{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,27]],"date-time":"2025-11-27T19:12:42Z","timestamp":1764270762540,"version":"3.46.0"},"reference-count":50,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"7","license":[{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072250","62172435","U1804263","U20B2065","61872203","71802110","61802212"],"award-info":[{"award-number":["62072250","62172435","U1804263","U20B2065","61872203","71802110","61802212"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Zhongyuan Science and Technology Innovation Leading Talent Project of China","award":["214200510019"],"award-info":[{"award-number":["214200510019"]}]},{"DOI":"10.13039\/501100004608","name":"Natural Science Foundation of Jiangsu Province","doi-asserted-by":"publisher","award":["BK20200750"],"award-info":[{"award-number":["BK20200750"]}],"id":[{"id":"10.13039\/501100004608","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Open Foundation of Henan Key Laboratory of Cyberspace Situation Awareness","award":["HNTS2022002"],"award-info":[{"award-number":["HNTS2022002"]}]},{"name":"Postgraduate Research and Practice Innovation Program of Jiangsu Province","award":["KYCX200974"],"award-info":[{"award-number":["KYCX200974"]}]},{"name":"Opening Project of Guangdong Province Key Laboratory of Information Security Technology","award":["2020B1212060078"],"award-info":[{"award-number":["2020B1212060078"]}]},{"name":"Open Project Fund of Shandong Provincial Key Laboratory of Computer Network","award":["SDKLCN-2022-05"],"award-info":[{"award-number":["SDKLCN-2022-05"]}]},{"name":"Ministry of Education of Humanities and Social Science Project","award":["19YJA630061"],"award-info":[{"award-number":["19YJA630061"]}]},{"name":"Graduate Student Scientific Research Innovation Projects of Jiangsu Province","award":["KYCX231359"],"award-info":[{"award-number":["KYCX231359"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Artif. Intell."],"published-print":{"date-parts":[[2025,7]]},"DOI":"10.1109\/tai.2025.3527923","type":"journal-article","created":{"date-parts":[[2025,1,10]],"date-time":"2025-01-10T16:06:52Z","timestamp":1736525212000},"page":"1761-1775","source":"Crossref","is-referenced-by-count":0,"title":["Defense Against Adversarial Faces at the Source: Strengthened Faces Based on Hidden Disturbances"],"prefix":"10.1109","volume":"6","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-4978-2296","authenticated-orcid":false,"given":"Shuangliang","family":"Li","sequence":"first","affiliation":[{"name":"School of Software, Nanjing University of Information Science and Technology, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9366-5671","authenticated-orcid":false,"given":"Jinwei","family":"Wang","sequence":"additional","affiliation":[{"name":"College of Cryptology and Cyber Science, Nankai University, Tianjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2324-2152","authenticated-orcid":false,"given":"Hao","family":"Wu","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1745-7763","authenticated-orcid":false,"given":"Jiawei","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Cyber Security and Information Law, Chongqing University of Posts and Telecommunications, Chongqing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0570-6139","authenticated-orcid":false,"given":"Xin","family":"Cheng","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Information Science and Technology, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6062-2950","authenticated-orcid":false,"given":"Xiangyang","family":"Luo","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9030-7393","authenticated-orcid":false,"given":"Bin","family":"Ma","sequence":"additional","affiliation":[{"name":"Shandong Provincial Key Laboratory of Computer Networks and Qilu University of Technology, Shangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn..","author":"Athalye","year":"2018"},{"key":"ref2","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn..","author":"Athalye","year":"2018"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2016.7472621"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2023.3285858"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-97909-0_46"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB48548.2020.9304898"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00482"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3422622"},{"article-title":"Explaining and harnessing adversarial examples","year":"2014","author":"Goodfellow","key":"ref12"},{"article-title":"Countering adversarial images using input transformations","year":"2017","author":"Guo","key":"ref13"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"ref16","article-title":"Adversarial example defense: Ensembles of weak defenses are not strong","author":"He","year":"2017","journal-title":"Proc. 11th USENIX Workshop Offensive Technologies (WOOT)"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2205597"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01459"},{"key":"ref19","article-title":"Labeled faces in the wild: A database forstudying face recognition in unconstrained environments","author":"Huang","year":"2008","journal-title":"Workshop Faces in \u2018Real-Life\u2019 Images. Detection, Alignment, and Recognition"},{"article-title":"Data augmentation by pairing samples for images classification","year":"2018","author":"Inoue","key":"ref20"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW.2019.00257"},{"article-title":"Adam: A method for stochastic optimization","year":"2014","author":"Kingma","key":"ref22"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR48806.2021.9412236"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/tai.2022.3198629"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2018.2874243"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.713"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01234-2_23"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00095"},{"article-title":"Towards deep learning models resistant to adversarial attacks","year":"2017","author":"Madry","key":"ref30"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"article-title":"The effectiveness of data augmentation in image classification using deep learning","year":"2017","author":"Perez","key":"ref33"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298682"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"article-title":"Very deep convolutional networks for large-scale image recognition","year":"2014","author":"Simonyan","key":"ref36"},{"article-title":"Pixeldefend: Leveraging generative models to understand and defend against adversarial examples","year":"2017","author":"Song","key":"ref37"},{"article-title":"Intriguing properties of neural networks","year":"2013","author":"Szegedy","key":"ref38"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2022.3168038"},{"article-title":"Ensemble adversarial training: Attacks and defenses","year":"2017","author":"Tram\u00e8","key":"ref40"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3092646"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00552"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/543"},{"article-title":"Mitigating adversarial effects through randomization","year":"2017","author":"Xie","key":"ref44"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00387"},{"article-title":"Learning face representation from scratch","year":"2014","author":"Yi","key":"ref47"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/173"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4899-7687-1_79"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2023.3253083"}],"container-title":["IEEE Transactions on Artificial Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/9078688\/11059979\/10836866.pdf?arnumber=10836866","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,27]],"date-time":"2025-11-27T19:01:12Z","timestamp":1764270072000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10836866\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7]]},"references-count":50,"journal-issue":{"issue":"7"},"URL":"https:\/\/doi.org\/10.1109\/tai.2025.3527923","relation":{},"ISSN":["2691-4581"],"issn-type":[{"type":"electronic","value":"2691-4581"}],"subject":[],"published":{"date-parts":[[2025,7]]}}}