{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,22]],"date-time":"2026-07-22T13:49:58Z","timestamp":1784728198047,"version":"3.55.0"},"reference-count":202,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Pattern Anal. Mach. Intell."],"published-print":{"date-parts":[[2022]]},"DOI":"10.1109\/tpami.2022.3215850","type":"journal-article","created":{"date-parts":[[2022,11,3]],"date-time":"2022-11-03T21:45:08Z","timestamp":1667511908000},"page":"1-22","source":"Crossref","is-referenced-by-count":154,"title":["Deep Learning for Face Anti-Spoofing: A Survey"],"prefix":"10.1109","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6505-3304","authenticated-orcid":false,"given":"Zitong","family":"Yu","sequence":"first","affiliation":[{"name":"Center for Machine Vision and Signal Analysis, University of Oulu, Oulu, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3209-020X","authenticated-orcid":false,"given":"Yunxiao","family":"Qin","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Media Convergence and Communication, Communication University of China, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4519-7823","authenticated-orcid":false,"given":"Xiaobai","family":"Li","sequence":"additional","affiliation":[{"name":"Center for Machine Vision and Signal Analysis, University of Oulu, Oulu, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chenxu","family":"Zhao","sequence":"additional","affiliation":[{"name":"SailYond Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0791-189X","authenticated-orcid":false,"given":"Zhen","family":"Lei","sequence":"additional","affiliation":[{"name":"National Laboratory of Pattern Recognition (NLPR), Center for Biometrics and Security Research (CBSR), Institute of Automation, Chinese Academy of Sciences (CASIA), Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3694-206X","authenticated-orcid":false,"given":"Guoying","family":"Zhao","sequence":"additional","affiliation":[{"name":"Center for Machine Vision and Signal Analysis, University of Oulu, Oulu, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00620"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2007.4409068"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2016.7900300"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37410-4_11"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2013.6712690"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2578288"},{"key":"ref7","first-page":"235","article-title":"Liveness detection for embedded face recognition system","volume":"1","author":"Jee","year":"2006","journal-title":"Int. J. Biol. Med. Sci."},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLC.2008.4620894"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/S1007-0214(09)70135-X"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/IASP.2009.5054589"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CIHSPS.2004.1360218"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/EST.2012.12"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00048"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3345336.3345345"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00024"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2015.7351280"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2016.2630740"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15567-3_37"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2018.08.019"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICIVC.2017.7984552"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.imavis.2019.103858"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ipr.2018.5560"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00534"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58571-6_33"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00362"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2017.8272713"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW50498.2020.00333"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TBIOM.2020.2973001"},{"key":"ref29","article-title":"Learn convolutional neural network for face anti-spoofing","author":"Yang","year":"2014"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/IPTA.2016.7821013"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46654-5_67"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICB45273.2019.8987370"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01261-8_18"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2020.3044986"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2020.05.017"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW.2019.00062"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3036338"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00481"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.2985530"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB48548.2020.9304873"},{"key":"ref41","article-title":"Learning generalized spoof cues for face anti-spoofing","author":"Feng","year":"2020"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58523-5_24"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3091167"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58610-2_5"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2916652"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICB.2016.7550052"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3441250.3441254"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01026"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6873"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00671"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00851"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2729161"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6866"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2020.08.068"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TBIOM.2020.3010312"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-32583-1_13"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2019.107032"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1049\/iet-bmt.2020.0004"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3188149"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2020.06.014"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-019-01160-w"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1049\/bme2.12002"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-92627-8_9"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/ICB.2013.6612981"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1049\/iet-bmt.2017.0089"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-92627-8"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3038924"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2011.6116484"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/ICB.2012.6199754"},{"key":"ref70","first-page":"1","article-title":"On the effectiveness of local binary patterns in face anti-spoofing","volume-title":"Proc. IEEE Int. Conf. Biometrics Special Int. Group","author":"Chingovska"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2013.24"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2400395"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2395139"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/BIOSIG.2016.7736936"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46478-7_6"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2676720"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/FG.2017.77"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2801312"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9053946"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0238058"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2014.2322255"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2015.2395951"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1049\/iet-bmt.2014.0075"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28501-6_8"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2017.40"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.23919\/BIOSIG.2017.8053524"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1117\/1.JEI.28.1.013003"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2018.8698550"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/AVSS.2019.8909845"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00101"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/WACV48630.2021.00122"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01458"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2010.11.024"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2014.2349158"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.3403\/30329606"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00509"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58529-7_38"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/177"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58523-5_24"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW54120.2021.00097"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01964"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00409"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2021.107888"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298965"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2016.2577031"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2006.244"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2005.177"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2014.211"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2010.143"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58536-5_18"},{"key":"ref113","article-title":"Learning deep forest with multi-scale local binary pattern features for face anti-spoofing","author":"Cai","year":"2019"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1016\/j.jvcir.2016.03.019"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2021.3089908"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1049\/iet-bmt.2019.0155"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS46853.2019.9186000"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2868230"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2007.1110"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.5815\/ijigsp.2019.02.02"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-20005-3_1"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2895212"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"ref124","first-page":"448","article-title":"Batch normalization: Accelerating deep network training by reducing internal covariate shift","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Ioffe"},{"key":"ref125","first-page":"1929","article-title":"Dropout: A simple way to prevent neural networks from overfitting","volume":"15","author":"Srivastava","year":"2014","journal-title":"J. Mach. Learn. Res."},{"key":"ref126","article-title":"In defense of the triplet loss for person re-identification","author":"Hermans","year":"2017"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-59876-5_4"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2922241"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB52358.2021.9484333"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3029879"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/ACPR.2015.7486482"},{"key":"ref133","article-title":"Face anti-spoofing via sample learning based recurrent neural network (RNN)","volume-title":"Proc. Brit. Mach. Vis. Conf.","author":"Muhammad"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1109\/CTISC49998.2020.00025"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-31654-9_15"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3055018"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9053922"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9054115"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2021.3133620"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3158062"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1109\/DICTA51227.2020.9363382"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9053587"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.3390\/s21082799"},{"key":"ref145","first-page":"723","article-title":"A kernel two-sample test","volume":"13","author":"Gretton","year":"2012","journal-title":"J. Mach. Learn. Res."},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1109\/ICB45273.2019.8987254"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3002390"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2021.3066912"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1109\/ICMEW.2019.00-88"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9053685"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1109\/JSTSP.2020.3001719"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i2.16199"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3475279"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i4.16379"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB48548.2020.9304920"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/ICB2018.2018.00022"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2018.8698574"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB48548.2020.9304935"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00201"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3013214"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9054420"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2019.113002"},{"key":"ref163","article-title":"Aurora guard: Real-time face anti-spoofing via light reflection","author":"Hu","year":"2019"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-31967-0_4"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2013.6639363"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2016.7900303"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.3390\/sym11030360"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20074-8_11"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3035879"},{"key":"ref170","doi-asserted-by":"publisher","DOI":"10.1145\/3372224.3419206"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB48548.2020.9304862"},{"key":"ref172","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00204"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.1145\/3343031.3351001"},{"key":"ref174","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00203"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00779"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1109\/ICB45273.2019.8987247"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1109\/TCDS.2021.3064679"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00199"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-020-08952-0"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3065495"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW53098.2021.00159"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i2.20071"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1049\/bme2.12045"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1109\/FG52635.2021.9667024"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1049\/bme2.12002"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW59228.2023.00675"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00732"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1145\/3317611"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR48806.2021.9412236"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/173"},{"key":"ref192","article-title":"Meaningful adversarial stickers for face recognition in physical world","author":"Guo","year":"2021"},{"key":"ref193","article-title":"Attacking CNN-based anti-spoofing face authentication in the physical domain","author":"Zhang","year":"2019"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3009287"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9746477"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1109\/FG57933.2023.10042500"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-57959-7"},{"key":"ref198","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. 20th Int. Conf. Artif. Intell. Statist.","author":"McMahan"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.1109\/FG52635.2021.9666952"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00460"},{"key":"ref201","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP39728.2021.9413926"},{"key":"ref202","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3352049"}],"container-title":["IEEE Transactions on Pattern Analysis and Machine Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/34\/4359286\/09925105.pdf?arnumber=9925105","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,22]],"date-time":"2024-01-22T22:45:02Z","timestamp":1705963502000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9925105\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"references-count":202,"URL":"https:\/\/doi.org\/10.1109\/tpami.2022.3215850","relation":{},"ISSN":["0162-8828","2160-9292","1939-3539"],"issn-type":[{"value":"0162-8828","type":"print"},{"value":"2160-9292","type":"electronic"},{"value":"1939-3539","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]}}}