{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,27]],"date-time":"2026-06-27T16:48:10Z","timestamp":1782578890716,"version":"3.54.5"},"reference-count":44,"publisher":"Springer Science and Business Media LLC","issue":"9","license":[{"start":{"date-parts":[[2026,6,27]],"date-time":"2026-06-27T00:00:00Z","timestamp":1782518400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,6,27]],"date-time":"2026-06-27T00:00:00Z","timestamp":1782518400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100004858","name":"Sichuan University of Science & Engineering","doi-asserted-by":"crossref","award":["Y2025100"],"award-info":[{"award-number":["Y2025100"]}],"id":[{"id":"10.13039\/501100004858","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Tibet Science and Technology Program","award":["XZ202401YD0023"],"award-info":[{"award-number":["XZ202401YD0023"]}]},{"name":"Central Guidance for Local Science and Technology Development Fund Projects","award":["2024ZYD0266"],"award-info":[{"award-number":["2024ZYD0266"]}]},{"name":"the Key Laboratory Project of Enterprise Informatization and IoT Measurement and Control Technology for Universities in Sichuan Province","award":["2024WYJ06"],"award-info":[{"award-number":["2024WYJ06"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Vis Comput"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1007\/s00371-026-04507-w","type":"journal-article","created":{"date-parts":[[2026,6,27]],"date-time":"2026-06-27T16:21:05Z","timestamp":1782577265000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Enhancing face recognition robustness: AdvFaceDefGAN against dual-identity attacks"],"prefix":"10.1007","volume":"42","author":[{"given":"Jie","family":"Gao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hong","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yunfei","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yefei","family":"Lei","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,6,27]]},"reference":[{"key":"4507_CR1","doi-asserted-by":"publisher","DOI":"10.7717\/peerj-cs.2904","volume":"11","author":"H Huang","year":"2025","unstructured":"Huang, H., Yang, Y., Wang, Y.: AdvFaceGAN: a face dual-identity impersonation attack method based on generative adversarial networks. PeerJ Comput. Sci. 11, e2904 (2025)","journal-title":"PeerJ Comput. Sci."},{"key":"4507_CR2","unstructured":"Wu, B., Wei, S., Zhu, M., et al.: Defenses in adversarial machine learning: a survey. (2023)"},{"key":"4507_CR3","doi-asserted-by":"crossref","unstructured":"Wang, Y., Sun, T., Li, S., et al.: Adversarial attacks and defenses in machine learning-powered networks: a contemporary survey. (2023)","DOI":"10.1109\/COMST.2023.3319492"},{"key":"4507_CR4","doi-asserted-by":"crossref","unstructured":"Bai, T., Luo, J., Zhao, J., et al.: Recent advances in adversarial training for adversarial robustness. (2021)","DOI":"10.24963\/ijcai.2021\/591"},{"key":"4507_CR5","unstructured":"Madry, A., Makelov, A., Schmidt, L., et al.: Towards deep learning models resistant to adversarial attacks. In Proceedings of the 6th International Conference on Learning Representations (ICLR 2018), (2019)"},{"key":"4507_CR6","unstructured":"Zhang, H., Yu, Y., Jiao, J., et al.: Theoretically principled trade-off between robustness and accuracy. In Proceedings of the International conference on machine learning (ICML). New York: ICML Press, 2019: 7472\u20137482."},{"key":"4507_CR7","doi-asserted-by":"crossref","unstructured":"Xie, C., Tan, M., Gong, B., et al.: Adversarial examples improve image recognition. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. 2020: 819\u2013828.","DOI":"10.1109\/CVPR42600.2020.00090"},{"key":"4507_CR8","unstructured":"Dziugaite, G.K., Ghahramani, Z., Roy, D.M: A study of the effect of jpg compression on adversarial images. (2016)"},{"key":"4507_CR9","unstructured":"Xie, C., Wu, Y., Van der Maaten, L., et al:. Mitigating adversarial effects through randomization. In Proceedings of the 6th International Conference on Learning Representations (ICLR 2018). (2018)"},{"key":"4507_CR10","doi-asserted-by":"crossref","unstructured":"Liu, Z., Liu, Q., Liu, Y., et al.: Feature distillation: DNN-oriented JPEG compression against adversarial examples. In Proceedings of the 2019 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR). Piscataway, NJ: IEEE, 2019: 860\u2013868.","DOI":"10.1109\/CVPR.2019.00095"},{"key":"4507_CR11","unstructured":"Guo, C., Rana, M., Cisse, M., et al.: Countering adversarial images using input transformations. In Proceedings of the 6th International Conference on Learning Representations (ICLR 2018). (2018)."},{"key":"4507_CR12","doi-asserted-by":"crossref","unstructured":"Papernot, N., Mcdaniel, P., Wu. X., et al.: Distillation as a defense to adversarial perturbations against deep neural networks. In Proceedings of the 2016 IEEE Symposium on Security and Privacy (SP). Piscataway, NJ: IEEE, 2016: 582\u2013597.","DOI":"10.1109\/SP.2016.41"},{"key":"4507_CR13","unstructured":"Shafahi, A., Najibi, M., Ghiasi, M.A., et al.: Adversarial training for free!. Adv. Neural Inf. Process. Syst. 32 (2019)"},{"key":"4507_CR14","unstructured":"Samangouei, P., Kabkab, M., Chellappa, R.: Defense-GAN: Protecting classifiers against adversarial attacks using generative model. In Proceedings of the 6th International Conference on Learning Representations (ICLR 2018) (2018)"},{"key":"4507_CR15","unstructured":"Nie, W., Guo, B,. Huang, Y., et al. Diffusion models for adversarial purification. (2022)"},{"key":"4507_CR16","unstructured":"Wang, J., Lyu, Z., Lin, D., et al.: Guided diffusion model for adversarial purification. (2022)"},{"key":"4507_CR17","doi-asserted-by":"crossref","unstructured":"Dong, Y., Liao, F., Pang, T., et al.: Boosting adversarial attacks with momentum. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 2018: 9185\u20139193.","DOI":"10.1109\/CVPR.2018.00957"},{"key":"4507_CR18","doi-asserted-by":"crossref","unstructured":"Li, Z., Yin, B., Yao, T., et al. Sibling-attack: Rethinking transferable adversarial attacks against face recognition. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition. 2023: 24626\u201324637.","DOI":"10.1109\/CVPR52729.2023.02359"},{"key":"4507_CR19","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. In Proceedings of the 3rd International Conference on Learning Representations (ICLR 2015), (2015)"},{"key":"4507_CR20","first-page":"2672","volume":"02","author":"I Goodfellow","year":"2014","unstructured":"Goodfellow, I., Pouge, A., Mirza, M., et al.: Generative adversarial nets. Adv. Neural. Inf. Process. Syst. 02, 2672\u20132680 (2014)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"4507_CR21","doi-asserted-by":"crossref","unstructured":"Xiaoc, L., Zhujy, et al.: Generating adversarial examples with adversarial networks. (2018)","DOI":"10.24963\/ijcai.2018\/543"},{"key":"4507_CR22","doi-asserted-by":"crossref","unstructured":"Zhu, P., Osadag, K., et al.: Frequency-aware GAN for adversarial manipulation generation. In 2023 IEEE\/CVF International Conference on Computer Vision(ICCV). Paris,France. IEEE, 2023:4292\u20134301.","DOI":"10.1109\/ICCV51070.2023.00398"},{"key":"4507_CR23","doi-asserted-by":"crossref","unstructured":"Sharif, M., Bhagavatula, S., Bauer, L., et al.: Accessorize to a crime: real and stealthy Attacks on state-of-the-art face recognition. In Proceedings of the 2016 acm sigsac conference on computer and communications security. New York: ACM, 2016: 1528\u20131540.","DOI":"10.1145\/2976749.2978392"},{"key":"4507_CR24","doi-asserted-by":"crossref","unstructured":"Yin, B., Wang, W., Yao, T., et al.: Adv-makeup: A new imperceptible and transferable attack on face recognition. (2021)","DOI":"10.24963\/ijcai.2021\/173"},{"key":"4507_CR25","doi-asserted-by":"crossref","unstructured":"Xue, H., Araujo, A., Hu, B., et al.: Diffusionbased adversarial sample generation for improved stealthiness and controllability. In Proceedings of the 37th International Conference on Neural Information Processing Systems. Red Hook, NY, USA:Curran Associates Inc, 2024 129, 2894\u20132921.","DOI":"10.52202\/075280-0129"},{"issue":"3","key":"4507_CR26","doi-asserted-by":"publisher","DOI":"10.1002\/cav.2248","volume":"35","author":"W Zhao","year":"2024","unstructured":"Zhao, W., Zhu, J., Huang, J., et al.: GAN-based multi-decomposition photo cartoonization. Comput. Anim. Virtual Worlds 35(3), e2248 (2024)","journal-title":"Comput. Anim. Virtual Worlds"},{"key":"4507_CR27","unstructured":"Samangouei, P., Kabkab, M., & Chellappa, R. (2018). Defense-gan: Protecting classifiers against adversarial attacks using generative models"},{"key":"4507_CR28","doi-asserted-by":"crossref","unstructured":"Zeno, B., Kalinovskiy, I., & Matveev, Y. (2019) IP-GAN: learning identity and pose disentanglement in generative adversarial networks. In International Conference on Artificial Neural Networks (pp. 535\u2013547). Cham: Springer International Publishing.","DOI":"10.1007\/978-3-030-30493-5_51"},{"key":"4507_CR29","doi-asserted-by":"crossref","unstructured":"Baluja, S., Fischer, I.: Learning to attack: Adversarial transformation networks. In Proc of the AAAI Conf on Artificial Intelligence. [2020-03-08]. http:\/\/www.esprockets.com\/papers\/aaai2018.pdf","DOI":"10.1609\/aaai.v32i1.11672"},{"key":"4507_CR30","doi-asserted-by":"publisher","first-page":"6142","DOI":"10.1109\/TIP.2021.3092814","volume":"30","author":"Y Wen","year":"2021","unstructured":"Wen, Y., Chen, J., Sheng, B., et al.: Structure-aware motion deblurring using multi-adversarial optimized CycleGAN. IEEE Trans. Image Process. 30, 6142\u20136155 (2021)","journal-title":"IEEE Trans. Image Process."},{"key":"4507_CR31","unstructured":"Song, Y., Kim, T., Nowozin, S., Ermon, S., Kushman, N.: Pixeldefend: Leveraging generative models to understand and defend against adversarial examples. (2017)"},{"key":"4507_CR32","doi-asserted-by":"crossref","unstructured":"Li, X., & Ji, S. (2019) Defense-vae: A fast and accurate defense against adversarial attacks. In Joint European Conference on Machine Learning and Knowledge Discovery in Databases (pp. 191\u2013207). Cham: Springer International Publishing.","DOI":"10.1007\/978-3-030-43887-6_15"},{"key":"4507_CR33","unstructured":"Yang, Yuzhe., Zhang, Guo., Katabi, D., et al.: ME-Net: Towards effective adversarial robustness with matrix estimation. In Proc of the Int Conf on Machine Learning. New York:ACM, 2019:7025\u20137034"},{"issue":"12","key":"4507_CR34","doi-asserted-by":"publisher","first-page":"8531","DOI":"10.1007\/s00371-023-03253-7","volume":"40","author":"J Ji","year":"2024","unstructured":"Ji, J., Gao, S., Zhou, W.: Transferable adversarial sample purification by expanding the purification space of diffusion models. Vis. Comput. 40(12), 8531\u20138543 (2024)","journal-title":"Vis. Comput."},{"key":"4507_CR35","doi-asserted-by":"crossref","unstructured":"Zhao, A., Chu, T., Liu, Y., et al.: Minimizing maximum model discrepancy for transferable black-box targeted attacks. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR). Piscataway, NJ: IEEE, 2023: 8153\u20138162.","DOI":"10.1109\/CVPR52729.2023.00788"},{"key":"4507_CR36","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2022.109009","volume":"133","author":"X Zheng","year":"2023","unstructured":"Zheng, X., Fan, Y., Wu, B., et al.: Robust physical-world attacks on face recognition. Pattern Recognit. 133, 109009 (2023)","journal-title":"Pattern Recognit."},{"issue":"3","key":"4507_CR37","doi-asserted-by":"publisher","first-page":"1527","DOI":"10.1007\/s00530-023-01070-5","volume":"29","author":"D Sharma","year":"2023","unstructured":"Sharma, D., Selwal, A.: A survey on face presentation attack detection mechanisms: hitherto and future perspectives. Multim. Syst. 29(3), 1527\u20131577 (2023)","journal-title":"Multim. Syst."},{"issue":"5","key":"4507_CR38","first-page":"5609","volume":"45","author":"Z Yu","year":"2022","unstructured":"Yu, Z., Qin, Y., Li, X., et al.: Deep learning for face anti-spoofing: a survey. IEEE Trans. Pattern Anal. Mach. Intell. 45(5), 5609\u20135631 (2022)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"4507_CR39","doi-asserted-by":"crossref","unstructured":"Carlini, N,. Wagner, D.: Towards evaluating the robustness of neural networks[C]\/\/2017 ieee symposium on security and privacy (sp). Ieee, 2017: 39\u201357.","DOI":"10.1109\/SP.2017.49"},{"key":"4507_CR40","doi-asserted-by":"crossref","unstructured":"Deb D, Zhang J, Jain A K. Advfaces: Adversarial face synthesis[C]\/\/2020 IEEE International Joint Conference on Biometrics (IJCB). IEEE, 2020: 1\u201310.","DOI":"10.1109\/IJCB48548.2020.9304898"},{"key":"4507_CR41","doi-asserted-by":"crossref","unstructured":"Sun, Y., Yu, L., Xie, H., et al.: Diffam: Diffusion-based adversarial makeup transfer for facial privacy protection. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition. 2024: 24584\u201324594.","DOI":"10.1109\/CVPR52733.2024.02321"},{"key":"4507_CR42","unstructured":"Xie, C., Wang, J., Zhang, Z., et al.: Mitigating adversarial effects through randomization. (2017)"},{"key":"4507_CR43","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.109347","volume":"137","author":"M Xu","year":"2023","unstructured":"Xu, M., Yoon, S., Fuentes, A., et al.: A comprehensive survey of image augmentation techniques for deep learning. Pattern Recognit. 137, 109347 (2023)","journal-title":"Pattern Recognit."},{"key":"4507_CR44","unstructured":"Guo, C., Rana, M., Cisse, M., et al.: Countering adversarial images using input transformations. 2017."}],"container-title":["The Visual Computer"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00371-026-04507-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00371-026-04507-w","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00371-026-04507-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,27]],"date-time":"2026-06-27T16:21:32Z","timestamp":1782577292000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00371-026-04507-w"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,27]]},"references-count":44,"journal-issue":{"issue":"9","published-print":{"date-parts":[[2026,7]]}},"alternative-id":["4507"],"URL":"https:\/\/doi.org\/10.1007\/s00371-026-04507-w","relation":{},"ISSN":["0178-2789","1432-2315"],"issn-type":[{"value":"0178-2789","type":"print"},{"value":"1432-2315","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,27]]},"assertion":[{"value":"10 July 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 April 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"27 June 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"367"}}