{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,26]],"date-time":"2025-12-26T05:36:42Z","timestamp":1766727402635,"version":"3.48.0"},"reference-count":71,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372128"],"award-info":[{"award-number":["62372128"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001321","name":"Guangdong Basic and Applied Basic Research Foundation","doi-asserted-by":"publisher","award":["2025A1515010264"],"award-info":[{"award-number":["2025A1515010264"]}],"id":[{"id":"10.13039\/501100001321","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001321","name":"Guangdong Basic and Applied Basic Research Foundation","doi-asserted-by":"publisher","award":["2023A1515011575"],"award-info":[{"award-number":["2023A1515011575"]}],"id":[{"id":"10.13039\/501100001321","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001321","name":"Guangdong Basic and Applied Basic Research Foundation","doi-asserted-by":"publisher","award":["2024A1515011475"],"award-info":[{"award-number":["2024A1515011475"]}],"id":[{"id":"10.13039\/501100001321","id-type":"DOI","asserted-by":"publisher"}]},{"name":"uangzhou Municipal Applied Basic Research Program Project","award":["2025A03J3122"],"award-info":[{"award-number":["2025A03J3122"]}]},{"name":"uangzhou Municipal Applied Basic Research Program Project","award":["2024A03J0092"],"award-info":[{"award-number":["2024A03J0092"]}]},{"name":"Open Project Program of the State Key Laboratory of CAD and CG Zhejiang University","award":["A2431"],"award-info":[{"award-number":["A2431"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tifs.2025.3643157","type":"journal-article","created":{"date-parts":[[2025,12,11]],"date-time":"2025-12-11T18:44:27Z","timestamp":1765478667000},"page":"76-90","source":"Crossref","is-referenced-by-count":0,"title":["IlluAttack: Generating Adversarial Examples via Illumination Transformation for Face Anti-Spoofing"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8053-4587","authenticated-orcid":false,"given":"Fei","family":"Peng","sequence":"first","affiliation":[{"name":"School of Artificial Intelligence and Guangdong Key Laboratory of Blockchain Security, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guohui","family":"Zhou","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence and Guangdong Key Laboratory of Blockchain Security, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1229-2317","authenticated-orcid":false,"given":"Min","family":"Long","sequence":"additional","affiliation":[{"name":"School of Electronics and Communication Engineering, Guangzhou University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2013.6712688"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICB.2012.6199754"},{"key":"ref3","first-page":"1","article-title":"On the effectiveness of local binary patterns in face anti-spoofing","volume-title":"Proc. Int. Conf. Biometrics Special Interest Group (BIOSIG)","author":"Chingovska"},{"key":"ref4","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00614"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR48806.2021.9412236"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3317611"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/173"},{"key":"ref10","article-title":"Invisible mask: Practical attacks on face recognition with infrared","author":"Zhou","year":"2018","journal-title":"arXiv:1803.04683"},{"key":"ref11","first-page":"149","article-title":"Colour processing in adversarial attacks on face liveness systems","volume-title":"Proc. Comput. Graph. Vis. Comput. (CGVC)","author":"Abduh","year":"2019"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.cviu.2020.102988"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/3670339"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2014.211"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2016.2630740"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2020.3044986"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00534"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB52358.2021.9484333"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01964"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00034"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i4.32385"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2025.121904"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2007.902037"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2018.00096"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3050060"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/WACV45572.2020.9093337"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2021.3089908"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP46576.2022.9897560"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2916652"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW50498.2020.00333"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00779"},{"key":"ref32","article-title":"Rethinking vision transformer and masked autoencoder in multimodal face anti-spoofing","author":"Yu","year":"2023","journal-title":"arXiv:2302.05744"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3296330"},{"key":"ref34","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv:1706.06083"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00072"},{"key":"ref37","first-page":"2137","article-title":"Black-box adversarial attacks with limited queries and information","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Ilyas"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.3301742"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00765"},{"key":"ref40","first-page":"2085","article-title":"Adversarial attacks on black box video classifiers: Leveraging the power of geometric transformations","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Li"},{"key":"ref41","article-title":"Attacking deep networks with surrogate-based adversarial black-box methods is easy","author":"Lord","year":"2022","journal-title":"arXiv:2203.08725"},{"key":"ref42","first-page":"4536","article-title":"Diversity can be transferred: Output diversification for white-and black-box attacks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Tashiro"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2022.109009"},{"key":"ref44","first-page":"34136","article-title":"Adv-attribute: Inconspicuous and transferable adversarial attack on face recognition","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NeruIPS)","author":"Jia"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3176760"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TBIOM.2021.3066983"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3029879"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3026553"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3013214"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-023-01778-x"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01959"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02353"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01585"},{"key":"ref54","article-title":"Boost adversarial transferability by uniform scale and mix mask method","author":"Wang","year":"2023","journal-title":"arXiv:2311.12051"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00425"},{"issue":"4","key":"ref56","first-page":"579","article-title":"Dynamic residual distillation network for face anti-spoofing with feature attention learning","volume":"5","author":"Yan","year":"2023","journal-title":"IEEE Trans. Biometrics"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/LGRS.2022.3171973"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3486098"},{"key":"ref59","article-title":"Rethinking the threat and accessibility of adversarial attacks against face recognition systems","author":"Cao","year":"2024","journal-title":"arXiv:2407.08514"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/FG.2017.77"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.01176"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3319330"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02297"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr.2019.00284"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00444"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3215850"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.01803"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00029"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3680857"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/11313711\/11298355.pdf?arnumber=11298355","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,26]],"date-time":"2025-12-26T05:34:51Z","timestamp":1766727291000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11298355\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":71,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3643157","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"type":"print","value":"1556-6013"},{"type":"electronic","value":"1556-6021"}],"subject":[],"published":{"date-parts":[[2026]]}}}