{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,21]],"date-time":"2026-02-21T16:26:38Z","timestamp":1771691198099,"version":"3.50.1"},"reference-count":46,"publisher":"Springer Science and Business Media LLC","issue":"9","license":[{"start":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T00:00:00Z","timestamp":1750204800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T00:00:00Z","timestamp":1750204800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["SIViP"],"published-print":{"date-parts":[[2025,9]]},"DOI":"10.1007\/s11760-025-04372-5","type":"journal-article","created":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T16:02:36Z","timestamp":1750262556000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Facial Privacy Protection via Attention-Guided Latent Diffusion Model for Adversarial Sample Generation"],"prefix":"10.1007","volume":"19","author":[{"given":"Yaxin","family":"Wang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zufeng","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chao","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Feng","family":"Yang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,6,18]]},"reference":[{"key":"4372_CR1","doi-asserted-by":"publisher","first-page":"855","DOI":"10.1007\/s11042-020-09604-z","volume":"80","author":"L Yang","year":"2021","unstructured":"Yang, L., Song, Q., Wu, Y.: Attacks on state-of-the-art face recognition using attentional adversarial attack generative network. Multimedia tools and applications 80, 855\u2013875 (2021)","journal-title":"Multimedia tools and applications"},{"key":"4372_CR2","unstructured":"Song, Y., Sohl-Dickstein, J., Kingma, D.P., Kumar, A., Ermon, S., Poole, B.: Score-based generative modeling through stochastic differential equations. arXiv preprint arXiv:2011.13456 (2020)"},{"key":"4372_CR3","unstructured":"Shan, S., Wenger, E., Zhang, J., Li, H., Zheng, H., Zhao, B.Y.: Fawkes: Protecting privacy against unauthorized deep learning models. In: 29th USENIX Security Symposium (USENIX Security 20), pp. 1589\u20131604 (2020)"},{"key":"4372_CR4","doi-asserted-by":"crossref","unstructured":"Maximov, M., Elezi, I., Leal-Taix\u00e9, L.: Ciagan: Conditional identity anonymization generative adversarial networks. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 5447\u20135456 (2020)","DOI":"10.1109\/CVPR42600.2020.00549"},{"key":"4372_CR5","doi-asserted-by":"publisher","first-page":"1452","DOI":"10.1109\/TIFS.2020.3036801","volume":"16","author":"Y Zhong","year":"2020","unstructured":"Zhong, Y., Deng, W.: Towards transferable adversarial attack against deep face recognition. IEEE Trans. Inf. Forensics Secur. 16, 1452\u20131466 (2020)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"4372_CR6","doi-asserted-by":"publisher","first-page":"197","DOI":"10.1016\/j.neucom.2022.06.039","volume":"501","author":"Y Wen","year":"2022","unstructured":"Wen, Y., Liu, B., Ding, M., Xie, R., Song, L.: Identitydp: Differential private identification protection for face images. Neurocomputing 501, 197\u2013211 (2022)","journal-title":"Neurocomputing"},{"key":"4372_CR7","doi-asserted-by":"crossref","unstructured":"Mi, Y., Huang, Y., Ji, J., Zhao, M., Wu, J., Xu, X., Ding, S., Zhou, S.: Privacy-preserving face recognition using random frequency components. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 19673\u201319684 (2023)","DOI":"10.1109\/ICCV51070.2023.01802"},{"key":"4372_CR8","doi-asserted-by":"crossref","unstructured":"Mi, Y., Huang, Y., Ji, J., Liu, H., Xu, X., Ding, S., Zhou, S.: Duetface: Collaborative privacy-preserving face recognition via channel splitting in the frequency domain. In: Proceedings of the 30th ACM International Conference on Multimedia, pp. 6755\u20136764 (2022)","DOI":"10.1145\/3503161.3548303"},{"key":"4372_CR9","doi-asserted-by":"crossref","unstructured":"Xu, J., Le, H., Samaras, D.: Generating features with increased crop-related diversity for few-shot object detection. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 19713\u201319722 (2023)","DOI":"10.1109\/CVPR52729.2023.01888"},{"key":"4372_CR10","doi-asserted-by":"crossref","unstructured":"Qiu, H., Xiao, C., Yang, L., Yan, X., Lee, H., Li, B.: Semanticadv: Generating adversarial examples via attribute-conditioned image editing. In: Computer Vision\u2013ECCV 2020: 16th European Conference, Glasgow, UK, August 23\u201328, 2020, Proceedings, Part XIV 16, pp. 19\u201337 (2020). Springer","DOI":"10.1007\/978-3-030-58568-6_2"},{"key":"4372_CR11","unstructured":"Cherepanova, V., Goldblum, M., Foley, H., Duan, S., Dickerson, J., Taylor, G., Goldstein, T.: Lowkey: Leveraging adversarial attacks to protect social media users from facial recognition. arXiv preprint arXiv:2101.07922 (2021)"},{"key":"4372_CR12","doi-asserted-by":"crossref","unstructured":"Yin, B., Wang, W., Yao, T., Guo, J., Kong, Z., Ding, S., Li, J., Liu, C.: Adv-makeup: A new imperceptible and transferable attack on face recognition. arXiv preprint arXiv:2105.03162 (2021)","DOI":"10.24963\/ijcai.2021\/173"},{"key":"4372_CR13","doi-asserted-by":"crossref","unstructured":"Hu, S., Liu, X., Zhang, Y., Li, M., Zhang, L.Y., Jin, H., Wu, L.: Protecting facial privacy: Generating adversarial identity masks via style-robust makeup transfer. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 15014\u201315023 (2022)","DOI":"10.1109\/CVPR52688.2022.01459"},{"key":"4372_CR14","doi-asserted-by":"crossref","unstructured":"Shamshad, F., Naseer, M., Nandakumar, K.: Clip2protect: Protecting facial privacy using text-guided makeup via adversarial latent search. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 20595\u201320605 (2023)","DOI":"10.1109\/CVPR52729.2023.01973"},{"key":"4372_CR15","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3505243","volume":"56","author":"L Yang","year":"2022","unstructured":"Yang, L., Zhang, Z., Hong, S., Xu, R., Zhao, Y., Shao, Y., Zhang, W., Yang, M.-H., Cui, B.: Diffusion models: A comprehensive survey of methods and applications. ACM Comput. Surv. 56, 1\u201339 (2022)","journal-title":"ACM Comput. Surv."},{"key":"4372_CR16","unstructured":"Kwon, G., Ye, J.C.: Diffusion-based image translation using disentangled style and content representation. arXiv preprint arXiv:2209.15264 (2022)"},{"key":"4372_CR17","doi-asserted-by":"crossref","unstructured":"Rombach, R., Blattmann, A., Lorenz, D., Esser, P., Ommer, B.: High-resolution image synthesis with latent diffusion models. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 10684\u201310695 (2022)","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"4372_CR18","doi-asserted-by":"crossref","unstructured":"Yang, X., Dong, Y., Pang, T., Su, H., Zhu, J., Chen, Y., Xue, H.: Towards face encryption by generating adversarial identity masks. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 3897\u20133907 (2021)","DOI":"10.1109\/ICCV48922.2021.00387"},{"issue":"3","key":"4372_CR19","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3317611","volume":"22","author":"M Sharif","year":"2019","unstructured":"Sharif, M., Bhagavatula, S., Bauer, L., Reiter, M.K.: A general framework for adversarial examples with objectives. ACM Transactions on Privacy and Security 22(3), 1\u201330 (2019). https:\/\/doi.org\/10.1145\/3317611","journal-title":"ACM Transactions on Privacy and Security"},{"key":"4372_CR20","doi-asserted-by":"crossref","unstructured":"Tang, J., Wang, Z., Wei, Q.: Adagard accelerated gradient with weight decay for adversarial attacks. 2022 International Conference on Machine Learning, Cloud Computing and Intelligent Mining (MLCCIM), 333\u2013338 (2022)","DOI":"10.1109\/MLCCIM55934.2022.00064"},{"key":"4372_CR21","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)"},{"key":"4372_CR22","doi-asserted-by":"crossref","unstructured":"Kurakin, A., Goodfellow, I.J., Bengio, S.: Adversarial examples in the physical world. In: Artificial Intelligence Safety and Security, pp. 99\u2013112 (2018)","DOI":"10.1201\/9781351251389-8"},{"key":"4372_CR23","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.-M., Fawzi, A., Frossard, P.: Deepfool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 2574\u20132582 (2016)","DOI":"10.1109\/CVPR.2016.282"},{"key":"4372_CR24","unstructured":"Madry, A.: Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017)"},{"key":"4372_CR25","doi-asserted-by":"crossref","unstructured":"Jiang, W., Liu, S., Gao, C., Cao, J., He, R., Feng, J., Yan, S.: Psgan: Pose and expression robust spatial-aware gan for customizable makeup transfer. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 5194\u20135202 (2020)","DOI":"10.1109\/CVPR42600.2020.00524"},{"key":"4372_CR26","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2024.111050","volume":"158","author":"X Liu","year":"2025","unstructured":"Liu, X., Zhong, Y., Cui, X., Zhang, Y., Li, P., Deng, W.: Advcloak: Customized adversarial cloak for privacy protection. Pattern Recogn. 158, 111050 (2025)","journal-title":"Pattern Recogn."},{"key":"4372_CR27","doi-asserted-by":"crossref","unstructured":"Sun, Y., Yu, L., Xie, H., Li, J., Zhang, Y.: Diffam: Diffusion-based adversarial makeup transfer for facial privacy protection. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 24584\u201324594 (2024)","DOI":"10.1109\/CVPR52733.2024.02321"},{"key":"4372_CR28","doi-asserted-by":"crossref","unstructured":"Sun, Z., Chen, Y., Xiong, S.: Ssat: A symmetric semantic-aware transformer network for makeup transfer and removal. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 36, pp. 2325\u20132334 (2022)","DOI":"10.1609\/aaai.v36i2.20131"},{"key":"4372_CR29","doi-asserted-by":"crossref","unstructured":"Zhang, Y., Huang, N., Tang, F., Huang, H., Ma, C., Dong, W., Xu, C.: Inversion-based style transfer with diffusion models. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 10146\u201310156 (2023)","DOI":"10.1109\/CVPR52729.2023.00978"},{"key":"4372_CR30","doi-asserted-by":"crossref","unstructured":"Shamshad, F., Naseer, M., Nandakumar, K.: Makeup-guided facial privacy protection via untrained neural network priors. arXiv preprint arXiv:2408.12387 (2024)","DOI":"10.1007\/978-3-031-92089-9_15"},{"key":"4372_CR31","first-page":"13438","volume":"45","author":"Y Lyu","year":"2023","unstructured":"Lyu, Y., Jiang, Y., He, Z., Peng, B., Liu, Y., Dong, J.: 3d-aware adversarial makeup generation for facial privacy protection. IEEE Trans. Pattern Anal. Mach. Intell. 45, 13438\u201313453 (2023)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"4372_CR32","first-page":"34136","volume":"35","author":"S Jia","year":"2022","unstructured":"Jia, S., Yin, B., Yao, T., Ding, S., Shen, C., Yang, X., Ma, C.: Adv-attribute: Inconspicuous and transferable adversarial attack on face recognition. Adv. Neural. Inf. Process. Syst. 35, 34136\u201334147 (2022)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"4372_CR33","doi-asserted-by":"publisher","first-page":"13164","DOI":"10.1109\/TCSVT.2024.3449290","volume":"34","author":"X He","year":"2023","unstructured":"He, X., Zhu, M., Chen, D., Wang, N., Gao, X.: Diff-privacy: Diffusion-based face privacy protection. IEEE Trans. Circuits Syst. Video Technol. 34, 13164\u201313176 (2023)","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"key":"4372_CR34","doi-asserted-by":"crossref","unstructured":"Lou, Z., Cao, G., Lin, M.: Black-box attack against gan-generated image detector with contrastive perturbation. ArXiv abs\/2211.03509 (2022)","DOI":"10.1016\/j.engappai.2023.106594"},{"key":"4372_CR35","unstructured":"Liu, J., Lau, C.P., Chellappa, R.: Diffprotect: Generate adversarial examples with diffusion models for facial privacy protection. arXiv preprint arXiv:2305.13625 (2023)"},{"key":"4372_CR36","unstructured":"Karras, T.: Progressive growing of gans for improved quality, stability, and variation. arXiv preprint arXiv:1710.10196 (2017)"},{"key":"4372_CR37","doi-asserted-by":"crossref","unstructured":"Gu, Q., Wang, G., Chiu, M.T., Tai, Y.-W., Tang, C.-K.: Ladn: Local adversarial disentangling network for facial makeup and de-makeup. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 10481\u201310490 (2019)","DOI":"10.1109\/ICCV.2019.01058"},{"key":"4372_CR38","doi-asserted-by":"crossref","unstructured":"Cao, Q., Shen, L., Xie, W., Parkhi, O.M., Zisserman, A.: Vggface2: A dataset for recognising faces across pose and age. 2018 13th IEEE International Conference on Automatic Face & Gesture Recognition (FG 2018), 67\u201374 (2017)","DOI":"10.1109\/FG.2018.00020"},{"key":"4372_CR39","doi-asserted-by":"crossref","unstructured":"Dong, Y., Pang, T., Su, H., Zhu, J.: Evading defenses to transferable adversarial examples by translation-invariant attacks. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 4312\u20134321 (2019)","DOI":"10.1109\/CVPR.2019.00444"},{"key":"4372_CR40","doi-asserted-by":"crossref","unstructured":"Hu, J., Shen, L., Sun, G.: Squeeze-and-excitation networks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 7132\u20137141 (2018)","DOI":"10.1109\/CVPR.2018.00745"},{"key":"4372_CR41","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 770\u2013778 (2016)","DOI":"10.1109\/CVPR.2016.90"},{"key":"4372_CR42","doi-asserted-by":"crossref","unstructured":"Schroff, F., Kalenichenko, D., Philbin, J.: Facenet: A unified embedding for face recognition and clustering. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 815\u2013823 (2015)","DOI":"10.1109\/CVPR.2015.7298682"},{"issue":"10","key":"4372_CR43","doi-asserted-by":"publisher","first-page":"5962","DOI":"10.1109\/tpami.2021.3087709","volume":"44","author":"J Deng","year":"2022","unstructured":"Deng, J., Guo, J., Yang, J., Xue, N., Kotsia, I., Zafeiriou, S.: Arcface: Additive angular margin loss for deep face recognition. IEEE Trans. Pattern Anal. Mach. Intell. 44(10), 5962\u20135979 (2022). https:\/\/doi.org\/10.1109\/tpami.2021.3087709","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"4372_CR44","unstructured":"Radford, A., Kim, J.W., Hallacy, C., Ramesh, A., Goh, G., Agarwal, S., Sastry, G., Askell, A., Mishkin, P., Clark, J., : Learning transferable visual models from natural language supervision. In: International Conference on Machine Learning, pp. 8748\u20138763 (2021). PMLR"},{"key":"4372_CR45","unstructured":"Heusel, M., Ramsauer, H., Unterthiner, T., Nessler, B., Hochreiter, S.: Gans trained by a two time-scale update rule converge to a local nash equilibrium. Advances in neural information processing systems 30 (2017)"},{"issue":"4","key":"4372_CR46","doi-asserted-by":"publisher","first-page":"600","DOI":"10.1109\/TIP.2003.819861","volume":"13","author":"Z Wang","year":"2004","unstructured":"Wang, Z., Bovik, A.C., Sheikh, H.R., Simoncelli, E.P.: Image quality assessment: from error visibility to structural similarity. IEEE Trans. Image Process. 13(4), 600\u2013612 (2004). https:\/\/doi.org\/10.1109\/TIP.2003.819861","journal-title":"IEEE Trans. Image Process."}],"container-title":["Signal, Image and Video Processing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11760-025-04372-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11760-025-04372-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11760-025-04372-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,3]],"date-time":"2025-07-03T14:46:58Z","timestamp":1751554018000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11760-025-04372-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,18]]},"references-count":46,"journal-issue":{"issue":"9","published-print":{"date-parts":[[2025,9]]}},"alternative-id":["4372"],"URL":"https:\/\/doi.org\/10.1007\/s11760-025-04372-5","relation":{},"ISSN":["1863-1703","1863-1711"],"issn-type":[{"value":"1863-1703","type":"print"},{"value":"1863-1711","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,6,18]]},"assertion":[{"value":"26 February 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 May 2025","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"7 June 2025","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"18 June 2025","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"All authors certify that they have no affiliations with or involvement in any organization or entity with any financial interest or non-financial interest in the subject matter or materials discussed in this manuscript.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflicts of interest"}}],"article-number":"749"}}