{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T19:53:02Z","timestamp":1781812382819,"version":"3.54.5"},"reference-count":64,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2020AAA0140000"],"award-info":[{"award-number":["2020AAA0140000"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004731","name":"Zhejiang Provincial Natural Science Foundation of China","doi-asserted-by":"publisher","award":["LDT23F01013F01"],"award-info":[{"award-number":["LDT23F01013F01"]}],"id":[{"id":"10.13039\/501100004731","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Alibaba Group through Alibaba Research Intern Program"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/tifs.2023.3262156","type":"journal-article","created":{"date-parts":[[2023,3,29]],"date-time":"2023-03-29T19:00:12Z","timestamp":1680116412000},"page":"2046-2059","source":"Crossref","is-referenced-by-count":30,"title":["Information-Containing Adversarial Perturbation for Combating Facial Manipulation Systems"],"prefix":"10.1109","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0991-1970","authenticated-orcid":false,"given":"Yao","family":"Zhu","sequence":"first","affiliation":[{"name":"College of Biomedical Engineering and Instrument Science, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9027-3421","authenticated-orcid":false,"given":"Yuefeng","family":"Chen","sequence":"additional","affiliation":[{"name":"Security Department, Alibaba Group, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5025-4805","authenticated-orcid":false,"given":"Xiaodan","family":"Li","sequence":"additional","affiliation":[{"name":"Security Department, Alibaba Group, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2288-2847","authenticated-orcid":false,"given":"Rong","family":"Zhang","sequence":"additional","affiliation":[{"name":"Security Department, Alibaba Group, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0735-8454","authenticated-orcid":false,"given":"Xiang","family":"Tian","sequence":"additional","affiliation":[{"name":"College of Biomedical Engineering and Instrument Science, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8788-1725","authenticated-orcid":false,"given":"Bolun","family":"Zheng","sequence":"additional","affiliation":[{"name":"Zhejiang Provincial Key Laboratory for Network Multimedia Technologies, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6037-0631","authenticated-orcid":false,"given":"Yaowu","family":"Chen","sequence":"additional","affiliation":[{"name":"College of Biomedical Engineering and Instrument Science, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Szegedy"},{"key":"ref2","first-page":"1","article-title":"Rethinking adversarial transferability from a data distribution perspective","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Zhu"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/tip.2015.2395951"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2021.3111766"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2021.3073823"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2021.3076287"},{"key":"ref7","first-page":"247","article-title":"Visual SLAM for automated driving: Exploring the applications of deep learning","volume-title":"Proc. IEEE\/CVF Conf. Comput. Vis. Pattern Recognit. Workshops (CVPRW)","author":"Milz"},{"key":"ref8","first-page":"1326","article-title":"Attention-based hierarchical deep reinforcement learning for lane change behaviors in autonomous driving","volume-title":"Proc. IEEE\/RSJ Int. Conf. Intell. Robots Syst. (IROS)","author":"Chen"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/AVSS.2018.8639163"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1093\/jiplp\/jpz167"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.262"},{"key":"ref12","first-page":"1","volume-title":"DeepFake\u2019 App Causes Fraud and Privacy Fears in China","author":"Coleman","year":"2019"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413865"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.397"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00582"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/WIFS.2018.8630787"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW.2019.00213"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-66823-5_14"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i2.16254"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i1.19982"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.5555\/2969033.2969125"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3047753"},{"key":"ref23","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Goodfellow"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1312.6114"},{"key":"ref26","first-page":"14866","article-title":"Generating diverse high-fidelity images with VQ-VAE-2","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Razavi"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00232"},{"key":"ref28","first-page":"1486","article-title":"Deep generative image models using a Laplacian pyramid of adversarial networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"28","author":"Denton"},{"key":"ref29","first-page":"1","article-title":"Progressive growing of GANs for improved quality, stability, and variation","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Karras"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00453"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.740"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00916"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00028"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.244"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2021.3105725"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00853"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00505"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3366424.3382711"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2021.3102487"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00083"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2020.3045937"},{"key":"ref42","first-page":"104","article-title":"A digital watermarking algorithm based on DCT and DWT","volume-title":"Proc. Int. Symp. Web Inf. Syst. Appl. (WISA)","author":"Jiansheng"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/79.939835"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/1244002.1244232"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01267-0_40"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3475518"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3002390"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3036801"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3135748"},{"key":"ref50","first-page":"1","article-title":"Adversarial machine learning at scale","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Kurakin"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00068"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3475324"},{"key":"ref55","volume-title":"JPEG: Still Image Data Compression Standard","author":"Pennebaker","year":"1992"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3343031.3351025"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00622"},{"key":"ref58","article-title":"Labeled faces in the wild: A database for studying face recognition in unconstrained environments","author":"Huang","year":"2007"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.5555\/3454287.3455008"},{"key":"ref60","article-title":"Adam: A method for stochastic optimization","author":"Kingma","year":"2014","journal-title":"arXiv:1412.6980"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/IPTA.2010.5586786"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413630"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413532"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9970396\/10086559.pdf?arnumber=10086559","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,14]],"date-time":"2024-03-14T03:42:00Z","timestamp":1710387720000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10086559\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":64,"URL":"https:\/\/doi.org\/10.1109\/tifs.2023.3262156","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}