{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T05:55:51Z","timestamp":1781675751377,"version":"3.54.5"},"reference-count":26,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,4,23]],"date-time":"2026-04-23T00:00:00Z","timestamp":1776902400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,4,23]],"date-time":"2026-04-23T00:00:00Z","timestamp":1776902400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,4,23]]},"DOI":"10.1109\/iwbf68042.2026.11558160","type":"proceedings-article","created":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T19:42:35Z","timestamp":1781638955000},"page":"1-6","source":"Crossref","is-referenced-by-count":0,"title":["On the Impact of Combining Defenses Against Adversarial Patches in Face Recognition"],"prefix":"10.1109","author":[{"given":"Sander","family":"Joos","sequence":"first","affiliation":[{"name":"Distrinet, KU Leuven,Leuven,Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Max","family":"Van Rompaey","sequence":"additional","affiliation":[{"name":"Distrinet, KU Leuven,Leuven,Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Willem","family":"Verheyen","sequence":"additional","affiliation":[{"name":"Distrinet, KU Leuven,Leuven,Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Davy","family":"Preuveneers","sequence":"additional","affiliation":[{"name":"Distrinet, KU Leuven,Leuven,Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wouter","family":"Joosen","sequence":"additional","affiliation":[{"name":"Distrinet, KU Leuven,Leuven,Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00482"},{"key":"ref2","article-title":"Explaining and harnessing adversarial examples","volume-title":"3rd International Conference on Learning Representations, ICLR","author":"Goodfellow","year":"2015"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref4","volume":"abs\/1712.09665","author":"Brown","year":"2017","journal-title":"Adversarial patch"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref6","volume-title":"Countering adversarial images using input transformations","author":"Guo","year":"2018"},{"key":"ref7","author":"Kang","year":"2023","journal-title":"Diffender: Diffusion-based adversarial defense against patch attacks in the physical world"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02300"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref10","doi-asserted-by":"crossref","first-page":"24472","DOI":"10.1109\/CVPR52733.2024.02310","article-title":"Pad: Patchagnostic defense against adversarial patch attacks","volume-title":"2024 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Jing","year":"2024"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.52202\/075280-2531"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3102492"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3687264"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/173"},{"key":"ref15","first-page":"15","article-title":"Adversarial example defenses: ensembles of weak defenses are not strong","volume-title":"Proceedings of the 11th USENIX Conference on Offensive Technologies, ser. WOOT\u201917","author":"He","year":"2017"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00669"},{"key":"ref17","article-title":"Demystifying the adversarial robustness of random transformation defenses","volume-title":"The AAAI-22 Workshop on Adversarial Machine Learning and Beyond","author":"Sitawarin","year":"2022"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.5220\/0012315500003648"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.683"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3478324"},{"key":"ref21","volume-title":"Ms-celeb-1m: A dataset and benchmark for large-scale face recognition","volume":"abs\/1607.08221","author":"Guo","year":"2016"},{"key":"ref22","first-page":"770","article-title":"Deep residual learning for image recognition","volume-title":"2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","author":"He","year":"2015"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/fg.2018.00020"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00371"},{"key":"ref25","article-title":"Defending against physically realizable attacks on image classification","volume-title":"International Conference on Learning Representations","author":"Wu","year":"2020"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr52688.2022.01295"}],"event":{"name":"2026 14th International Workshop on Biometrics and Forensics (IWBF)","location":"Sophia Antipolis, France","start":{"date-parts":[[2026,4,23]]},"end":{"date-parts":[[2026,4,24]]}},"container-title":["2026 14th International Workshop on Biometrics and Forensics (IWBF)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11558119\/11558139\/11558160.pdf?arnumber=11558160","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T05:30:53Z","timestamp":1781674253000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11558160\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,23]]},"references-count":26,"URL":"https:\/\/doi.org\/10.1109\/iwbf68042.2026.11558160","relation":{},"subject":[],"published":{"date-parts":[[2026,4,23]]}}}