{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,16]],"date-time":"2026-01-16T02:37:36Z","timestamp":1768531056021,"version":"3.49.0"},"reference-count":63,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["11871128"],"award-info":[{"award-number":["11871128"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Chongqing Education Commission Key Project","award":["KJZD-K202114802"],"award-info":[{"award-number":["KJZD-K202114802"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3307132","type":"journal-article","created":{"date-parts":[[2023,8,21]],"date-time":"2023-08-21T17:57:05Z","timestamp":1692640625000},"page":"89369-89382","source":"Crossref","is-referenced-by-count":5,"title":["Adv-Eye: A Transfer-Based Natural Eye Makeup Attack on Face Recognition"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8261-3609","authenticated-orcid":false,"given":"Jiatian","family":"Pi","sequence":"first","affiliation":[{"name":"National Center for Applied Mathematics in Chongqing, Chongqing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-0979-0103","authenticated-orcid":false,"given":"Junyi","family":"Zeng","sequence":"additional","affiliation":[{"name":"Department of Mathematical Sciences, Chongqing Normal University, Chongqing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Quan","family":"Lu","sequence":"additional","affiliation":[{"name":"Mashang Consumer Finance Company Ltd., Chongging, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4549-6372","authenticated-orcid":false,"given":"Ning","family":"Jiang","sequence":"additional","affiliation":[{"name":"Mashang Consumer Finance Company Ltd., Chongging, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haiying","family":"Wu","sequence":"additional","affiliation":[{"name":"Mashang Consumer Finance Company Ltd., Chongging, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Linchengxi","family":"Zeng","sequence":"additional","affiliation":[{"name":"Mashang Consumer Finance Company Ltd., Chongging, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiyou","family":"Wu","sequence":"additional","affiliation":[{"name":"Department of Mathematical Sciences, Chongqing Normal University, Chongqing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","article-title":"Adversarial patch","author":"brown","year":"2017","journal-title":"arXiv 1712 09665"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3240508.3240618"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-020-09604-z"},{"key":"ref56","article-title":"RobFR: Benchmarking adversarial robustness on face recognition","author":"yang","year":"2020","journal-title":"arXiv 2007 04118"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR48806.2021.9412236"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00745"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3317611"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.01058"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/WACV45572.2020.9093632"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00790"},{"key":"ref55","article-title":"Adversarial machine learning at scale","author":"kurakin","year":"2016","journal-title":"arXiv 1611 01236"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref54","article-title":"Adam: A method for stochastic optimization","author":"kingma","year":"2015","journal-title":"Proc 3rd Int Conf Learn Represent (ICLR)"},{"key":"ref17","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2016","journal-title":"arXiv 1607 02533"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB48548.2020.9304898"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9747469"},{"key":"ref18","first-page":"34136","article-title":"Adv-attribute: Inconspicuous and transferable adversarial attack on face recognition","volume":"35","author":"jia","year":"0","journal-title":"Proc Adv Neural Inf Process Syst (NeruIPS)"},{"key":"ref51","article-title":"Texture synthesis using convolutional neural networks","volume":"28","author":"gatys","year":"0","journal-title":"Proc Adv Neural Inf Process Syst (NIPS)"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref46","first-page":"9603","article-title":"Large-scale meta-learning with continual trajectory shifting","volume":"139","author":"shin","year":"2021","journal-title":"Proc 38th Int Conf Mach Learn (ICML)"},{"key":"ref45","first-page":"8152","article-title":"Data augmentation for meta-learning","volume":"139","author":"ni","year":"2021","journal-title":"Proc 38th Int Conf Mach Learn (ICML)"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00012"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00765"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.632"},{"key":"ref41","article-title":"Generative adversarial nets","volume":"27","author":"goodfellow","year":"2014","journal-title":"Proc Adv Neural Inf Process Syst (NIPS)"},{"key":"ref44","first-page":"5149","article-title":"Meta-learning in neural networks: A survey","volume":"44","author":"hospedales","year":"2022","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.244"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/882262.882269"},{"key":"ref8","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2013","journal-title":"arXiv 1312 6199"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00594"},{"key":"ref9","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2014","journal-title":"arXiv 1412 6572"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.2352\/J.ImagingSci.Technol.2022.66.6.060501"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.4018\/IJEHMC.315730"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298682"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.iswa.2023.200262"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8803269"},{"key":"ref35","article-title":"LowKey: Leveraging adversarial attacks to protect social media users from facial recognition","author":"cherepanova","year":"2021","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58558-7_39"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01167"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00068"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00196"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2973069"},{"key":"ref32","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"liu","year":"2017","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.3390\/electronics11030334"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00482"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00453"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref23","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2018","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/WACV56688.2023.00141"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01459"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-020-01419-7"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-94042-7_11"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/173"},{"key":"ref28","article-title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","author":"lin","year":"2020","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01585"},{"key":"ref60","article-title":"GANs trained by a two time-scale update rule converge to a local nash equilibrium","volume":"30","author":"heusel","year":"0","journal-title":"Proc Adv Neural Inf Process Syst (NIPS)"},{"key":"ref62","first-page":"2567","article-title":"Image quality assessment: Unifying structure and texture similarity","volume":"44","author":"ding","year":"2022","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2013.2293423"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10225511.pdf?arnumber=10225511","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,9,18]],"date-time":"2023-09-18T18:14:38Z","timestamp":1695060878000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10225511\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":63,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3307132","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}