{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T10:23:21Z","timestamp":1783074201023,"version":"3.54.6"},"reference-count":59,"publisher":"Elsevier BV","issue":"8","license":[{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100003392","name":"Natural Science Foundation of Fujian Province","doi-asserted-by":"publisher","award":["2023J02014"],"award-info":[{"award-number":["2023J02014"]}],"id":[{"id":"10.13039\/501100003392","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100018555","name":"Science and Technology Program of Guizhou Province","doi-asserted-by":"publisher","award":["[2022]065"],"award-info":[{"award-number":["[2022]065"]}],"id":[{"id":"10.13039\/501100018555","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100018555","name":"Science and Technology Program of Guizhou Province","doi-asserted-by":"publisher","award":["[2020]5017"],"award-info":[{"award-number":["[2020]5017"]}],"id":[{"id":"10.13039\/501100018555","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272102"],"award-info":[{"award-number":["62272102"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272123"],"award-info":[{"award-number":["62272123"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Information Processing & Management"],"published-print":{"date-parts":[[2026,12]]},"DOI":"10.1016\/j.ipm.2026.104947","type":"journal-article","created":{"date-parts":[[2026,5,30]],"date-time":"2026-05-30T10:07:42Z","timestamp":1780135662000},"page":"104947","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":1,"title":["A transferable attack framework for face impersonation with surrogate ensemble and semantic guidance"],"prefix":"10.1016","volume":"63","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-1449-907X","authenticated-orcid":false,"given":"Ruixin","family":"Song","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5974-1570","authenticated-orcid":false,"given":"Youliang","family":"Tian","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9580-5738","authenticated-orcid":false,"given":"Mengqian","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.ipm.2026.104947_b1","series-title":"2017 IEEE symposium on security and privacy","first-page":"39","article-title":"Towards evaluating the robustness of neural networks","author":"Carlini","year":"2017"},{"issue":"2","key":"10.1016\/j.ipm.2026.104947_b2","doi-asserted-by":"crossref","first-page":"961","DOI":"10.1109\/TPAMI.2024.3480519","article-title":"Diffusion models for imperceptible and transferable adversarial attack","volume":"47","author":"Chen","year":"2025","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.ipm.2026.104947_b3","doi-asserted-by":"crossref","unstructured":"Chen, J., Dong, J., & Xie, X. (2025). Mind the Trojan Horse: Image Prompt Adapter Enabling Scalable and Deceptive Jailbreaking. In Proceedings of the computer vision and pattern recognition conference (pp. 23785\u201323794).","DOI":"10.1109\/CVPR52734.2025.02215"},{"issue":"2","key":"10.1016\/j.ipm.2026.104947_b4","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2025.104383","article-title":"Measuring policy diffusion intensity: A text-driven analysis of government documents","volume":"63","author":"Chen","year":"2026","journal-title":"Information Processing & Management."},{"key":"10.1016\/j.ipm.2026.104947_b5","doi-asserted-by":"crossref","unstructured":"Chen, B., Yin, J., Chen, S., Chen, B., & Liu, X. (2023). An adaptive model ensemble adversarial attack for boosting adversarial transferability. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 4489\u20134498).","DOI":"10.1109\/ICCV51070.2023.00414"},{"key":"10.1016\/j.ipm.2026.104947_b6","doi-asserted-by":"crossref","unstructured":"Dai, X., Liang, K., & Xiao, B. (2024). Advdiff: Generating unrestricted adversarial examples using diffusion models. In European conference on computer vision (pp. 93\u2013109).","DOI":"10.1007\/978-3-031-72952-2_6"},{"key":"10.1016\/j.ipm.2026.104947_b7","doi-asserted-by":"crossref","DOI":"10.1016\/j.inffus.2025.103099","article-title":"Second frcsyn-ongoing: Winning solutions and post-challenge analysis to improve face recognition with synthetic data","volume":"120","author":"DeAndres-Tame","year":"2025","journal-title":"Inf. Fusion"},{"key":"10.1016\/j.ipm.2026.104947_b8","doi-asserted-by":"crossref","unstructured":"Deng, J., Guo, J., Xue, N., & Zafeiriou, S. (2019). Arcface: Additive angular margin loss for deep face recognition. In IEEE conference on computer vision and pattern recognition (pp. 4690\u20134699).","DOI":"10.1109\/CVPR.2019.00482"},{"issue":"1","key":"10.1016\/j.ipm.2026.104947_b9","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2024.103947","article-title":"Membership inference attacks via spatial projection-based relative information loss in mlaas","volume":"62","author":"Ding","year":"2025","journal-title":"Information Processing & Management."},{"issue":"3","key":"10.1016\/j.ipm.2026.104947_b10","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2025.104537","article-title":"DEEL: An imbalanced binary data classification method based on diffusion model data augmentation and multi-objective optimization ensemble","volume":"63","author":"Ding","year":"2026","journal-title":"Information Processing & Management"},{"issue":"7","key":"10.1016\/j.ipm.2026.104947_b11","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2026.104881","article-title":"CIM: Interpretable model with consistency representation and prompt learning","volume":"63","author":"Dong","year":"2026","journal-title":"Information Processing & Management"},{"key":"10.1016\/j.ipm.2026.104947_b12","doi-asserted-by":"crossref","unstructured":"Dong, Y., Liao, F., Pang, T., Su, H., Zhu, J., Hu, X., & Li, J. (2018). Boosting adversarial attacks with momentum. In IEEE conference on computer vision and pattern recognition (pp. 9185\u20139193).","DOI":"10.1109\/CVPR.2018.00957"},{"key":"10.1016\/j.ipm.2026.104947_b13","doi-asserted-by":"crossref","first-page":"2596","DOI":"10.1109\/TIFS.2023.3266702","article-title":"Restricted black-box adversarial attack against deepfake face swapping","volume":"18","author":"Dong","year":"2023","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"10.1016\/j.ipm.2026.104947_b14","series-title":"2021 IEEE international conference on multimedia and expo","first-page":"1","article-title":"Visually maintained image disturbance against deepfake face swapping","author":"Dong","year":"2021"},{"issue":"1","key":"10.1016\/j.ipm.2026.104947_b15","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2025.104357","article-title":"CLIP-based knowledge projector for image\u2013text matching","volume":"63","author":"Dong","year":"2026","journal-title":"Information Processing & Management."},{"key":"10.1016\/j.ipm.2026.104947_b16","doi-asserted-by":"crossref","unstructured":"Fang, H., Kong, J., Chen, B., Dai, T., Wu, H., & Xia, S.-T. (2024). Clip-guided generative networks for transferable targeted adversarial attacks. In European conference on computer vision (pp. 1\u201319).","DOI":"10.1007\/978-3-031-73390-1_1"},{"key":"10.1016\/j.ipm.2026.104947_b17","series-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"10.1016\/j.ipm.2026.104947_b18","doi-asserted-by":"crossref","first-page":"1333","DOI":"10.1109\/TIFS.2024.3518072","article-title":"Efficient generation of targeted and transferable adversarial examples for vision-language models via diffusion models","volume":"20","author":"Guo","year":"2024","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.ipm.2026.104947_b19","doi-asserted-by":"crossref","unstructured":"Han, J., Kwon, D., Lee, G., Kim, J., & Choi, J. (2025). Enhancing creative generation on stable diffusion-based models. In IEEE conference on computer vision and pattern recognition (pp. 28609\u201328618).","DOI":"10.1109\/CVPR52734.2025.02664"},{"key":"10.1016\/j.ipm.2026.104947_b20","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., & Sun, J. (2016). Deep residual learning for image recognition. In IEEE conference on computer vision and pattern recognition (pp. 770\u2013778).","DOI":"10.1109\/CVPR.2016.90"},{"key":"10.1016\/j.ipm.2026.104947_b21","doi-asserted-by":"crossref","first-page":"5506","DOI":"10.1109\/TIFS.2024.3402167","article-title":"Towards transferable attack via adversarial diffusion in face recognition","volume":"19","author":"Hu","year":"2024","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.ipm.2026.104947_b22","doi-asserted-by":"crossref","unstructured":"Hu, J., Shen, L., & Sun, G. (2018). Squeeze-and-excitation networks. In IEEE conference on computer vision and pattern recognition (pp. 7132\u20137141).","DOI":"10.1109\/CVPR.2018.00745"},{"key":"10.1016\/j.ipm.2026.104947_b23","series-title":"MASQUE: A text-guided diffusion-based framework for localized and customized adversarial makeup","author":"Kwon","year":"2025"},{"issue":"6","key":"10.1016\/j.ipm.2026.104947_b24","doi-asserted-by":"crossref","first-page":"147:1","DOI":"10.1145\/3673224","article-title":"Toward a privacy-preserving face recognition system: A survey of leakages and solutions","volume":"57","author":"Laishram","year":"2025","journal-title":"ACM Comput. Surv."},{"issue":"1","key":"10.1016\/j.ipm.2026.104947_b25","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3736753","article-title":"Attack vectors for face recognition systems: A comprehensive review","volume":"58","author":"Leyva","year":"2025","journal-title":"ACM Computing Surveys"},{"key":"10.1016\/j.ipm.2026.104947_b26","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.104101","article-title":"Precision strike: Precise backdoor attack with dynamic trigger","volume":"148","author":"Li","year":"2025","journal-title":"Computers & Security"},{"key":"10.1016\/j.ipm.2026.104947_b27","article-title":"Imperceptible diffusion modification for facial privacy protection","author":"Li","year":"2025","journal-title":"Neurocomputing"},{"key":"10.1016\/j.ipm.2026.104947_b28","doi-asserted-by":"crossref","unstructured":"Li, Q., Hu, Y., Liu, Y., Zhang, D., Jin, X., & Chen, Y. (2023). Discrete point-wise attack is not enough: Generalized manifold adversarial attack for face recognition. In Proc. IEEE conf. comput. vis. pattern recognit. (pp. 20575\u201320584).","DOI":"10.1109\/CVPR52729.2023.01971"},{"issue":"5","key":"10.1016\/j.ipm.2026.104947_b29","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2025.104214","article-title":"Diversified perturbation guided by optimal target code for cross-modal adversarial attack","volume":"62","author":"Li","year":"2025","journal-title":"Information Processing & Management."},{"key":"10.1016\/j.ipm.2026.104947_b30","unstructured":"Li, J., Li, D., Xiong, C., & Hoi, S. (2022). Blip: Bootstrapping language-image pre-training for unified vision-language understanding and generation. In Proc. int. conf. mach. learn. (pp. 12888\u201312900)."},{"key":"10.1016\/j.ipm.2026.104947_b31","doi-asserted-by":"crossref","unstructured":"Li, Z., Yin, B., Yao, T., Guo, J., Ding, S., Chen, S., & Liu, C. (2023). Sibling-attack: Rethinking transferable adversarial attacks against face recognition. In Proc. IEEE conf. comput. vis. pattern recognit. (pp. 24626\u201324637).","DOI":"10.1109\/CVPR52729.2023.02359"},{"key":"10.1016\/j.ipm.2026.104947_b32","doi-asserted-by":"crossref","unstructured":"Li, W., Zhang, Z., Lan, X., & Jiang, D. (2025). Transferable Adversarial Face Attack with Text Controlled Attribute. In Proceedings of the AAAI conference on artificial intelligence (pp. 4977\u20134985).","DOI":"10.1609\/aaai.v39i5.32527"},{"key":"10.1016\/j.ipm.2026.104947_b33","article-title":"DiffProtect: Generative adversarial examples using diffusion models for facial privacy protection","author":"Liu","year":"2025","journal-title":"Pattern Recognition"},{"issue":"3","key":"10.1016\/j.ipm.2026.104947_b34","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2025.104544","article-title":"Seattack: A self-evolving jailbreak attack to induce toxic responses for non-toxic queries in large language models","volume":"63","author":"Liu","year":"2026","journal-title":"Information Processing & Management"},{"key":"10.1016\/j.ipm.2026.104947_b35","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2024.110915","article-title":"Radap: A robust and adaptive defense against diverse adversarial patches on face recognition","volume":"157","author":"Liu","year":"2025","journal-title":"Pattern Recognition"},{"key":"10.1016\/j.ipm.2026.104947_b36","first-page":"3585","article-title":"Adv-diffusion: imperceptible adversarial face identity attack via latent diffusion model","volume":"vol. 38","author":"Liu","year":"2024"},{"key":"10.1016\/j.ipm.2026.104947_b37","series-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017"},{"key":"10.1016\/j.ipm.2026.104947_b38","unstructured":"Radford, A., Kim, J. W., Hallacy, C., Ramesh, A., Goh, G., Agarwal, S., Sastry, G., Askell, A., Mishkin, P., Clark, J., et al. (2021). Learning transferable visual models from natural language supervision. In Proc. int. conf. mach. learn. (pp. 8748\u20138763)."},{"issue":"1","key":"10.1016\/j.ipm.2026.104947_b39","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2024.103928","article-title":"A comprehensive survey on social engineering attacks, countermeasures, case study, and research challenges","volume":"62","author":"Rathod","year":"2025","journal-title":"Information Processing & Management."},{"key":"10.1016\/j.ipm.2026.104947_b40","doi-asserted-by":"crossref","unstructured":"Schroff, F., Kalenichenko, D., & Philbin, J. (2015). Facenet: A unified embedding for face recognition and clustering. In IEEE conference on computer vision and pattern recognition (pp. 815\u2013823).","DOI":"10.1109\/CVPR.2015.7298682"},{"key":"10.1016\/j.ipm.2026.104947_b41","doi-asserted-by":"crossref","unstructured":"Selvaraju, R. R., Cogswell, M., Das, A., Vedantam, R., Parikh, D., & Batra, D. (2017). Grad-cam: Visual explanations from deep networks via gradient-based localization. In Proc. IEEE int. conf. comput. vis. (pp. 618\u2013626).","DOI":"10.1109\/ICCV.2017.74"},{"key":"10.1016\/j.ipm.2026.104947_b42","doi-asserted-by":"crossref","first-page":"1439","DOI":"10.1109\/TMM.2022.3233251","article-title":"Depth-aware multi-person 3D pose estimation with multi-scale waterfall representations","volume":"25","author":"Shen","year":"2023","journal-title":"IEEE Trans. Multim."},{"key":"10.1016\/j.ipm.2026.104947_b43","doi-asserted-by":"crossref","DOI":"10.1016\/j.applthermaleng.2025.127220","article-title":"Explainable boiling acoustics analysis using grad-CAM and yamnet for robust pool boiling regime classification","author":"Suriyaprasaad","year":"2025","journal-title":"Applied Thermal Engineering"},{"key":"10.1016\/j.ipm.2026.104947_b44","series-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"10.1016\/j.ipm.2026.104947_b45","doi-asserted-by":"crossref","unstructured":"Tang, B., Wang, Z., Bin, Y., Dou, Q., Yang, Y., & Shen, H. T. (2024). Ensemble diversity facilitates adversarial transferability. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 24377\u201324386).","DOI":"10.1109\/CVPR52733.2024.02301"},{"issue":"7","key":"10.1016\/j.ipm.2026.104947_b46","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2026.104831","article-title":"EvoJail: Evolutionary diverse jailbreak prompt generation for large language models","volume":"63","author":"Tang","year":"2026","journal-title":"Information Processing & Management"},{"key":"10.1016\/j.ipm.2026.104947_b47","series-title":"Diffusion-driven universal model inversion attack for face recognition","first-page":"arXiv","author":"Wang","year":"2025"},{"issue":"3","key":"10.1016\/j.ipm.2026.104947_b48","first-page":"2711","article-title":"Adversarial sticker: A stealthy attack method in the physical world","volume":"45","author":"Wei","year":"2023","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.ipm.2026.104947_b49","doi-asserted-by":"crossref","unstructured":"Wu, C., Chen, X., Wu, Z., Ma, Y., Liu, X., & Pan, Z. (2025). Janus: Decoupling visual encoding for unified multimodal understanding and generation. In IEEE conference on computer vision and pattern recognition (pp. 12966\u201312977).","DOI":"10.1109\/CVPR52734.2025.01210"},{"key":"10.1016\/j.ipm.2026.104947_b50","series-title":"Adv-makeup: A new imperceptible and transferable attack on face recognition","author":"Yin","year":"2021"},{"issue":"1","key":"10.1016\/j.ipm.2026.104947_b51","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2025.104302","article-title":"Dual transferable knowledge interaction for source-free domain adaptation","volume":"63","author":"Zhan","year":"2026","journal-title":"Information Processing & Management"},{"key":"10.1016\/j.ipm.2026.104947_b52","article-title":"Robust and unstigmatized imperceptible perturbations for rendering face manipulation ineffective","author":"Zhang","year":"2025","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"10.1016\/j.ipm.2026.104947_b53","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2025.112959","article-title":"Dyartbank: Diverse artistic style transfer via pre-trained stable diffusion and dynamic style prompt artbank","volume":"310","author":"Zhang","year":"2025","journal-title":"Knowledge-Based Systems"},{"key":"10.1016\/j.ipm.2026.104947_b54","doi-asserted-by":"crossref","unstructured":"Zhang, Y., Zhang, Q., Song, Y., Zhang, J., Tang, H., & Liu, J. (2025). Stable-hair: Real-world hair transfer via diffusion model. In Proceedings of the AAAI conference on artificial intelligence (pp. 10348\u201310356).","DOI":"10.1609\/aaai.v39i10.33123"},{"key":"10.1016\/j.ipm.2026.104947_b55","doi-asserted-by":"crossref","unstructured":"Zhou, Z., Hu, S., Li, M., Zhang, H., Zhang, Y., & Jin, H. (2023). Advclip: Downstream-agnostic adversarial examples in multimodal contrastive learning. In ACM international conference on multimedia (pp. 6311\u20136320).","DOI":"10.1145\/3581783.3612454"},{"key":"10.1016\/j.ipm.2026.104947_b56","article-title":"Improving the transferability of adversarial attacks on face recognition with beneficial perturbation feature augmentation","author":"Zhou","year":"2023","journal-title":"IEEE Transactions on Computational Social Systems"},{"key":"10.1016\/j.ipm.2026.104947_b57","doi-asserted-by":"crossref","unstructured":"Zhou, F., Yin, B., Ling, H., Zhou, Q., & Wang, W. (2025). Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation. In Proc. IEEE conf. comput. vis. pattern recognit. (pp. 3516\u20133527).","DOI":"10.1109\/CVPR52734.2025.00333"},{"issue":"1","key":"10.1016\/j.ipm.2026.104947_b58","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2025.104321","article-title":"MI3s: A multimodal large language model assisted quality assessment framework for AI-generated talking heads","volume":"63","author":"Zhou","year":"2026","journal-title":"Information Processing & Management."},{"key":"10.1016\/j.ipm.2026.104947_b59","doi-asserted-by":"crossref","unstructured":"Zhou, F., Zhou, Q., Yin, B., Zheng, H., Lu, X., Ma, L., & Ling, H. (2024). Rethinking impersonation and dodging attacks on face recognition systems. In Proceedings of the 32nd ACM international conference on multimedia (pp. 2487\u20132496).","DOI":"10.1145\/3664647.3681440"}],"container-title":["Information Processing & Management"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0306457326003389?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0306457326003389?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T10:10:37Z","timestamp":1783073437000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0306457326003389"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,12]]},"references-count":59,"journal-issue":{"issue":"8","published-print":{"date-parts":[[2026,12]]}},"alternative-id":["S0306457326003389"],"URL":"https:\/\/doi.org\/10.1016\/j.ipm.2026.104947","relation":{},"ISSN":["0306-4573"],"issn-type":[{"value":"0306-4573","type":"print"}],"subject":[],"published":{"date-parts":[[2026,12]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"A transferable attack framework for face impersonation with surrogate ensemble and semantic guidance","name":"articletitle","label":"Article Title"},{"value":"Information Processing & Management","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.ipm.2026.104947","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"104947"}}