{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,19]],"date-time":"2025-09-19T08:14:15Z","timestamp":1758269655208,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":58,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,12]],"date-time":"2020-10-12T00:00:00Z","timestamp":1602460800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Singapore National Cybersecurity R&D Program","award":["NRF2018NCR-NCR005-0001"],"award-info":[{"award-number":["NRF2018NCR-NCR005-0001"]}]},{"name":"JSPS KAKENHI","award":["19K24348","19H04086","20H04168"],"award-info":[{"award-number":["19K24348","19H04086","20H04168"]}]},{"name":"NRF Investigatorship","award":["NRFI06-2020-0022"],"award-info":[{"award-number":["NRFI06-2020-0022"]}]},{"name":"JST-Mirai Program","award":["JPMJMI18BB"],"award-info":[{"award-number":["JPMJMI18BB"]}]},{"name":"National Satellite of Excellence in Trustworthy Software System","award":["NRF2018NCR-NSOE003-0001"],"award-info":[{"award-number":["NRF2018NCR-NSOE003-0001"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,12]]},"DOI":"10.1145\/3394171.3413544","type":"proceedings-article","created":{"date-parts":[[2020,10,12]],"date-time":"2020-10-12T12:27:38Z","timestamp":1602505658000},"page":"1376-1385","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":21,"title":["Amora: Black-box Adversarial Morphing Attack"],"prefix":"10.1145","author":[{"given":"Run","family":"Wang","sequence":"first","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Felix","family":"Juefei-Xu","sequence":"additional","affiliation":[{"name":"Alibaba Group, San Francisco, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qing","family":"Guo","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yihao","family":"Huang","sequence":"additional","affiliation":[{"name":"East China Normal University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaofei","family":"Xie","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lei","family":"Ma","sequence":"additional","affiliation":[{"name":"Kyushu University, Fukuoka, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yang","family":"Liu","sequence":"additional","affiliation":[{"name":"Nanyang Technology University, Singapore & Zhejiang University, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,10,12]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"2020. flownet2-pytorch: Pytorch implementation of FlowNet 2.0: Evolution of Optical Flow Estimation with Deep Networks. https:\/\/github.com\/NVIDIA\/ flownet2-pytorch. (2020).  2020. flownet2-pytorch: Pytorch implementation of FlowNet 2.0: Evolution of Optical Flow Estimation with Deep Networks. https:\/\/github.com\/NVIDIA\/ flownet2-pytorch. (2020)."},{"key":"e_1_3_2_2_2_1","unstructured":"2020. Keras-vggface. https:\/\/github.com\/rcmalli\/keras-vggface. (2020).  2020. Keras-vggface. https:\/\/github.com\/rcmalli\/keras-vggface. (2020)."},{"key":"e_1_3_2_2_3_1","unstructured":"2020. Progressive Growing of GANs for Improved Quality Stability and Variation. https:\/\/github.com\/tkarras\/progressive_growing_of_gans. (2020).  2020. Progressive Growing of GANs for Improved Quality Stability and Variation. https:\/\/github.com\/tkarras\/progressive_growing_of_gans. (2020)."},{"key":"e_1_3_2_2_4_1","unstructured":"2020. StyleGAN Encoder - converts real images to latent space. https:\/\/github. com\/Puzer\/stylegan-encoder. (2020).  2020. StyleGAN Encoder - converts real images to latent space. https:\/\/github. com\/Puzer\/stylegan-encoder. (2020)."},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00453"},{"key":"e_1_3_2_2_6_1","unstructured":"Rima Alaifari Giovanni S Alberti and Tandri Gauksson. 2018. ADef: an iterative algorithm to construct adversarial deformations. arXiv preprint arXiv:1804.07729 (2018).  Rima Alaifari Giovanni S Alberti and Tandri Gauksson. 2018. ADef: an iterative algorithm to construct adversarial deformations. arXiv preprint arXiv:1804.07729 (2018)."},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"e_1_3_2_2_8_1","unstructured":"BioID. 2020. BioID Face Liveness Detection. https:\/\/www.bioid.com\/liveness-detection\/. (2020).  BioID. 2020. BioID Face Liveness Detection. https:\/\/www.bioid.com\/liveness-detection\/. (2020)."},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/MMSP.2018.8547128"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"crossref","unstructured":"Matt Brand and Daniel A Birch. 2019. Freeform irradiance tailoring for light fields. Optics express Vol. 27 12 (2019) A611--A619.  Matt Brand and Daniel A Birch. 2019. Freeform irradiance tailoring for light fields. Optics express Vol. 27 12 (2019) A611--A619.","DOI":"10.1364\/OE.27.00A611"},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"volume-title":"Pasadena: Perceptually Aware and Stealthy Adversarial Denoise Attack. arXiv preprint arXiv:2007.07097","year":"2020","author":"Cheng Yupeng","key":"e_1_3_2_2_13_1"},{"volume-title":"Advfaces: Adversarial face synthesis. arXiv preprint arXiv:1908.05008","year":"2019","author":"Deb Debayan","key":"e_1_3_2_2_14_1"},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00790"},{"volume-title":"Hotflip: White-box adversarial examples for text classification. arXiv preprint arXiv:1712.06751","year":"2017","author":"Ebrahimi Javid","key":"e_1_3_2_2_16_1"},{"key":"e_1_3_2_2_17_1","unstructured":"Ian Goodfellow Jean Pouget-Abadie Mehdi Mirza Bing Xu David Warde-Farley Sherjil Ozair Aaron Courville and Yoshua Bengio. 2014a. Generative adversarial nets. In Advances in neural information processing systems. 2672--2680.  Ian Goodfellow Jean Pouget-Abadie Mehdi Mirza Bing Xu David Warde-Farley Sherjil Ozair Aaron Courville and Yoshua Bengio. 2014a. Generative adversarial nets. In Advances in neural information processing systems. 2672--2680."},{"key":"e_1_3_2_2_18_1","unstructured":"Ian J Goodfellow Jonathon Shlens and Christian Szegedy. 2014b. Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014).  Ian J Goodfellow Jonathon Shlens and Christian Szegedy. 2014b. Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)."},{"key":"e_1_3_2_2_19_1","unstructured":"Qing Guo Felix Juefei-Xu Xiaofei Xie Lei Ma Jian Wang Wei Feng and Yang Liu. 2020 a. ABBA: Saliency-Regularized Motion-Based Adversarial Blur Attack. arXiv preprint arXiv:2002.03500 (2020).  Qing Guo Felix Juefei-Xu Xiaofei Xie Lei Ma Jian Wang Wei Feng and Yang Liu. 2020 a. ABBA: Saliency-Regularized Motion-Based Adversarial Blur Attack. arXiv preprint arXiv:2002.03500 (2020)."},{"volume-title":"SPARK: Spatial-aware Online Adversarial Perturbations Against Visual Object Tracking. European Conference on Computer Vision (ECCV)","year":"2020","author":"Guo Qing","key":"e_1_3_2_2_20_1"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413732"},{"key":"e_1_3_2_2_22_1","unstructured":"Yihao Huang Felix Juefei-Xu Run Wang Qing Guo Xiaofei Xie Lei Ma Jianwen Li Weikai Miao Yang Liu and Geguang Pu. 2020 b. FakeLocator: Robust Localization of GAN-Based Face Manipulations. arXiv preprint arXiv:2001.09598 (2020).  Yihao Huang Felix Juefei-Xu Run Wang Qing Guo Xiaofei Xie Lei Ma Jianwen Li Weikai Miao Yang Liu and Geguang Pu. 2020 b. FakeLocator: Robust Localization of GAN-Based Face Manipulations. arXiv preprint arXiv:2001.09598 (2020)."},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.179"},{"key":"e_1_3_2_2_24_1","unstructured":"Andrew Ilyas Logan Engstrom Anish Athalye and Jessy Lin. 2018. Black-box adversarial attacks with limited queries and information. arXiv preprint arXiv:1804.08598 (2018).  Andrew Ilyas Logan Engstrom Anish Athalye and Jessy Lin. 2018. Black-box adversarial attacks with limited queries and information. arXiv preprint arXiv:1804.08598 (2018)."},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2014.6"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2015.7301308"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2015.7351398"},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2015.7358787"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2015.7351199"},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2016.7791174"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"crossref","unstructured":"Felix Juefei-Xu and Marios Savvides. 2016b. Learning to Invert Local Binary Patterns.. In BMVC.  Felix Juefei-Xu and Marios Savvides. 2016b. Learning to Invert Local Binary Patterns.. In BMVC.","DOI":"10.5244\/C.30.29"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2015.10.007"},{"key":"e_1_3_2_2_33_1","unstructured":"P. K and S. M. Deepfakes: a new threat to face recognition? assessment and detection. arXiv:1812.08685 (????).  P. K and S. M. Deepfakes: a new threat to face recognition? assessment and detection. arXiv:1812.08685 (????)."},{"key":"e_1_3_2_2_34_1","unstructured":"Tero Karras Timo Aila Samuli Laine and Jaakko Lehtinen. 2017. Progressive growing of gans for improved quality stability and variation. arXiv preprint arXiv:1710.10196 (2017).  Tero Karras Timo Aila Samuli Laine and Jaakko Lehtinen. 2017. Progressive growing of gans for improved quality stability and variation. arXiv preprint arXiv:1710.10196 (2017)."},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00453"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2013.6638076"},{"volume-title":"Wasserstein Smoothing: Certified Robustness against Wasserstein Adversarial Attacks. arXiv preprint arXiv:1910.10783","year":"2019","author":"Levine Alexander","key":"e_1_3_2_2_37_1"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2019.8668044"},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238202"},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2018.00021"},{"key":"e_1_3_2_2_42_1","unstructured":"Aleksander Madry Aleksandar Makelov Ludwig Schmidt Dimitris Tsipras and Adrian Vladu. 2017. Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017).  Aleksander Madry Aleksandar Makelov Ludwig Schmidt Dimitris Tsipras and Adrian Vladu. 2017. Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017)."},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2017.172"},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.603"},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"e_1_3_2_2_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413707"},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00249"},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"e_1_3_2_2_51_1","unstructured":"Qing Song Yingqi Wu and Lu Yang. 2018. Attacks on State-of-the-Art Face Recognition using Attentional Adversarial Attack Generative Network. arXiv preprint arXiv:1811.12026 (2018).  Qing Song Yingqi Wu and Lu Yang. 2018. Attacks on State-of-the-Art Face Recognition using Attentional Adversarial Attack Generative Network. arXiv preprint arXiv:1811.12026 (2018)."},{"volume-title":"FakeSpotter: A Simple Baseline for Spotting AI-Synthesized Fake Faces. ACM International Conference on Multimedia (ACM MM)","year":"2019","author":"Wang Run","key":"e_1_3_2_2_52_1"},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"crossref","unstructured":"Svante Wold Kim Esbensen and Paul Geladi. 1987. Principal component analysis. Chemometrics and intelligent laboratory systems Vol. 2 1--3 (1987) 37--52.  Svante Wold Kim Esbensen and Paul Geladi. 1987. Principal component analysis. Chemometrics and intelligent laboratory systems Vol. 2 1--3 (1987) 37--52.","DOI":"10.1016\/0169-7439(87)80084-9"},{"key":"e_1_3_2_2_54_1","unstructured":"Eric Wong Frank R Schmidt and J Zico Kolter. 2019. Wasserstein Adversarial Examples via Projected Sinkhorn Iterations. arXiv preprint arXiv:1902.07906 (2019).  Eric Wong Frank R Schmidt and J Zico Kolter. 2019. Wasserstein Adversarial Examples via Projected Sinkhorn Iterations. arXiv preprint arXiv:1902.07906 (2019)."},{"key":"e_1_3_2_2_55_1","unstructured":"Chaowei Xiao Jun-Yan Zhu Bo Li Warren He Mingyan Liu and Dawn Song. 2018. Spatially transformed adversarial examples. arXiv preprint arXiv:1801.02612 (2018).  Chaowei Xiao Jun-Yan Zhu Bo Li Warren He Mingyan Liu and Dawn Song. 2018. Spatially transformed adversarial examples. arXiv preprint arXiv:1801.02612 (2018)."},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3293882.3330579"},{"key":"e_1_3_2_2_57_1","doi-asserted-by":"crossref","unstructured":"Jianchao Yang John Wright Thomas S Huang and Yi Ma. 2010. Image super-resolution via sparse representation. IEEE transactions on image processing Vol. 19 11 (2010) 2861--2873.  Jianchao Yang John Wright Thomas S Huang and Yi Ma. 2010. Image super-resolution via sparse representation. IEEE transactions on image processing Vol. 19 11 (2010) 2861--2873.","DOI":"10.1109\/TIP.2010.2050625"},{"key":"e_1_3_2_2_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134052"}],"event":{"name":"MM '20: The 28th ACM International Conference on Multimedia","sponsor":["SIGMM ACM Special Interest Group on Multimedia"],"location":"Seattle WA USA","acronym":"MM '20"},"container-title":["Proceedings of the 28th ACM International Conference on Multimedia"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3394171.3413544","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3394171.3413544","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:47:13Z","timestamp":1750193233000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3394171.3413544"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,12]]},"references-count":58,"alternative-id":["10.1145\/3394171.3413544","10.1145\/3394171"],"URL":"https:\/\/doi.org\/10.1145\/3394171.3413544","relation":{},"subject":[],"published":{"date-parts":[[2020,10,12]]},"assertion":[{"value":"2020-10-12","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}