{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T08:55:12Z","timestamp":1784019312781,"version":"3.55.0"},"reference-count":39,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100004543","name":"China Scholarship Council","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100004543","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Open J. Comput. Soc."],"published-print":{"date-parts":[[2022]]},"DOI":"10.1109\/ojcs.2022.3218559","type":"journal-article","created":{"date-parts":[[2022,11,4]],"date-time":"2022-11-04T01:34:33Z","timestamp":1667525673000},"page":"271-280","source":"Crossref","is-referenced-by-count":2,"title":["Efficient Video Privacy Protection Against Malicious Face Recognition Models"],"prefix":"10.1109","volume":"3","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3462-1505","authenticated-orcid":false,"given":"Enting","family":"Guo","sequence":"first","affiliation":[{"name":"School of Computer Science and Engineering, University of Aizu, Aizuwakamatsu, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4981-0496","authenticated-orcid":false,"given":"Peng","family":"Li","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Aizu, Aizuwakamatsu, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4485-6743","authenticated-orcid":false,"given":"Shui","family":"Yu","sequence":"additional","affiliation":[{"name":"School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9301-5989","authenticated-orcid":false,"given":"Hao","family":"Wang","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Norwegian University of Science and Technology, Trondheim, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"265","article-title":"TensorFlow: A system for large-scale machine learning","author":"abadi","year":"0","journal-title":"Proc 12th USENIX Conf Operating Syst Des Implementation"},{"key":"ref38","article-title":"Beyond the single neuron convex barrier for neural network certification","author":"singh","year":"0","journal-title":"Proc 33rd Int Conf Neural Inf Process Syst"},{"key":"ref33","first-page":"10355","article-title":"DeltaGrad: Rapid retraining of machine learning models","author":"wu","year":"0","journal-title":"Proc 37th Int Conf Mach Learn"},{"key":"ref32","first-page":"1299","article-title":"When does machine learning generalized transferability for evasion and poisoning attacks","author":"suciu","year":"0","journal-title":"Proc USENIX Conf Secur Symp"},{"key":"ref31","first-page":"3520","article-title":"Certified defenses for data poisoning attacks","author":"steinhardt","year":"0","journal-title":"Proc 31st Int Conf Neural Inf Process Syst"},{"key":"ref30","first-page":"209","article-title":"Privid: Practical, privacy-preserving video analytics queries","author":"cangialosi","year":"0","journal-title":"Proc 19th USENIX Symp Netw Syst Des Implementation"},{"key":"ref37","first-page":"1299","article-title":"When does machine learning fall? generalized transferability for evasion and poisoning attacks","author":"suciu","year":"0","journal-title":"Proc 27th USENIX Conf Secur Symp"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref35","first-page":"1281","article-title":"With great training comes great vulnerability: Practical attacks against transfer learning","author":"wang","year":"0","journal-title":"Proc 27th USENIX Conf Secur Symp"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00012"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58548-8_1"},{"key":"ref12","first-page":"6103","article-title":"Poison frogs! Targeted clean-label poisoning attacks on neural networks","author":"shafahi","year":"0","journal-title":"Proc 32nd Int Conf Neural Inf Process Syst"},{"key":"ref13","first-page":"7614","article-title":"Transferable clean-label poisoning attacks on deep neural nets","author":"zhu","year":"0","journal-title":"Proc 36th Int Conf Mach Learn"},{"key":"ref14","article-title":"Fawkes: Protecting privacy against unauthorized deep learning models","author":"shan","year":"0","journal-title":"Proc 29th USENIX Conf Secur Symp"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2016.2603342"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3425780"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.265"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3447993.3448618"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00947"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3318464.3389692"},{"key":"ref4","first-page":"7044","article-title":"Level playing field for million scale face recognition","author":"aaron","year":"0","journal-title":"Proc IEEE Conf Comput Vis and Pattern Recog"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/1559845.1559850"},{"key":"ref3","first-page":"321","article-title":"Why do adversarial attacks transfer? explaining transferability of evasion and poisoning attacks","author":"ambra","year":"0","journal-title":"Proc 28th USENIX Conf Secur Symp"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.384"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00013"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01246-5_34"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.3301962"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/s11390-019-1898-8"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3386901.3388946"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134077"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3386901.3388948"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-79228-4_1"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3187009.3177733"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354261"}],"container-title":["IEEE Open Journal of the Computer Society"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8782664\/9682503\/09933823.pdf?arnumber=9933823","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,19]],"date-time":"2022-12-19T19:40:31Z","timestamp":1671478831000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9933823\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"references-count":39,"URL":"https:\/\/doi.org\/10.1109\/ojcs.2022.3218559","relation":{},"ISSN":["2644-1268"],"issn-type":[{"value":"2644-1268","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]}}}