{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,11]],"date-time":"2026-08-11T23:28:24Z","timestamp":1786490904567,"version":"build-2736575974"},"reference-count":37,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62276127"],"award-info":[{"award-number":["62276127"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008798","name":"Ministry of Science Research and Technology of the Islamic Republic of Iran","doi-asserted-by":"publisher","award":["2021ZD0201300"],"award-info":[{"award-number":["2021ZD0201300"]}],"id":[{"id":"10.13039\/501100008798","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Applied Soft Computing"],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1016\/j.asoc.2026.115810","type":"journal-article","created":{"date-parts":[[2026,6,20]],"date-time":"2026-06-20T15:12:24Z","timestamp":1781968344000},"page":"115810","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"PA","title":["Adversarial UV patch attack from implicit 3D face representation via model inversion"],"prefix":"10.1016","volume":"202","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3776-6929","authenticated-orcid":false,"given":"Xiaoliang","family":"Liu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Furao","family":"Shen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3889-1569","authenticated-orcid":false,"given":"Feng","family":"Han","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3949-352X","authenticated-orcid":false,"given":"Jian","family":"Zhao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.asoc.2026.115810_bib0005","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"815","article-title":"FaceNet: a unified embedding for face recognition and clustering","author":"Schroff","year":"2015"},{"key":"10.1016\/j.asoc.2026.115810_bib0010","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"5265","article-title":"CosFace: large margin cosine loss for deep face recognition","author":"Wang","year":"2018"},{"key":"10.1016\/j.asoc.2026.115810_bib0015","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"4690","article-title":"ArcFace: additive angular margin loss for deep face recognition","author":"Deng","year":"2019"},{"key":"10.1016\/j.asoc.2026.115810_bib0020","author":"Goodfellow"},{"key":"10.1016\/j.asoc.2026.115810_bib0025","series-title":"International Conference on Learning Representations","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2018"},{"key":"10.1016\/j.asoc.2026.115810_bib0030","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"9185","article-title":"Boosting adversarial attacks with momentum","author":"Dong","year":"2018"},{"key":"10.1016\/j.asoc.2026.115810_bib0035","author":"Brown"},{"key":"10.1016\/j.asoc.2026.115810_bib0040","series-title":"ACM SIGSAC Conference on Computer and Communications Security","first-page":"1528","article-title":"Accessorize to a crime: real and stealthy attacks on state-of-the-art face recognition","author":"Sharif","year":"2016"},{"key":"10.1016\/j.asoc.2026.115810_bib0045","series-title":"Joint European Conference on Machine Learning and Knowledge Discovery in Databases","first-page":"304","article-title":"Adversarial mask: real-world universal adversarial attack on face recognition models","author":"Zolfi","year":"2022"},{"key":"10.1016\/j.asoc.2026.115810_bib0050","series-title":"International Conference on Pattern Recognition","first-page":"819","article-title":"AdvHat: real-world adversarial attack on ArcFace face ID system","author":"Komkov","year":"2021"},{"key":"10.1016\/j.asoc.2026.115810_bib0055","author":"Liu"},{"key":"10.1016\/j.asoc.2026.115810_bib0060","doi-asserted-by":"crossref","first-page":"1452","DOI":"10.1109\/TIFS.2020.3036801","article-title":"Towards transferable adversarial attack against deep face recognition","volume":"16","author":"Zhong","year":"2020","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.asoc.2026.115810_bib0065","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"11845","article-title":"Improving transferability of adversarial patches on face recognition with generative models","author":"Xiao","year":"2021"},{"key":"10.1016\/j.asoc.2026.115810_bib0070","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"2730","article-title":"Improving transferability of adversarial examples with input diversity","author":"Xie","year":"2019"},{"key":"10.1016\/j.asoc.2026.115810_bib0075","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"4312","article-title":"Evading defenses to transferable adversarial examples by translation-invariant attacks","author":"Dong","year":"2019"},{"key":"10.1016\/j.asoc.2026.115810_bib0080","series-title":"IEEE International Joint Conference on Biometrics (IJCB)","first-page":"1","article-title":"AdvFaces: adversarial face synthesis","author":"Deb","year":"2020"},{"key":"10.1016\/j.asoc.2026.115810_bib0085","series-title":"International Conference on Learning Representations","article-title":"LowKey: leveraging adversarial attacks to protect social media users from facial recognition","author":"Cherepanova","year":"2021"},{"key":"10.1016\/j.asoc.2026.115810_bib0090","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"3897","article-title":"Towards face encryption by generating adversarial identity masks","author":"Yang","year":"2021"},{"key":"10.1016\/j.asoc.2026.115810_bib0095","doi-asserted-by":"crossref","DOI":"10.1016\/j.neucom.2024.127517","article-title":"EAP: an effective black-box impersonation adversarial patch attack method on face recognition in the physical world","volume":"580","author":"Liu","year":"2024","journal-title":"Neurocomputing"},{"key":"10.1016\/j.asoc.2026.115810_bib0100","author":"Zhou"},{"key":"10.1016\/j.asoc.2026.115810_bib0105","series-title":"ACM SIGSAC Conference on Computer and Communications Security","first-page":"1322","article-title":"Model inversion attacks that exploit confidence information and basic countermeasures","author":"Fredrikson","year":"2015"},{"key":"10.1016\/j.asoc.2026.115810_bib0110","series-title":"Network and Distributed System Security Symposium","article-title":"Scale-MIA: a scalable model inversion attack against secure federated learning via latent space reconstruction","author":"Shi","year":"2025"},{"issue":"3","key":"10.1016\/j.asoc.2026.115810_bib0115","doi-asserted-by":"crossref","first-page":"1451","DOI":"10.1109\/TDSC.2023.3285015","article-title":"Boosting model inversion attacks with adversarial examples","volume":"21","author":"Zhou","year":"2023","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10.1016\/j.asoc.2026.115810_bib0120","author":"Liu"},{"key":"10.1016\/j.asoc.2026.115810_bib0125","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"16123","article-title":"Efficient geometry-aware 3D generative adversarial networks","author":"Chan","year":"2022"},{"key":"10.1016\/j.asoc.2026.115810_bib0130","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"8110","article-title":"Analyzing and improving the image quality of StyleGAN","author":"Karras","year":"2020"},{"issue":"1","key":"10.1016\/j.asoc.2026.115810_bib0135","doi-asserted-by":"crossref","first-page":"6:1","DOI":"10.1145\/3544777","article-title":"Pivotal tuning for latent-based editing of real images","volume":"42","author":"Roich","year":"2023","journal-title":"ACM Trans. Graph."},{"issue":"4","key":"10.1016\/j.asoc.2026.115810_bib0140","doi-asserted-by":"crossref","first-page":"88:1","DOI":"10.1145\/3450626.3459936","article-title":"Learning an animatable detailed 3D face model from in-the-wild images","volume":"40","author":"Feng","year":"2021","journal-title":"ACM Trans. Graph."},{"key":"10.1016\/j.asoc.2026.115810_bib0145","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"2287","article-title":"Encoding in style: a StyleGAN encoder for image-to-image translation","author":"Richardson","year":"2021"},{"key":"10.1016\/j.asoc.2026.115810_bib0150","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"11379","article-title":"High-fidelity GAN inversion for image attribute editing","author":"Wang","year":"2022"},{"key":"10.1016\/j.asoc.2026.115810_bib0155","author":"Ravi"},{"key":"10.1016\/j.asoc.2026.115810_bib0160","series-title":"International Conference on Learning Representations","article-title":"Adam: a method for stochastic optimization","author":"Kingma","year":"2015"},{"key":"10.1016\/j.asoc.2026.115810_bib0165","series-title":"International Conference on Learning Representations","article-title":"SGDR: stochastic gradient descent with warm restarts","author":"Loshchilov","year":"2017"},{"key":"10.1016\/j.asoc.2026.115810_bib0175","series-title":"International Conference on 3D Vision (3DV)","first-page":"951","article-title":"Campari: camera-aware decomposed generative neural radiance fields","author":"Niemeyer","year":"2021"},{"key":"10.1016\/j.asoc.2026.115810_bib0180","series-title":"Chinese Conference on Biometric Recognition","first-page":"428","article-title":"MobileFaceNets: efficient CNNs for accurate real-time face verification on mobile devices","author":"Chen","year":"2018"},{"key":"10.1016\/j.asoc.2026.115810_bib0185","series-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"770","article-title":"Deep residual learning for image recognition","author":"He","year":"2016"},{"key":"10.1016\/j.asoc.2026.115810_bib0195","series-title":"Workshop on Faces in \u2018Real-Life\u2019 Images: Detection, Alignment, and Recognition","article-title":"Labeled faces in the wild: a database for studying face recognition in unconstrained environments","author":"Huang","year":"2008"}],"container-title":["Applied Soft Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1568494626012585?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1568494626012585?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,8,11]],"date-time":"2026-08-11T22:40:02Z","timestamp":1786488002000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1568494626012585"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10]]},"references-count":37,"alternative-id":["S1568494626012585"],"URL":"https:\/\/doi.org\/10.1016\/j.asoc.2026.115810","relation":{},"ISSN":["1568-4946"],"issn-type":[{"value":"1568-4946","type":"print"}],"subject":[],"published":{"date-parts":[[2026,10]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Adversarial UV patch attack from implicit 3D face representation via model inversion","name":"articletitle","label":"Article Title"},{"value":"Applied Soft Computing","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.asoc.2026.115810","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"115810"}}