priors , author=. arXiv preprint arXiv:1807.07978 , year=

    arXiv

  115. [134]

    arXiv preprint arXiv:1712.04248 , year=

    Decision-based adversarial attacks: Reliable attacks against black-box machine learning models , author=. arXiv preprint arXiv:1712.04248 , year=

    arXiv

  116. [135]

    Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , year=

    Qeba: Query-efficient boundary-based blackbox attack , author=. Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , year=

  117. [136]

    International Conference on Learning Representations , year=

    Policy-driven attack: learning to query for hard-label black-box adversarial examples , author=. International Conference on Learning Representations , year=

  118. [137]

    IEEE Transactions on Information Forensics and Security (TIFS) , year=

    Tnt attacks! universal naturalistic adversarial patches against deep neural network systems , author=. IEEE Transactions on Information Forensics and Security (TIFS) , year=

  119. [138]

    Computer Vision--ECCV 2020: 16th European Conference, Glasgow, UK, August 23--28, 2020, Proceedings, Part XXVIII 16 , pages=

    Patch-wise attack for fooling deep neural network , author=. Computer Vision--ECCV 2020: 16th European Conference, Glasgow, UK, August 23--28, 2020, Proceedings, Part XXVIII 16 , pages=. 2020 , organization=

    2020

  120. [139]

    30th USENIX Security Symposium (USENIX Security 21) , pages=

    \ DRMI \ : A Dataset Reduction Technology based on Mutual Information for Black-box Attacks , author=. 30th USENIX Security Symposium (USENIX Security 21) , pages=

  121. [140]

    arXiv preprint arXiv:1611.02770 , year=

    Delving into transferable adversarial examples and black-box attacks , author=. arXiv preprint arXiv:1611.02770 , year=

    arXiv

  122. [141]

    Proceedings of the 2017 ACM on Asia conference on computer and communications security , pages=

    Practical black-box attacks against machine learning , author=. Proceedings of the 2017 ACM on Asia conference on computer and communications security , pages=

    2017

  123. [142]

    2016 IEEE symposium on security and privacy (SP) , pages=

    Distillation as a defense to adversarial perturbations against deep neural networks , author=. 2016 IEEE symposium on security and privacy (SP) , pages=. 2016 , organization=

    2016

  124. [143]

    Proceedings of European Conference on Computer Vision (ECCV) , year=

    Adversarial t-shirt! evading person detectors in a physical world , author=. Proceedings of European Conference on Computer Vision (ECCV) , year=

  125. [144]

    Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

    Universal physical camouflage attacks on object detectors , author=. Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

  126. [145]

    Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=

    Naturalistic physical adversarial patch for object detectors , author=. Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=

  127. [146]

    Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , year=

    Adversarial texture for fooling person detectors in the physical world , author=. Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , year=

  128. [147]

    Journal of Computational and Cognitive Engineering , volume=

    Multiview Robust Adversarial Stickers for Arbitrary Objects in the Physical World , author=. Journal of Computational and Cognitive Engineering , volume=

  129. [148]

    TPatch: A Triggered Physical Adversarial Patch , author=

  130. [149]

    Proceedings of ICNN'95-international conference on neural networks , volume=

    Particle swarm optimization , author=. Proceedings of ICNN'95-international conference on neural networks , volume=. 1995 , organization=

    1995

  131. [150]

    Journal of Global Optimization , year=

    Differential evolution--a simple and efficient heuristic for global optimization over continuous spaces , author=. Journal of Global Optimization , year=

  132. [151]

    ACM Transactions on Privacy and Security (TOPS) , volume=

    A general framework for adversarial examples with objectives , author=. ACM Transactions on Privacy and Security (TOPS) , volume=. 2019 , publisher=

    2019

  133. [152]

    2021 International Conference of the Biometrics Special Interest Group (BIOSIG) , pages=

    On brightness agnostic adversarial examples against face recognition systems , author=. 2021 International Conference of the Biometrics Special Interest Group (BIOSIG) , pages=. 2021 , organization=

    2021

  134. [153]

    Proceedings of the IEEE/CVF Winter Conference on Applications of Computer Vision , pages=

    Powerful physical adversarial examples against practical face recognition systems , author=. Proceedings of the IEEE/CVF Winter Conference on Applications of Computer Vision , pages=

  135. [154]

    Proceedings of IEEE International Multi-Conference on Engineering, Computer and Information Sciences (SIBIRCON) , year=

    On adversarial patches: real-world attack on arcface-100 face recognition system , author=. Proceedings of IEEE International Multi-Conference on Engineering, Computer and Information Sciences (SIBIRCON) , year=

  136. [155]

    Proceedings of ACM International Conference on Multimedia (MM) , year=

    Facex-zoo: A pytorch toolbox for face recognition , author=. Proceedings of ACM International Conference on Multimedia (MM) , year=

  137. [156]

    Proceedings of the IEEE conference on computer vision and pattern recognition , pages=

    Understanding deep image representations by inverting them , author=. Proceedings of the IEEE conference on computer vision and pattern recognition , pages=

  138. [157]

    arXiv 2018 , author=

    Joint 3D Face Reconstruction and Dense Alignment with Position Map Regression Network. arXiv 2018 , author=

    2018

  139. [158]

    European Conference on Computer Vision , pages=

    Patchattack: A black-box texture-based attack with reinforcement learning , author=. European Conference on Computer Vision , pages=. 2020 , organization=

    2020

  140. [159]

    Proceedings of International Conference on Machine Learning (ICML) , year=

    Synthesizing robust adversarial examples , author=. Proceedings of International Conference on Machine Learning (ICML) , year=

  141. [160]

    Sensors , year=

    Speakingfaces: A large-scale multimodal dataset of voice commands with visual and thermal video streams , author=. Sensors , year=

  142. [161]

    arXiv preprint arXiv:1905.00641 , year=

    Retinaface: Single-stage dense face localisation in the wild , author=. arXiv preprint arXiv:1905.00641 , year=

    1905 arXiv

  143. [162]

    The Journal of Machine Learning Research (JMLR) , year=

    Dlib-ml: A machine learning toolkit , author=. The Journal of Machine Learning Research (JMLR) , year=

  144. [163]

    , author=

    The openCV library. , author=. Dr. Dobb's Journal: Software Tools for the Professional Programmer , year=

  145. [164]

    2022 IEEE/SICE International Symposium on System Integration (SII) , pages=

    SF-TL54: A Thermal Facial Landmark Dataset with Visual Pairs , author=. 2022 IEEE/SICE International Symposium on System Integration (SII) , pages=. 2022 , organization=

    2022

  146. [165]

    Proceedings of European Conference on Computer Vision (ECCV) , year=

    Making an invisibility cloak: Real world adversarial attacks on object detectors , author=. Proceedings of European Conference on Computer Vision (ECCV) , year=

  147. [166]

    Proceedings of the 28th ACM International Conference on Multimedia , pages=

    Adv-watermark: A novel watermark perturbation for adversarial examples , author=. Proceedings of the 28th ACM International Conference on Multimedia , pages=

  148. [167]

    Proceedings of IEEE Symposium on Security and Privacy (SP) , year=

    Hopskipjumpattack: A query-efficient decision-based attack , author=. Proceedings of IEEE Symposium on Security and Privacy (SP) , year=

  149. [168]

    Proceedings of USENIX Security Symposium (USENIX Security) , year=

    Hard-label black-box universal adversarial patch attack , author=. Proceedings of USENIX Security Symposium (USENIX Security) , year=

  150. [169]

    IEEE Transactions on Pattern Analysis and Machine Intelligence (T-PAMI) , year=

    Simultaneously optimizing perturbations and positions for black-box adversarial patch attacks , author=. IEEE Transactions on Pattern Analysis and Machine Intelligence (T-PAMI) , year=

  151. [170]

    arXiv preprint arXiv:2105.04714 , year=

    Sample and computation redistribution for efficient face detection , author=. arXiv preprint arXiv:2105.04714 , year=

    arXiv

  152. [171]

    IEEE Signal Processing Letters (SPL) , year=

    Joint face detection and alignment using multitask cascaded convolutional networks , author=. IEEE Signal Processing Letters (SPL) , year=

  153. [172]

    Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

    DSFD: dual shot face detector , author=. Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

  154. [173]

    Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , year=

    Mogface: Towards a deeper appreciation on face detection , author=. Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , year=

  155. [174]

    IEEE Transactions on Information Forensics and Security (TIFS) , year=

    TFW: Annotated thermal faces in the wild dataset , author=. IEEE Transactions on Information Forensics and Security (TIFS) , year=

  156. [175]

    arXiv preprint arXiv:2106.14490 , year=

    Making images real again: A comprehensive survey on deep image composition , author=. arXiv preprint arXiv:2106.14490 , year=

  157. [176]

    Seminal Graphics Papers: Pushing the Boundaries , year=

    A morphable model for the synthesis of 3D faces , author=. Seminal Graphics Papers: Pushing the Boundaries , year=

  158. [177]

    32nd USENIX Security Symposium (USENIX Security 23) , pages=

    \ CAPatch \ : Physical Adversarial Patch against Image Captioning Systems , author=. 32nd USENIX Security Symposium (USENIX Security 23) , pages=

  159. [178]

    arXiv preprint arXiv:1608.00853 , year=

    A study of the effect of jpg compression on adversarial images , author=. arXiv preprint arXiv:1608.00853 , year=

    arXiv

  160. [179]

    Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

    Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection , author=. Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

  161. [180]

    2019 IEEE Winter Conference on Applications of Computer Vision (WACV) , pages=

    Local gradients smoothing: Defense against localized adversarial attacks , author=. 2019 IEEE Winter Conference on Applications of Computer Vision (WACV) , pages=. 2019 , organization=

    2019

  162. [181]

    Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops , year=

    Adversarial light projection attacks on face recognition systems: A feasibility study , author=. Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops , year=

  163. [182]

    Proceedings of European Conference on Computer Vision (ECCV) , year=

    Design and interpretation of universal adversarial patches in face detection , author=. Proceedings of European Conference on Computer Vision (ECCV) , year=

  164. [183]

    Proceedings of International Conference on Pattern Recognition (ICPR) , year=

    Advhat: Real-world adversarial attack on arcface face id system , author=. Proceedings of International Conference on Pattern Recognition (ICPR) , year=

  165. [184]

    arXiv preprint arXiv:2105.03162 , year=

    Adv-makeup: A new imperceptible and transferable attack on face recognition , author=. arXiv preprint arXiv:2105.03162 , year=

    arXiv

  166. [185]

    IEEE Computer Graphics and Applications , year=

    Color transfer between images , author=. IEEE Computer Graphics and Applications , year=

  167. [186]

    Advanced Computing in Electron Microscopy , year=

    Bilinear interpolation , author=. Advanced Computing in Electron Microscopy , year=

  168. [187]

    IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS) , year=

    Vision-based mapping with backward correction , author=. IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS) , year=

  169. [188]

    Proceedings of the 2022 ACM SIGSAC conference on computer and communications security , pages=

    Harnessing perceptual adversarial patches for crowd counting , author=. Proceedings of the 2022 ACM SIGSAC conference on computer and communications security , pages=

    2022

  170. [189]

    IEEE Access , volume=

    Adversarial patch attacks on monocular depth estimation networks , author=. IEEE Access , volume=. 2020 , publisher=

    2020

  171. [190]

    30th USENIX security symposium (USENIX Security 21) , pages=

    Dirty road can attack: Security of deep learning based automated lane centering under \ Physical-World \ attack , author=. 30th USENIX security symposium (USENIX Security 21) , pages=

  172. [191]

    Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security , pages=

    Specpatch: Human-in-the-loop adversarial audio spectrogram patch attack on speech recognition , author=. Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security , pages=

    2022

  173. [192]

    arXiv preprint arXiv:2001.11137 , year=

    Adversarial attacks on convolutional neural networks in facial recognition domain , author=. arXiv preprint arXiv:2001.11137 , year=

    2001 arXiv

  174. [193]

    2023 , publisher=

    Is adversarial training really a silver bullet for mitigating data poisoning? , author=. 2023 , publisher=

    2023

  175. [194]

    30th USENIX Security Symposium (USENIX Security 21) , pages=

    Adversarial policy training against deep reinforcement learning , author=. 30th USENIX Security Symposium (USENIX Security 21) , pages=

  176. [195]

    Proceedings of Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops (DSN-W) , year=

    IB-RAR: Information Bottleneck as Regularizer for Adversarial Robustness , author=. Proceedings of Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops (DSN-W) , year=

  177. [196]

    Proceedings of the 4th Workshop on Trustworthy Natural Language Processing (TrustNLP 2024) , pages=

    Semantic-Preserving Adversarial Example Attack against BERT , author=. Proceedings of the 4th Workshop on Trustworthy Natural Language Processing (TrustNLP 2024) , pages=

    2024

  178. [197]

    arXiv preprint arXiv:1412.6572 , year=

    Explaining and harnessing adversarial examples , author=. arXiv preprint arXiv:1412.6572 , year=

    arXiv

  179. [198]

    Artificial intelligence safety and security , pages=

    Adversarial examples in the physical world , author=. Artificial intelligence safety and security , pages=. 2018 , publisher=

    2018

  180. [199]

    Proceedings of the IEEE conference on computer vision and pattern recognition , pages=

    Boosting adversarial attacks with momentum , author=. Proceedings of the IEEE conference on computer vision and pattern recognition , pages=

  181. [200]

    arXiv preprint arXiv:1706.06083 , year=

    Towards deep learning models resistant to adversarial attacks , author=. arXiv preprint arXiv:1706.06083 , year=

    arXiv

  182. [201]

    Proceedings of the IEEE international conference on computer vision , pages=

    Adversarial examples for semantic segmentation and object detection , author=. Proceedings of the IEEE international conference on computer vision , pages=

  183. [202]

    2017 ieee symposium on security and privacy (sp) , pages=

    Towards evaluating the robustness of neural networks , author=. 2017 ieee symposium on security and privacy (sp) , pages=. 2017 , organization=

    2017

  184. [203]

    , author=

    Depth Camera Technology Comparison and Performance Evaluation. , author=. ICPRAM (2) , pages=

  185. [204]

    A Perturbation Analysis of Input Transformations for Adversarial Attacks , author=

  186. [205]

    Advances in Neural Information Processing Systems , volume=

    Lower bounds on adversarial robustness from optimal transport , author=. Advances in Neural Information Processing Systems , volume=

  187. [206]

    Proceedings of International Conference on Machine Learning (ICML) , year=

    Simple black-box adversarial attacks , author=. Proceedings of International Conference on Machine Learning (ICML) , year=

  188. [207]

    arXiv preprint arXiv:1711.00117 , year=

    Countering adversarial images using input transformations , author=. arXiv preprint arXiv:1711.00117 , year=

    arXiv

  189. [208]

    Proceedings of the 29th ACM International Conference on Multimedia , pages=

    Towards adversarial patch analysis and certified defense against crowd counting , author=. Proceedings of the 29th ACM International Conference on Multimedia , pages=

  190. [209]

    arXiv preprint arXiv:1803.09638 , year=

    On the limitation of local intrinsic dimensionality for characterizing the subspaces of adversarial examples , author=. arXiv preprint arXiv:1803.09638 , year=

    arXiv

  191. [210]

    Proceedings of AAAI Conference on Artificial Intelligence (AAAI) , year=

    Connecting the digital and physical world: Improving the robustness of adversarial attacks , author=. Proceedings of AAAI Conference on Artificial Intelligence (AAAI) , year=

  192. [211]

    arXiv preprint arXiv:2207.00694 , year=

    Efficient adversarial training with data pruning , author=. arXiv preprint arXiv:2207.00694 , year=

    arXiv

  193. [212]

    Proceedings of Advances in Neural Information Processing Systems (NeurIPS) , year=

    Generating steganographic images via adversarial training , author=. Proceedings of Advances in Neural Information Processing Systems (NeurIPS) , year=

  194. [213]

    arXiv preprint arXiv:1912.09899 , year=

    Certified robustness for top-k predictions against adversarial perturbations via randomized smoothing , author=. arXiv preprint arXiv:1912.09899 , year=

    1912 arXiv

  195. [214]

    Pattern Recognition , year=

    ImageNet-Patch: A dataset for benchmarking machine learning robustness against adversarial patches , author=. Pattern Recognition , year=

  196. [215]

    arXiv preprint arXiv:2006.08669 , year=

    On adversarial bias and the robustness of fair machine learning , author=. arXiv preprint arXiv:2006.08669 , year=

    2006 arXiv

  197. [216]

    Proceedings of IEEE International Conference on Tools with Artificial Intelligence (ICTAI) , year=

    Achieving Both Model Accuracy and Robustness by Adversarial Training with Batch Norm Shaping , author=. Proceedings of IEEE International Conference on Tools with Artificial Intelligence (ICTAI) , year=

  198. [217]

    arXiv preprint arXiv:2012.00909 , year=

    Visually imperceptible adversarial patch attacks on digital images , author=. arXiv preprint arXiv:2012.00909 , year=

    2012 arXiv

  199. [218]

    arXiv preprint arXiv:2006.03089 , year=

    Towards understanding fast adversarial training , author=. arXiv preprint arXiv:2006.03089 , year=

    2006 arXiv

  200. [219]

    Proceedings of Advances in Neural Information Processing Systems (NeurIPS) , year=

    Hydra: Pruning adversarially robust neural networks , author=. Proceedings of Advances in Neural Information Processing Systems (NeurIPS) , year=

  201. [220]

    Proceedings of the 15th ACM Asia conference on computer and communications security , pages=

    Sirenattack: Generating adversarial audio for end-to-end acoustic systems , author=. Proceedings of the 15th ACM Asia conference on computer and communications security , pages=

  202. [221]

    European conference on computer vision , pages=

    Physical attack on monocular depth estimation with optimal adversarial patches , author=. European conference on computer vision , pages=. 2022 , organization=

    2022

  203. [222]

    32nd USENIX Security Symposium (USENIX Security 23) , pages=

    Discovering adversarial driving maneuvers against autonomous vehicles , author=. 32nd USENIX Security Symposium (USENIX Security 23) , pages=

  204. [223]

    arXiv preprint arXiv:1809.00065 , year=

    Muldef: Multi-model-based defense against adversarial examples for neural networks , author=. arXiv preprint arXiv:1809.00065 , year=

    arXiv

  205. [224]

    IEEE Transactions on Dependable and Secure Computing , volume=

    Automatic generation of adversarial readable chinese texts , author=. IEEE Transactions on Dependable and Secure Computing , volume=. 2022 , publisher=

    2022

  206. [225]

    IEEE Transactions on Dependable and Secure Computing , volume=

    Uniap: Protecting speech privacy with non-targeted universal adversarial perturbations , author=. IEEE Transactions on Dependable and Secure Computing , volume=. 2023 , publisher=

    2023

  207. [226]

    arXiv preprint arXiv:2308.07847 , year=

    Robustness Over Time: Understanding Adversarial Examples' Effectiveness on Longitudinal Versions of Large Language Models , author=. arXiv preprint arXiv:2308.07847 , year=

  208. [227]

    arXiv preprint arXiv:2207.05327 , year=

    Certified adversarial robustness via anisotropic randomized smoothing , author=. arXiv preprint arXiv:2207.05327 , year=

    arXiv

  209. [228]

    Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security , pages=

    A hard label black-box adversarial attack against graph neural networks , author=. Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security , pages=

    2021

  210. [229]

    2020 , publisher=

    The role of data geometry in adversarial machine learning , author=. 2020 , publisher=

    2020

  211. [230]

    Proceedings of 2nd Workshop on New Frontiers in Adversarial Machine Learning (AdvML) , year=

    A Theoretical Perspective on the Robustness of Feature Extractors , author=. Proceedings of 2nd Workshop on New Frontiers in Adversarial Machine Learning (AdvML) , year=

  212. [231]

    2019 IEEE International symposium on dynamic spectrum access networks (DySPAN) , pages=

    Semi-black-box attacks against speech recognition systems using adversarial samples , author=. 2019 IEEE International symposium on dynamic spectrum access networks (DySPAN) , pages=. 2019 , organization=

    2019

  213. [232]

    Guide Sense, human temperature mearsuring and fever warning systems , howpublished =

    Huang Li , year=. Guide Sense, human temperature mearsuring and fever warning systems , howpublished =

  214. [233]

    COVID-19: Kerala Deploys Thermal Imaging Camera With ‘Face Detection’ Capability , howpublished=

    Soumyarendra Barik , year=. COVID-19: Kerala Deploys Thermal Imaging Camera With ‘Face Detection’ Capability , howpublished=

  215. [234]

    dali tech, human temperature mearsuring and fever warning systems , howpublished=

    dali , year=. dali tech, human temperature mearsuring and fever warning systems , howpublished=

  216. [235]

    d-link, human temperature mearsuring and fever warning systems , howpublished=

    d-link , year=. d-link, human temperature mearsuring and fever warning systems , howpublished=

  217. [236]

    Enhance Surveillance with Thermal Security Cameras , howpublished=

    Howard , year=. Enhance Surveillance with Thermal Security Cameras , howpublished=

  218. [237]

    Enhance Surveillance with Thermal Security Cameras , howpublished =

    Surveillance-thermal , year =. Enhance Surveillance with Thermal Security Cameras , howpublished =

  219. [238]

    Proceedings of International Conference on Electrical, Communication, and Computer Engineering (ICECCE) , year=

    Deep face recognition for biometric authentication , author=. Proceedings of International Conference on Electrical, Communication, and Computer Engineering (ICECCE) , year=

  220. [239]

    IEEE Transactions on Biometrics, Behavior, and Identity Science (T-BIOM) , year=

    A fast and accurate system for face detection, identification, and verification , author=. IEEE Transactions on Biometrics, Behavior, and Identity Science (T-BIOM) , year=

  221. [240]

    Proceedings of International Conference on Computational Linguistics and Intelligent Systems (COLINS) , year=

    Face Detection for Video Surveillance-based Security System , author=. Proceedings of International Conference on Computational Linguistics and Intelligent Systems (COLINS) , year=

  222. [241]

    Proceedings of International Conference on Computer Science and Education (ICCSE) , year=

    Face detection for security surveillance system , author=. Proceedings of International Conference on Computer Science and Education (ICCSE) , year=

  223. [242]

    , author=

    Real Time Face Detection and Facial Expression Recognition: Development and Applications to Human Computer Interaction. , author=. 2003 Conference on computer vision and pattern recognition workshop , volume=. 2003 , organization=

    2003

  224. [243]

    arXiv preprint arXiv:1203.6722 , year=

    Face expression recognition and analysis: the state of the art , author=. arXiv preprint arXiv:1203.6722 , year=

    arXiv

  225. [244]

    2019 5th conference on knowledge based engineering and innovation (KBEI) , pages=

    Realtime face-detection and emotion recognition using mtcnn and minishufflenet v2 , author=. 2019 5th conference on knowledge based engineering and innovation (KBEI) , pages=. 2019 , organization=

    2019

  226. [245]

    Journal of Artificial Intelligence and Systems , volume=

    Emotion recognition and detection methods: A comprehensive survey , author=. Journal of Artificial Intelligence and Systems , volume=. 2020 , publisher=

    2020

  227. [246]

    Artificial Intelligence Review , year=

    Face detection techniques: a review , author=. Artificial Intelligence Review , year=

  228. [247]

    Procedia Computer Science , year=

    Techniques and challenges of face recognition: A critical review , author=. Procedia Computer Science , year=

  229. [248]

    Facial visual-infrared stereo vision fusion measurement as an alternative for physiological measurement , author=. J. Biomedical Image Processing (JBIP) , year=

  230. [249]

    Proceedings of International Conference on Intelligent Systems and Knowledge Engineering (ISKE) , year=

    Performance evaluation of infrared and visible image fusion algorithms for face recognition , author=. Proceedings of International Conference on Intelligent Systems and Knowledge Engineering (ISKE) , year=

  231. [250]

    Image and Vision Computing , year=

    A survey on heterogeneous face recognition: Sketch, infrared, 3D and low-resolution , author=. Image and Vision Computing , year=

  232. [251]

    Neurocomputing , year=

    A Gabor-based network for heterogeneous face recognition , author=. Neurocomputing , year=

  233. [252]

    arXiv preprint arXiv:1409.1556 , year=

    Very deep convolutional networks for large-scale image recognition , author=. arXiv preprint arXiv:1409.1556 , year=

    arXiv

  234. [253]

    Computer Vision--ECCV 2014: 13th European Conference, Zurich, Switzerland, September 6-12, 2014, Proceedings, Part I 13 , pages=

    Visualizing and understanding convolutional networks , author=. Computer Vision--ECCV 2014: 13th European Conference, Zurich, Switzerland, September 6-12, 2014, Proceedings, Part I 13 , pages=. 2014 , organization=

    2014

  235. [254]

    Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

    Mirrorgan: Learning text-to-image generation by redescription , author=. Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

  236. [255]

    Advances in neural information processing systems , volume=

    Photorealistic text-to-image diffusion models with deep language understanding , author=. Advances in neural information processing systems , volume=

  237. [256]

    arXiv preprint arXiv:2012.09958 , year=

    Toward transformer-based object detection , author=. arXiv preprint arXiv:2012.09958 , year=

    2012 arXiv

  238. [257]

    arXiv preprint arXiv:1805.12152 , year=

    Robustness may be at odds with accuracy , author=. arXiv preprint arXiv:1805.12152 , year=

    arXiv

  239. [258]

    arXiv preprint arXiv:1911.11484 , year=

    Using depth for pixel-wise detection of adversarial attacks in crowd counting , author=. arXiv preprint arXiv:1911.11484 , year=

    1911 arXiv

  240. [259]

    arXiv preprint arXiv:1709.03423 , year=

    Ensemble methods as a defense to adversarial perturbations against deep neural networks , author=. arXiv preprint arXiv:1709.03423 , year=

    arXiv

  241. [260]

    Astronomy & Astrophysics , volume=

    The performance of the blue prime focus large binocular camera at the large binocular telescope , author=. Astronomy & Astrophysics , volume=. 2008 , publisher=

    2008

  242. [261]

    2021 international conference on intelligent technologies (CONIT) , pages=

    A study on transformer-based object detection , author=. 2021 international conference on intelligent technologies (CONIT) , pages=. 2021 , organization=

    2021

  243. [262]

    Adaptation, learning, and optimization , volume=

    Reinforcement learning , author=. Adaptation, learning, and optimization , volume=. 2012 , publisher=

    2012

  244. [263]

    arXiv preprint arXiv:1704.01155 , year=

    Feature squeezing: Detecting adversarial examples in deep neural networks , author=. arXiv preprint arXiv:1704.01155 , year=

    arXiv

  245. [264]

    Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=

    Improving generalization of adversarial training via robust critical fine-tuning , author=. Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=

  246. [265]

    FADE: enabling large-scale federated adversarial training on resource-constrained edge devices , author=

  247. [266]

    Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=

    Adversarial example detection using latent neighborhood graph , author=. Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=

  248. [267]

    IEEE Transactions on Cybernetics , volume=

    Daedalus: Breaking nonmaximum suppression in object detection via adversarial examples , author=. IEEE Transactions on Cybernetics , volume=. 2021 , publisher=

    2021

  249. [268]

    IEEE Transactions on Dependable and Secure Computing , volume=

    Mitigating adversarial gray-box attacks against phishing detectors , author=. IEEE Transactions on Dependable and Secure Computing , volume=. 2022 , publisher=

    2022

  250. [269]

    IEEE Transactions on Dependable and Secure Computing (TDSC) , year=

    Adversarial robustness of deep neural networks: A survey from a formal verification perspective , author=. IEEE Transactions on Dependable and Secure Computing (TDSC) , year=

  251. [270]

    31st USENIX Security Symposium (USENIX Security 22) , pages=

    Rolling colors: Adversarial laser exploits against traffic light recognition , author=. 31st USENIX Security Symposium (USENIX Security 22) , pages=

  252. [271]

    Proceedings of European Conference on Computer Vision (ECCV) , year=

    Improving adversarial robustness of 3D point cloud classification models , author=. Proceedings of European Conference on Computer Vision (ECCV) , year=

  253. [272]

    Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

    Fingerprinting deep neural networks globally via universal adversarial perturbations , author=. Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

  254. [273]

    2019 49th annual IEEE/IFIP international conference on dependable systems and networks (DSN) , pages=

    A multiversion programming inspired approach to detecting audio adversarial examples , author=. 2019 49th annual IEEE/IFIP international conference on dependable systems and networks (DSN) , pages=. 2019 , organization=

    2019

  255. [274]

    Proceedings of IEEE symposium series on computational intelligence (SSCI) , year=

    Rallying adversarial techniques against deep learning for network security , author=. Proceedings of IEEE symposium series on computational intelligence (SSCI) , year=

  256. [275]

    Proceedings of International Symposium on Quality Electronic Design (ISQED) , year=

    Code-bridged classifier (cbc): A low or negative overhead defense for making a cnn classifier robust against adversarial attacks , author=. Proceedings of International Symposium on Quality Electronic Design (ISQED) , year=

  257. [276]

    30th USENIX Security Symposium (USENIX Security 21) , pages=

    \ SLAP \ : Improving physical adversarial examples with \ Short-Lived \ adversarial perturbations , author=. 30th USENIX Security Symposium (USENIX Security 21) , pages=

  258. [277]

    Proceedings of the 2019 ACM SIGSAC conference on computer and communications security , pages=

    Memguard: Defending against black-box membership inference attacks via adversarial examples , author=. Proceedings of the 2019 ACM SIGSAC conference on computer and communications security , pages=

    2019

  259. [278]

    2020 IEEE symposium on security and privacy (SP) , pages=

    Intriguing properties of adversarial ml attacks in the problem space , author=. 2020 IEEE symposium on security and privacy (SP) , pages=. 2020 , organization=

    2020

  260. [279]

    Reversing and Offensive-oriented Trends Symposium , pages=

    No need to teach new tricks to old malware: Winning an evasion challenge with xor-based adversarial samples , author=. Reversing and Offensive-oriented Trends Symposium , pages=

  261. [280]

    arXiv preprint arXiv:2409.12394 , year=

    Itpatch: An invisible and triggered physical adversarial patch against traffic sign recognition , author=. arXiv preprint arXiv:2409.12394 , year=

  262. [281]

    IEEE Transactions on Dependable and Secure Computing , year=

    No Trespassing: Ground-view Adversarial Patches for Privacy-aware Management in COTS Robot Vacuum Cleaner , author=. IEEE Transactions on Dependable and Secure Computing , year=

  263. [282]

    Proceedings of International Conference on Machine Learning (ICML) , year=

    Omni-Angle Assault: An Invisible and Powerful Physical Adversarial Attack on Face Recognition , author=. Proceedings of International Conference on Machine Learning (ICML) , year=

  264. [283]

    Proceedings of the Twenty-Fifth International Symposium on Theory, Algorithmic Foundations, and Protocol Design for Mobile Networks and Mobile Computing , pages=

    Rehsense: Towards battery-free wireless sensing via radio frequency energy harvesting , author=. Proceedings of the Twenty-Fifth International Symposium on Theory, Algorithmic Foundations, and Protocol Design for Mobile Networks and Mobile Computing , pages=

  265. [284]

    Proceedings of the 22nd Annual International Conference on Mobile Systems, Applications and Services , pages=

    Sensor security in virtual reality: Exploration and mitigation , author=. Proceedings of the 22nd Annual International Conference on Mobile Systems, Applications and Services , pages=

  266. [285]

    Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , year=

    ProjAttacker: A Configurable Physical Adversarial Attack for Face Recognition via Projector , author=. Proceedings of IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) , year=

  267. [286]

    IEEE Transactions on Information Forensics and Security (TIFS) , year=

    Adversarial relighting against face recognition , author=. IEEE Transactions on Information Forensics and Security (TIFS) , year=

  268. [287]

    International Journal of Computer Vision (IJCV) , year=

    Face3DAdv: Exploiting Robust Adversarial 3D Patches on Physical Face Recognition , author=. International Journal of Computer Vision (IJCV) , year=

  269. [288]

    Proceedings of ACM SIGSAC Conference on Computer and Communications Security (CCS) , year=

    The Invisible Polyjuice Potion: an Effective Physical Adversarial Attack against Face Recognition , author=. Proceedings of ACM SIGSAC Conference on Computer and Communications Security (CCS) , year=

  270. [289]

    arXiv preprint arXiv:2505.12045 , year=

    FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition , author=. arXiv preprint arXiv:2505.12045 , year=

    arXiv

Pith tools

Reviewed July 31, 2026 · model on record in the stance chip above.