{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,25]],"date-time":"2026-07-25T12:01:33Z","timestamp":1784980893350,"version":"3.55.0"},"reference-count":46,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100019065","name":"Tianjin Municipal Science and Technology Program","doi-asserted-by":"publisher","award":["25ZXSFSN00070"],"award-info":[{"award-number":["25ZXSFSN00070"]}],"id":[{"id":"10.13039\/501100019065","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100015286","name":"Hebei Provincial Key Research Projects","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100015286","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008047","name":"Hebei University","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100008047","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Applied Soft Computing"],"published-print":{"date-parts":[[2026,9]]},"DOI":"10.1016\/j.asoc.2026.115713","type":"journal-article","created":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T23:12:14Z","timestamp":1780787534000},"page":"115713","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"PC","title":["Transferable adversarial attacks against face recognition via region-focused distillation"],"prefix":"10.1016","volume":"201","author":[{"given":"Luman","family":"Zhao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ruizhong","family":"Du","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5408-0569","authenticated-orcid":false,"given":"Mingyue","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jinjia","family":"Peng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chunfu","family":"Jia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.asoc.2026.115713_bib0005","series-title":"Proceedings of the Computer Vision and Pattern Recognition Conference (CVPR)","first-page":"19197","article-title":"CryptoFace: end-to-end encrypted face recognition","author":"Ao","year":"2025"},{"key":"10.1016\/j.asoc.2026.115713_bib0010","series-title":"Biometric Recognition: 13th Chinese Conference, CCBR 2018, Urumqi, China, August 11\u201312, 2018, Proceedings 13","first-page":"428","article-title":"Mobilefacenets: efficient CNNS for accurate real-time face verification on mobile devices","author":"Chen","year":"2018"},{"key":"10.1016\/j.asoc.2026.115713_bib0015","first-page":"1","article-title":"LADA: latent-space adversarial diffusion attack in remote sensing","volume":"63","author":"Dang","year":"2025","journal-title":"IEEE Trans. Geosci. Remote Sens."},{"key":"10.1016\/j.asoc.2026.115713_bib0020","first-page":"1","article-title":"Boosting adversarial transferability by batchwise amplitude spectrum normalization","volume":"63","author":"Dang","year":"2025","journal-title":"IEEE Trans. Geosci. Remote Sens."},{"key":"10.1016\/j.asoc.2026.115713_bib0025","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","first-page":"9185","article-title":"Boosting adversarial attacks with momentum","author":"Dong","year":"2018"},{"key":"10.1016\/j.asoc.2026.115713_bib0030","series-title":"International Conference on Learning Representations","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2015"},{"key":"10.1016\/j.asoc.2026.115713_bib0035","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","first-page":"770","article-title":"Deep residual learning for image recognition","author":"He","year":"2016"},{"key":"10.1016\/j.asoc.2026.115713_bib0040","article-title":"GANs trained by a two time-scale update rule converge to a local Nash equilibrium","volume":"30","author":"Heusel","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.asoc.2026.115713_bib0045","series-title":"2020 IEEE 5th International Conference on Image, Vision and Computing (ICIVC)","first-page":"123","article-title":"A network for makeup face verification based upon deep learning","author":"Hou","year":"2020"},{"key":"10.1016\/j.asoc.2026.115713_bib0050","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","first-page":"7132","article-title":"Squeeze-and-excitation networks","author":"Hu","year":"2018"},{"key":"10.1016\/j.asoc.2026.115713_bib0055","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"15014","article-title":"Protecting facial privacy: generating adversarial identity masks via style-robust makeup transfer","author":"Hu","year":"2022"},{"key":"10.1016\/j.asoc.2026.115713_bib0060","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"24668","article-title":"Boosting accuracy and robustness of student models via adaptive adversarial distillation","author":"Huang","year":"2023"},{"key":"10.1016\/j.asoc.2026.115713_bib0065","series-title":"International Conference on Learning Representations","article-title":"Progressive growing of GANs for improved quality, stability, and variation","author":"Karras","year":"2018"},{"key":"10.1016\/j.asoc.2026.115713_bib0070","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","article-title":"A style-based generator architecture for generative adversarial networks","author":"Karras","year":"2019"},{"key":"10.1016\/j.asoc.2026.115713_bib0075","doi-asserted-by":"crossref","DOI":"10.1016\/j.asoc.2025.112983","article-title":"Transferable adversarial attacks against face recognition using surrogate model fine-tuning","volume":"174","author":"Khedr","year":"2025","journal-title":"Appl. Soft Comput."},{"key":"10.1016\/j.asoc.2026.115713_bib0080","series-title":"2020 25th International Conference on Pattern Recognition (ICPR)","first-page":"819","article-title":"Advhat: real-world adversarial attack on arcface face id system","author":"Komkov","year":"2021"},{"key":"10.1016\/j.asoc.2026.115713_bib0085","series-title":"Proceedings of the Computer Vision and Pattern Recognition Conference (CVPR)","first-page":"24529","article-title":"Cross-modal distillation for 2D\/3D multi-object discovery from 2D motion","author":"Lahlali","year":"2025"},{"key":"10.1016\/j.asoc.2026.115713_bib0090","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"20156","article-title":"Rethinking feature-based knowledge distillation for face recognition","author":"Li","year":"2023"},{"key":"10.1016\/j.asoc.2026.115713_bib0095","series-title":"Proceedings of the 32nd ACM International Conference on Multimedia","first-page":"10649","article-title":"Transferable adversarial facial images for privacy protection","author":"Li","year":"2024"},{"key":"10.1016\/j.asoc.2026.115713_bib0100","doi-asserted-by":"crossref","DOI":"10.1016\/j.asoc.2025.112823","article-title":"Hierarchical feature transformation attack: generate transferable adversarial examples for face recognition","volume":"172","author":"Li","year":"2025","journal-title":"Appl. Soft Comput."},{"key":"10.1016\/j.asoc.2026.115713_bib0105","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"3585","article-title":"Adv-diffusion: imperceptible adversarial face identity attack via latent diffusion model","author":"Liu","year":"2024"},{"key":"10.1016\/j.asoc.2026.115713_bib0110","doi-asserted-by":"crossref","DOI":"10.1016\/j.neucom.2024.127517","article-title":"EAP: an effective black-box impersonation adversarial patch attack method on face recognition in the physical world","volume":"580","author":"Liu","year":"2024","journal-title":"Neurocomputing"},{"key":"10.1016\/j.asoc.2026.115713_bib0115","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2024.110915","article-title":"Radap: a robust and adaptive defense against diverse adversarial patches on face recognition","volume":"157","author":"Liu","year":"2025","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.asoc.2026.115713_bib0120","series-title":"Proceedings of the Computer Vision and Pattern Recognition Conference (CVPR)","first-page":"21248","article-title":"ProjAttacker: a configurable physical adversarial attack for face recognition via projector","author":"Liu","year":"2025"},{"key":"10.1016\/j.asoc.2026.115713_bib0125","doi-asserted-by":"crossref","DOI":"10.1016\/j.asoc.2021.108365","article-title":"OPFaceNet: OPtimized face recognition network for noise and occlusion affected face images using hyperparameters tuned convolutional neural network","volume":"117","author":"Lokku","year":"2022","journal-title":"Appl. Soft Comput."},{"key":"10.1016\/j.asoc.2026.115713_bib0130","series-title":"International Conference on Learning Representations","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2018"},{"key":"10.1016\/j.asoc.2026.115713_bib0135","series-title":"Computer Vision\u2013ECCV 2020: 16th European Conference, Glasgow, UK, August 23\u201328, 2020, Proceedings, Part XIV 16","first-page":"19","article-title":"Semanticadv: generating adversarial examples via attribute-conditioned image editing","author":"Qiu","year":"2020"},{"key":"10.1016\/j.asoc.2026.115713_bib0140","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"10684","article-title":"High-resolution image synthesis with latent diffusion models","author":"Rombach","year":"2022"},{"key":"10.1016\/j.asoc.2026.115713_bib0145","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","first-page":"815","article-title":"Facenet: a unified embedding for face recognition and clustering","author":"Schroff","year":"2015"},{"key":"10.1016\/j.asoc.2026.115713_bib0150","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV)","first-page":"19662","article-title":"Template inversion attack against face recognition systems using 3D face reconstruction","author":"Shahreza","year":"2023"},{"key":"10.1016\/j.asoc.2026.115713_bib0155","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"20595","article-title":"Clip2protect: protecting facial privacy using text-guided makeup via adversarial latent search","author":"Shamshad","year":"2023"},{"key":"10.1016\/j.asoc.2026.115713_bib0160","series-title":"Proceedings of the 2016 ACM Sigsac Conference on Computer and Communications Security","first-page":"1528","article-title":"Accessorize to a crime: real and stealthy attacks on state-of-the-art face recognition","author":"Sharif","year":"2016"},{"key":"10.1016\/j.asoc.2026.115713_bib0165","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"24584","article-title":"Diffam: diffusion-based adversarial makeup transfer for facial privacy protection","author":"Sun","year":"2024"},{"key":"10.1016\/j.asoc.2026.115713_bib0170","series-title":"Proceedings of the Computer Vision and Pattern Recognition Conference (CVPR)","first-page":"21001","article-title":"Adv-CPG: a customized portrait generation framework with facial adversarial attacks","author":"Wang","year":"2025"},{"key":"10.1016\/j.asoc.2026.115713_bib0175","doi-asserted-by":"crossref","first-page":"600","DOI":"10.1109\/TIP.2003.819861","article-title":"Image quality assessment: from error visibility to structural similarity","volume":"13","author":"Wang","year":"2004","journal-title":"IEEE Trans. Image Process."},{"key":"10.1016\/j.asoc.2026.115713_bib0180","author":"Wu"},{"key":"10.1016\/j.asoc.2026.115713_bib0185","series-title":"Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence","first-page":"1252","article-title":"Adv-makeup: a new imperceptible and transferable attack on face recognition","author":"Yin","year":"2021"},{"key":"10.1016\/j.asoc.2026.115713_bib0190","series-title":"Proceedings of the European Conference on Computer Vision (ECCV)","article-title":"BiSeNet: bilateral segmentation network for real-time semantic segmentation","author":"Yu","year":"2018"},{"key":"10.1016\/j.asoc.2026.115713_bib0195","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV)","first-page":"21042","article-title":"ICD-face: intra-class compactness distillation for face recognition","author":"Yu","year":"2023"},{"key":"10.1016\/j.asoc.2026.115713_bib0200","series-title":"CVPR","article-title":"The unreasonable effectiveness of deep features as a perceptual metric","author":"Zhang","year":"2018"},{"key":"10.1016\/j.asoc.2026.115713_bib0205","series-title":"European Conference on Computer Vision","article-title":"Enhanced accuracy and robustness via multi-teacher adversarial distillation","author":"Zhao","year":"2022"},{"key":"10.1016\/j.asoc.2026.115713_bib0210","first-page":"36","article-title":"PanDa: prompt transfer meets knowledge distillation for efficient model adaptation","author":"Zhong","year":"2024","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"10.1016\/j.asoc.2026.115713_bib0215","doi-asserted-by":"crossref","first-page":"8130","DOI":"10.1109\/TCSS.2023.3291565","article-title":"Improving the transferability of adversarial attacks on face recognition with beneficial perturbation feature augmentation","volume":"11","author":"Zhou","year":"2024","journal-title":"IEEE Trans. Comput. Soc. Syst."},{"key":"10.1016\/j.asoc.2026.115713_bib0220","series-title":"Proceedings of the Computer Vision and Pattern Recognition Conference (CVPR)","first-page":"3516","article-title":"Improving the transferability of adversarial attacks on face recognition with diverse parameters augmentation","author":"Zhou","year":"2025"},{"key":"10.1016\/j.asoc.2026.115713_bib0225","doi-asserted-by":"crossref","DOI":"10.1016\/j.neunet.2025.107341","article-title":"Improving transferability of adversarial examples via statistical attribution-based attacks","volume":"187","author":"Zhu","year":"2025","journal-title":"Neural Netw."},{"key":"10.1016\/j.asoc.2026.115713_bib0230","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"16443","article-title":"Revisiting adversarial robustness distillation: robust soft labels make student better","author":"Zi","year":"2021"}],"container-title":["Applied Soft Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1568494626011610?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1568494626011610?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,25]],"date-time":"2026-07-25T11:35:52Z","timestamp":1784979352000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1568494626011610"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9]]},"references-count":46,"alternative-id":["S1568494626011610"],"URL":"https:\/\/doi.org\/10.1016\/j.asoc.2026.115713","relation":{},"ISSN":["1568-4946"],"issn-type":[{"value":"1568-4946","type":"print"}],"subject":[],"published":{"date-parts":[[2026,9]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Transferable adversarial attacks against face recognition via region-focused distillation","name":"articletitle","label":"Article Title"},{"value":"Applied Soft Computing","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.asoc.2026.115713","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"115713"}}