{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T12:52:13Z","timestamp":1761396733412,"version":"3.41.0"},"reference-count":71,"publisher":"Association for Computing Machinery (ACM)","issue":"7","license":[{"start":{"date-parts":[[2024,3,27]],"date-time":"2024-03-27T00:00:00Z","timestamp":1711497600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62072055, 62302113, 62372128"],"award-info":[{"award-number":["62072055, 62302113, 62372128"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100003453","name":"Natural Science Foundation of Guangdong Province","doi-asserted-by":"crossref","award":["2023A1515011575"],"award-info":[{"award-number":["2023A1515011575"]}],"id":[{"id":"10.13039\/501100003453","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Multimedia Comput. Commun. Appl."],"published-print":{"date-parts":[[2024,7,31]]},"abstract":"<jats:p>\n            To counter adversarial facial accessory presentation attacks (PAs), a detection method based on local face differential is proposed in this article. It extracts the local face differential features from a suspected face image and a reference face image, and then adaptively fuses the differential features of different local face regions to detect adversarial facial accessory PAs. Meanwhile, the principle of the proposed method is explained by theoretically investigating the local facial differences between a bona fide presentation and an adversarial facial accessory PA when they are compared with a reference face image. To evaluate the proposed method, this article builds a database with different adversarial examples (AEs), presentation attack instruments (PAIs), illumination conditions, and cameras. The experimental results show that it can effectively distinguish between adversarial facial accessory PAs and\n            <jats:italic>bona fide<\/jats:italic>\n            presentations, and it has good generalization ability to unseen AEs, PAIs, illumination conditions, and cameras. Moreover, it outperforms the existing AE detection and presentation attack detection methods in detecting adversarial facial accessory PAs.\n          <\/jats:p>","DOI":"10.1145\/3643831","type":"journal-article","created":{"date-parts":[[2024,2,15]],"date-time":"2024-02-15T12:14:53Z","timestamp":1707999293000},"page":"1-28","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["Detection of Adversarial Facial Accessory Presentation Attacks Using Local Face Differential"],"prefix":"10.1145","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8053-4587","authenticated-orcid":false,"given":"Fei","family":"Peng","sequence":"first","affiliation":[{"name":"Guangzhou University, Guangzhou, PRC"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1273-0046","authenticated-orcid":false,"given":"Le","family":"Qin","sequence":"additional","affiliation":[{"name":"Guangzhou University, Guangzhou, PRC"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1229-2317","authenticated-orcid":false,"given":"Min","family":"Long","sequence":"additional","affiliation":[{"name":"Guangzhou University, Guangzhou, PRC"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0385-8793","authenticated-orcid":false,"given":"Jin","family":"Li","sequence":"additional","affiliation":[{"name":"Guangzhou University, Guangzhou, PRC"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,3,27]]},"reference":[{"key":"e_1_3_2_2_2","doi-asserted-by":"publisher","DOI":"10.1109\/BigMM.2019.00018"},{"key":"e_1_3_2_3_2","doi-asserted-by":"publisher","DOI":"10.1109\/BTAS.2016.7791171"},{"key":"e_1_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3240841"},{"key":"e_1_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3255585"},{"key":"e_1_3_2_6_2","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3168345"},{"key":"e_1_3_2_7_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2555286"},{"key":"e_1_3_2_8_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3026553"},{"key":"e_1_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.1145\/1961189.1961199"},{"key":"e_1_3_2_10_2","article-title":"Domain generalization for document authentication against practical recapturing attacks","author":"Chen Changsheng","year":"2021","unstructured":"Changsheng Chen, Shuzheng Zhang, Fengbo Lan, and Jiwu Huang. 2021. Domain generalization for document authentication against practical recapturing attacks. arXiv preprint arXiv:2101.01404 (2021).","journal-title":"arXiv preprint arXiv:2101.01404"},{"key":"e_1_3_2_11_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3029879"},{"key":"e_1_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00482"},{"key":"e_1_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2020.3042082"},{"key":"e_1_3_2_14_2","doi-asserted-by":"publisher","DOI":"10.1109\/TTS.2020.2992344"},{"key":"e_1_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2021.108398"},{"key":"e_1_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3013214"},{"key":"e_1_3_2_17_2","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-019-01160-w"},{"volume-title":"Doc 9303 Machine Readable Travel Documents Seventh Edition - Part 9: Deployment of Biometric Identification and Electronic Storage of Data in MRTDs","year":"2015","key":"e_1_3_2_18_2","unstructured":"ICAO. 2015. Doc 9303 Machine Readable Travel Documents Seventh Edition - Part 9: Deployment of Biometric Identification and Electronic Storage of Data in MRTDs. International Civil Aviation Organization."},{"key":"e_1_3_2_19_2","volume-title":"ISO\/IEC 30107-3 Information Technology - Biometric presentation attack detection - Part 3: Testing and Reporting","author":"Biometrics ISO\/IEC JTC1 SC37","year":"2017","unstructured":"ISO\/IEC JTC1 SC37 Biometrics. 2017. ISO\/IEC 30107-3 Information Technology - Biometric presentation attack detection - Part 3: Testing and Reporting. International Organization for Standardization."},{"key":"e_1_3_2_20_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.632"},{"key":"e_1_3_2_21_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2020.3044986"},{"key":"e_1_3_2_22_2","doi-asserted-by":"publisher","DOI":"10.1109\/SIBIRCON48586.2019.8958122"},{"key":"e_1_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.5555\/1577069.1755843"},{"key":"e_1_3_2_24_2","article-title":"ADVHAT: Real-world adversarial attack on arcface face ID system","author":"Komkov Stepan","year":"2019","unstructured":"Stepan Komkov and Aleksandr Petiushko. 2019. ADVHAT: Real-world adversarial attack on arcface face ID system. arXiv preprint arXiv:1908.08705 (2019).","journal-title":"arXiv preprint arXiv:1908.08705"},{"key":"e_1_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2801312"},{"key":"e_1_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.1109\/JSTSP.2020.3001719"},{"key":"e_1_3_2_27_2","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2550459"},{"key":"e_1_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813612"},{"key":"e_1_3_2_29_2","doi-asserted-by":"publisher","DOI":"10.1145\/3432817"},{"key":"e_1_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3188149"},{"key":"e_1_3_2_31_2","article-title":"Multi-channel remote photoplethysmography correspondence feature for 3D mask face presentation attack detection","author":"Liu Si-Qi","year":"2021","unstructured":"Si-Qi Liu, Xiangyuan Lan, and Pong C. Yuen. 2021. Multi-channel remote photoplethysmography correspondence feature for 3D mask face presentation attack detection. IEEE Transactions on Information Forensics and Security (2021).","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"e_1_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.713"},{"key":"e_1_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00048"},{"key":"e_1_3_2_34_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00481"},{"key":"e_1_3_2_35_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00008"},{"key":"e_1_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1145\/3527158"},{"key":"e_1_3_2_37_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW50498.2020.00415"},{"key":"e_1_3_2_38_2","doi-asserted-by":"crossref","unstructured":"Omkar Parkhi Andrea Vedaldi and Andrew Zisserman. 2015. Deep face recognition. In BMVC 2015-Proceedings of the British Machine Vision Conference 2015. British Machine Vision Association.","DOI":"10.5244\/C.29.41"},{"key":"e_1_3_2_39_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2018.8487325"},{"key":"e_1_3_2_40_2","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-017-4780-0"},{"key":"e_1_3_2_41_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jvcir.2019.102746"},{"key":"e_1_3_2_42_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.2988168"},{"key":"e_1_3_2_43_2","doi-asserted-by":"publisher","DOI":"10.1145\/3491199"},{"key":"e_1_3_2_44_2","article-title":"Low visual distortion and robust morphing attacks based on partial face image manipulation","author":"Qin Le","year":"2020","unstructured":"Le Qin, Fei Peng, Sushma Venkatesh, Raghavendra Ramachandra, Min Long, and Christoph Busch. 2020. Low visual distortion and robust morphing attacks based on partial face image manipulation. IEEE Transactions on Biometrics, Behavior, and Identity Science (2020).","journal-title":"IEEE Transactions on Biometrics, Behavior, and Identity Science"},{"key":"e_1_3_2_45_2","doi-asserted-by":"publisher","DOI":"10.1145\/3038924"},{"key":"e_1_3_2_46_2","volume-title":"IEEE International Conference on Pattern Recognition","author":"Rathgeb Christian","year":"2020","unstructured":"Christian Rathgeb, Pawel Drozdowski, and Christoph Busch. 2020. Detection of makeup presentation attacks based on deep face representations. In IEEE International Conference on Pattern Recognition."},{"key":"e_1_3_2_47_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3044723"},{"key":"e_1_3_2_48_2","first-page":"1","volume-title":"2020 IEEE International Joint Conference on Biometrics (IJCB)","author":"Saha Sanjay","unstructured":"Sanjay Saha and Terence Sim. 2020. Is face recognition safe from realizable attacks?. In 2020 IEEE International Joint Conference on Biometrics (IJCB). IEEE, 1\u20138."},{"key":"e_1_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.2994750"},{"key":"e_1_3_2_50_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298682"},{"key":"e_1_3_2_51_2","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"e_1_3_2_52_2","doi-asserted-by":"publisher","DOI":"10.1145\/3317611"},{"key":"e_1_3_2_53_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3102492"},{"key":"e_1_3_2_54_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2016.7899772"},{"key":"e_1_3_2_55_2","doi-asserted-by":"publisher","DOI":"10.1109\/TBIOM.2019.2903860"},{"key":"e_1_3_2_56_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.2985530"},{"key":"e_1_3_2_57_2","first-page":"1","volume-title":"Network and Distributed System Security Symposium (NDSS)","author":"Tang Di","year":"2018","unstructured":"Di Tang, Zhe Zhou, Yinqian Zhang, and Kehuan Zhang. 2018. Face flashing: A secure liveness detection protocol based on light reflections. In Network and Distributed System Security Symposium (NDSS). 1\u201315."},{"key":"e_1_3_2_58_2","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i11.17187"},{"issue":"11","key":"e_1_3_2_59_2","article-title":"Visualizing data using t-SNE.","volume":"9","author":"Maaten Laurens Van der","year":"2008","unstructured":"Laurens Van der Maaten and Geoffrey Hinton. 2008. Visualizing data using t-SNE. Journal of Machine Learning Research 9, 11 (2008).","journal-title":"Journal of Machine Learning Research"},{"key":"e_1_3_2_60_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW59228.2023.00679"},{"key":"e_1_3_2_61_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2400395"},{"key":"e_1_3_2_62_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00614"},{"key":"e_1_3_2_63_2","volume-title":"International Conference on Learning Representations (ICLR)","author":"Wu Tong","year":"2020","unstructured":"Tong Wu, Liang Tong, and Yevgeniy Vorobeychik. 2020. Defending against physically realizable attacks on image classification. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_64_2","doi-asserted-by":"publisher","DOI":"10.1145\/3495243.3560515"},{"key":"e_1_3_2_65_2","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/177"},{"key":"e_1_3_2_66_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00534"},{"key":"e_1_3_2_67_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.cviu.2020.102988"},{"key":"e_1_3_2_68_2","doi-asserted-by":"publisher","DOI":"10.1145\/3591106.3592289"},{"key":"e_1_3_2_69_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3232957"},{"key":"e_1_3_2_70_2","article-title":"Invisible mask: Practical attacks on face recognition with infrared","author":"Zhou Zhe","year":"2018","unstructured":"Zhe Zhou, Di Tang, Xiaofeng Wang, Weili Han, Xiangyu Liu, and Kehuan Zhang. 2018. Invisible mask: Practical attacks on face recognition with infrared. arXiv preprint arXiv:1803.04683 (2018).","journal-title":"arXiv preprint arXiv:1803.04683"},{"key":"e_1_3_2_71_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.244"},{"key":"e_1_3_2_72_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2019.2949868"}],"container-title":["ACM Transactions on Multimedia Computing, Communications, and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643831","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3643831","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T22:49:56Z","timestamp":1750286996000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643831"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3,27]]},"references-count":71,"journal-issue":{"issue":"7","published-print":{"date-parts":[[2024,7,31]]}},"alternative-id":["10.1145\/3643831"],"URL":"https:\/\/doi.org\/10.1145\/3643831","relation":{},"ISSN":["1551-6857","1551-6865"],"issn-type":[{"type":"print","value":"1551-6857"},{"type":"electronic","value":"1551-6865"}],"subject":[],"published":{"date-parts":[[2024,3,27]]},"assertion":[{"value":"2022-10-26","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-01-19","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-03-27","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}