{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,17]],"date-time":"2026-01-17T23:17:52Z","timestamp":1768691872415,"version":"3.49.0"},"reference-count":62,"publisher":"Association for Computing Machinery (ACM)","issue":"1","funder":[{"DOI":"10.13039\/501100002858","name":"China Postdoctoral Science Foundation","doi-asserted-by":"crossref","award":["2024M751050"],"award-info":[{"award-number":["2024M751050"]}],"id":[{"id":"10.13039\/501100002858","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Postdoctoral Fellowship Program of CPSF","award":["GZC20230922"],"award-info":[{"award-number":["GZC20230922"]}]},{"name":"Hubei Province Postdoctoral Innovation Talent Training Project","award":["2024HBBHCXB042"],"award-info":[{"award-number":["2024HBBHCXB042"]}]},{"name":"Basic Research and Operation of MOE","award":["CCNU24XJ001"],"award-info":[{"award-number":["CCNU24XJ001"]}]},{"name":"Basic Research Funds (Natural Science) of CCNU","award":["CCNU24ai010"],"award-info":[{"award-number":["CCNU24ai010"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Intell. Syst. Technol."],"published-print":{"date-parts":[[2026,2,28]]},"abstract":"<jats:p>Face recognition systems offer a range of applications that enhance security, efficiency, and personalization, e.g., access control, identity verification, and personalized services. Mainstream facial recognition systems employ the Edge-Cloud architecture to protect user privacy by storing facial feature data instead of original facial images. However, recently emerging reconstruction attacks based on deep learning can recover the visual information of original facial images from facial features, resulting in face privacy disclosure. Existing anti-reconstruction approaches either compromise facial recognition accuracy or fail to meet real-time requirements. In this article, we propose a practical privacy-preserving approach based on adversarial perturbations against reconstruction attacks. By incorporating subtle adversarial interference into facial features, the mapping relationship from facial features to original facial images is disrupted, and the baseline reconstruction networks cannot recover the original face image. We conducted experiments on two facial recognition models, FaceNet and ArcFace, both widely deployed in practical scenarios. The results show that the face recognition accuracy sacrifice of less than 1% can significantly reduce the quality of the reconstructed image. In terms of efficiency, the average time to generate an adversarial facial feature is less than 10\u2009ms, meeting the real-time requirements of facial recognition.<\/jats:p>","DOI":"10.1145\/3779060","type":"journal-article","created":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T06:56:52Z","timestamp":1764572212000},"page":"1-19","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Adversarial Face Database against Deep Learning-Enabled Reconstruction Attacks"],"prefix":"10.1145","volume":"17","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1345-5736","authenticated-orcid":false,"given":"Hui","family":"Liu","sequence":"first","affiliation":[{"name":"School of Computer Science &amp; Hubei Provincial Key Laboratory of Artificial Intelligence and Smart Learning, Central China Normal University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-2469-1532","authenticated-orcid":false,"given":"Ling","family":"Ding","sequence":"additional","affiliation":[{"name":"School of Computer Science &amp; Hubei Provincial Key Laboratory of Artificial Intelligence and Smart Learning, Central China Normal University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9033-2575","authenticated-orcid":false,"given":"Jiageng","family":"Chen","sequence":"additional","affiliation":[{"name":"Central China Normal University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-7879-1234","authenticated-orcid":false,"given":"Jinghua","family":"Wang","sequence":"additional","affiliation":[{"name":"Central China Normal University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9069-6109","authenticated-orcid":false,"given":"Xu","family":"Du","sequence":"additional","affiliation":[{"name":"Faculty of Artificial Intelligence Education, Central China Normal University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2855-4246","authenticated-orcid":false,"given":"Jiabao","family":"Guo","sequence":"additional","affiliation":[{"name":"School of Computer Science and Information Engineering, Hefei University of Technology, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2026,1,17]]},"reference":[{"key":"e_1_3_2_2_2","first-page":"733","article-title":"Simple functional encryption schemes for inner products","volume":"9020","author":"Abdalla Michel","year":"2015","unstructured":"Michel Abdalla, Florian Bourse, Angelo De Caro, and David Pointcheval. 2015. Simple functional encryption schemes for inner products. Public-Key Cryptography 9020 (2015), 733\u2013751.","journal-title":"Public-Key Cryptography"},{"key":"e_1_3_2_3_2","first-page":"103729","volume-title":"Computers & Security","author":"Aboukadri Sara","year":"2024","unstructured":"Sara Aboukadri, Aafaf Ouaddah, and Abdellatif Mezrioui. 2024. Machine learning in identity and access management systems: Survey and deep dive. Computers & Security 139 (2024),103729."},{"issue":"11","key":"e_1_3_2_4_2","doi-asserted-by":"crossref","first-page":"3616","DOI":"10.1016\/j.jspi.2005.07.014","article-title":"Nonlinear regression modeling via regularized radial basis function networks","volume":"138","author":"Ando Tomohiro","year":"2008","unstructured":"Tomohiro Ando, Sadanori Konishi, and Seiya Imoto. 2008. Nonlinear regression modeling via regularized radial basis function networks. Journal of Statistical Planning and Inference 138, 11 (2008), 3616\u20133633.","journal-title":"Journal of Statistical Planning and Inference"},{"key":"e_1_3_2_5_2","first-page":"6216","volume-title":"IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Bai Ziqian","year":"2021","unstructured":"Ziqian Bai, Zhaopeng Cui, Xiaoming Liu, and Ping Tan. 2021. Riggable 3D face reconstruction via In-Network optimization. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR), 6216\u20136225."},{"key":"e_1_3_2_6_2","doi-asserted-by":"publisher","DOI":"10.1109\/FG.2018.00020"},{"key":"e_1_3_2_7_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101951"},{"key":"e_1_3_2_8_2","first-page":"1","volume-title":"Proceedings of the ACM on Human-Computer Interaction","author":"Coppens Adrien","year":"2024","unstructured":"Adrien Coppens, Johannes Hermen, Lou Schwartz, Christian Moll, and Val\u00e9rie Maquil. 2024. Supporting mixed-presence awareness across wall-sized displays using a tracking pipeline based on depth cameras. Proceedings of the ACM on Human-Computer Interaction 8 (2024), 1\u201332."},{"key":"e_1_3_2_9_2","first-page":"1","article-title":"Adversarial examples for vehicle detection with projection transformation","volume":"62","author":"Cui Jiahao","year":"2024","unstructured":"Jiahao Cui, Wang Guo, Haikuo Huang, Xun Lv, Hang Cao, and Haifeng Li. 2024. Adversarial examples for vehicle detection with projection transformation. IEEE Transactions on Geoscience and Remote Sensing 62 (2024), 1\u201318.","journal-title":"IEEE Transactions on Geoscience and Remote Sensing"},{"key":"e_1_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3087709"},{"key":"e_1_3_2_11_2","first-page":"4829","volume-title":"IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Dosovitskiy Alexey","year":"2016","unstructured":"Alexey Dosovitskiy and Thomas Brox. 2016. Inverting visual representations with convolutional networks. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR), 4829\u20134837."},{"key":"e_1_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.1145\/3507902"},{"key":"e_1_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"e_1_3_2_14_2","first-page":"129","volume-title":"Advances in Cryptology (EUROCRYPT)","volume":"6632","author":"Gentry Craig","year":"2011","unstructured":"Craig Gentry and Shai Halevi. 2011. Implementing gentry\u2019s fully-homomorphic encryption scheme. In Advances in Cryptology (EUROCRYPT), Vol. 6632, 129\u2013148."},{"key":"e_1_3_2_15_2","volume-title":"International Conference on Learning Representations (ICLR)","author":"Goodfellow Ian J.","year":"2015","unstructured":"Ian J. Goodfellow, Jonathon Shlens, and Christian Szegedy. 2015. Explaining and harnessing adversarial examples. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_16_2","article-title":"Domain generalization for face anti-spoofing via content-aware composite prompt engineering","author":"Guo Jiabao","year":"2025","unstructured":"Jiabao Guo, Ajian Liu, Yunfeng Diao, Jin Zhang, Hui Ma, Bo Zhao, Richang Hong, and Meng Wang. 2025. Domain generalization for face anti-spoofing via content-aware composite prompt engineering. IEEE Transactions on Multimedia (2025).","journal-title":"IEEE Transactions on Multimedia"},{"key":"e_1_3_2_17_2","first-page":"994","volume-title":"32nd ACM International Conference on Multimedia (ACM MM)","author":"Guo Jiabao","year":"2024","unstructured":"Jiabao Guo, Huan Liu, Yizhi Luo, Xueli Hu, Hang Zou, Yuan Zhang, Hui Liu, and Bo Zhao. 2024. Style-conditional prompt token learning for generalizable face anti-spoofing. In 32nd ACM International Conference on Multimedia (ACM MM), 994\u20131003."},{"key":"e_1_3_2_18_2","first-page":"3263","volume-title":"IEEE\/CVF International Conference on Computer Vision Workshop","author":"Guo Jiabao","year":"2025","unstructured":"Jiabao Guo, Yadian Wang, Hui Ma, Yuhao Fu, Ju Jia, Hui Liu, Shengeng Tang, Lechao Cheng, Yunfeng Diao, and Ajian Liu. 2025. Spoofing-aware prompt learning for unified physical-digital facial attack detection. In IEEE\/CVF International Conference on Computer Vision Workshop, 3263\u20133271."},{"key":"e_1_3_2_19_2","first-page":"4106","volume-title":"IEEE\/CVF International Conference on Computer Vision Workshops (ICCVW)","author":"Gwilliam Matthew","year":"2021","unstructured":"Matthew Gwilliam, Srinidhi Hegde, Lade Tinubu, and Alex Hanson. 2021. Rethinking common assumptions to mitigate racial bias in face recognition datasets. In IEEE\/CVF International Conference on Computer Vision Workshops (ICCVW), 4106\u20134115."},{"key":"e_1_3_2_20_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_2_21_2","first-page":"475","volume-title":"European Conference on Computer Vision (ECCV)","volume":"13672","author":"Ji Jiazhen","year":"2022","unstructured":"Jiazhen Ji, Huan Wang, Yuge Huang, Jiaxiang Wu, Xingkun Xu, Shouhong Ding, Shengchuan Zhang, Liujuan Cao, and Rongrong Ji. 2022. Privacy-preserving face recognition with learnable privacy budgets in frequency domain. In European Conference on Computer Vision (ECCV), Vol. 13672, 475\u2013491."},{"key":"e_1_3_2_22_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2024.3411102"},{"key":"e_1_3_2_23_2","first-page":"396","volume-title":"European Conference on Computer Vision (ECCV)","author":"Jung Yoon Gyo","year":"2024","unstructured":"Yoon Gyo Jung, Jaewoo Park, Xingbo Dong, Hojin Park, Andrew Beng Jin Teoh, and Octavia Camps. 2024. Face reconstruction transfer attack as out-of-distribution generalization. In European Conference on Computer Vision (ECCV). Springer, 396\u2013413."},{"key":"e_1_3_2_24_2","first-page":"712","volume-title":"Computational Science and Its Applications (ICCSA)","volume":"9158","author":"Kester Quist-Aphetsi","year":"2015","unstructured":"Quist-Aphetsi Kester, Anca Christine Pascu, Laurent Nana, Sophie Gire, Jojo Moses Eghan, and Nii Narku Quaynor. 2015. Feature based encryption technique for securing digital image data based on FCA-Image attributes and visual cryptography. In Computational Science and Its Applications (ICCSA), Vol. 9158, 712\u2013724."},{"key":"e_1_3_2_25_2","volume-title":"International Conference on Learning Representations (ICLR)","author":"Kurakin Alexey","year":"2017","unstructured":"Alexey Kurakin, Ian J. Goodfellow, and Samy Bengio. 2017. Adversarial examples in the physical world. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.1145\/3673224"},{"key":"e_1_3_2_27_2","first-page":"189","volume-title":"Advances in Face Detection and Facial Image Analysis","author":"Learned-Miller Erik","year":"2016","unstructured":"Erik Learned-Miller, Gary B. Huang, Aruni RoyChowdhury, Haoxiang Li, and Gang Hua. 2016. Labeled faces in the wild: A survey. In Advances in Face Detection and Facial Image Analysis, 189\u2013248."},{"key":"e_1_3_2_28_2","first-page":"28","volume-title":"International Conference on Internet-of-Things Design and Implementation (IoTDI)","author":"Li Ang","year":"2021","unstructured":"Ang Li, Jiayi Guo, Huanrui Yang, Flora D. Salim, and Yiran Chen. 2021. Deepobfuscator: Obfuscating intermediate representations with privacy-preserving adversarial learning on smartphones. In International Conference on Internet-of-Things Design and Implementation (IoTDI), 28\u201339."},{"key":"e_1_3_2_29_2","doi-asserted-by":"crossref","first-page":"103942","DOI":"10.1016\/j.cose.2024.103942","article-title":"FDT: Improving the transferability of adversarial examples with frequency domain transformation","volume":"144","author":"Ling Jie","year":"2024","unstructured":"Jie Ling, Jinhui Chen, and Honglei Li. 2024. FDT: Improving the transferability of adversarial examples with frequency domain transformation. Computers & Security 144 (2024), 103942.","journal-title":"Computers & Security"},{"key":"e_1_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.13328\/j.cnki.jos.007300"},{"key":"e_1_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.110127"},{"key":"e_1_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1016\/J.INS.2022.08.026"},{"key":"e_1_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.425"},{"key":"e_1_3_2_34_2","unstructured":"Aleksander Madry Aleksandar Makelov Ludwig Schmidt Dimitris Tsipras and Adrian Vladu. 2017. Towards deep learning models resistant to adversarial attacks. arXiv:1706.06083. Retrieved from https:\/\/arxiv.org\/abs\/1706.06083"},{"key":"e_1_3_2_35_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3009590"},{"key":"e_1_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2827389"},{"key":"e_1_3_2_37_2","first-page":"6755","volume-title":"ACM International Conference on Multimedia (ACM MM)","author":"Mi Yuxi","year":"2022","unstructured":"Yuxi Mi, Yuge Huang, Jiazhen Ji, Hongquan Liu, Xingkun Xu, Shouhong Ding, and Shuigeng Zhou. 2022. DuetFace: Collaborative privacy-preserving face recognition via channel splitting in the frequency domain. In ACM International Conference on Multimedia (ACM MM), 6755\u20136764."},{"key":"e_1_3_2_38_2","volume-title":"ACM SIGSAC Conference on Computer and Communications Security (CCS)","author":"Naseh Ali","year":"2025","unstructured":"Ali Naseh, Yuefeng Peng, Anshuman Suri, Harsh Chaudhari, Alina Oprea, and Amir Houmansadr. 2025. Riddle me this! Stealthy membership inference for Retrieval-Augmented generation. In ACM SIGSAC Conference on Computer and Communications Security (CCS)."},{"key":"e_1_3_2_39_2","first-page":"1211","volume-title":"IEEE International Conference on Image Processing (ICIP)","author":"Otroshi-Shahreza Hatef","year":"2022","unstructured":"Hatef Otroshi-Shahreza, Vedrana Krivokuca Hahn, and S\u00e9bastien Marcel. 2022. Face reconstruction from deep facial embeddings using a convolutional neural network. In IEEE International Conference on Image Processing (ICIP), 1211\u20131215."},{"key":"e_1_3_2_40_2","volume-title":"Advances in Neural Information Processing Systems (NeurIPS)","author":"Otroshi-Shahreza Hatef","year":"2023","unstructured":"Hatef Otroshi-Shahreza and S\u00e9bastien Marcel. 2023. Face reconstruction from facial templates by learning latent space of a generator network. In Advances in Neural Information Processing Systems (NeurIPS)."},{"key":"e_1_3_2_41_2","volume-title":"Network and Distributed System Security Symposium (NDSS)","author":"Peng Yuefeng","year":"2025","unstructured":"Yuefeng Peng, Ali Naseh, and Amir Houmansadr. 2025. Diffence: Fencing membership privacy with diffusion models. In Network and Distributed System Security Symposium (NDSS)."},{"key":"e_1_3_2_42_2","volume-title":"The Annual Conference on Neural Information Processing Systems (NeurIPS)","author":"Peng Yuefeng","year":"2024","unstructured":"Yuefeng Peng, Jaechul Roh, Subhransu Maji, and Amir Houmansadr. 2024. Oslo: One-shot label-only membership inference attacks. In The Annual Conference on Neural Information Processing Systems (NeurIPS)."},{"key":"e_1_3_2_43_2","first-page":"462","volume-title":"European Conference on Computer Vision (ECCV)","volume":"12539","author":"Razzhigaev Anton","year":"2020","unstructured":"Anton Razzhigaev, Klim Kireev, Edgar Kaziakhmedov, Nurislam Tursynbek, and Aleksandr Petiushko. 2020. Black-box face recovery from identity features. In European Conference on Computer Vision (ECCV), Vol. 12539, 462\u2013475."},{"key":"e_1_3_2_44_2","doi-asserted-by":"publisher","DOI":"10.1145\/3534122"},{"key":"e_1_3_2_45_2","first-page":"815","volume-title":"Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Schroff Florian","year":"2015","unstructured":"Florian Schroff, Dmitry Kalenichenko, and James Philbin. 2015. FaceNet: A unified embedding for face recognition and clustering. In Conference on Computer Vision and Pattern Recognition (CVPR), 815\u2013823."},{"key":"e_1_3_2_46_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"e_1_3_2_47_2","unstructured":"Zijie Tan Guanfang Dong Chenqiu Zhao and Anup Basu. 2023. Affine-transformation-invariant image classification by differentiable arithmetic distribution module. arXiv:2309.00752. Retrieved from https:\/\/arxiv.org\/abs\/2309.00752"},{"key":"e_1_3_2_48_2","first-page":"3481","volume-title":"Computer Vision and Pattern Recognition Conference (CVPR)","author":"Tang Shengeng","year":"2025","unstructured":"Shengeng Tang, Jiayi He, Lechao Cheng, Jingjing Wu, Dan Guo, and Richang Hong. 2025. Discrete to continuous: Generating smooth transition poses from sign language observations. In Computer Vision and Pattern Recognition Conference (CVPR), 3481\u20133491."},{"key":"e_1_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2024.106572"},{"issue":"11","key":"e_1_3_2_50_2","first-page":"8433","article-title":"Meta balanced network for fair face recognition","volume":"44","author":"Wang Mei","year":"2022","unstructured":"Mei Wang, Yaobin Zhang, and Weihong Deng. 2022. Meta balanced network for fair face recognition. IEEE Transactions on Pattern Analysis and Machine Intelligence 44, 11 (2022), 8433\u20138448.","journal-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence"},{"issue":"4","key":"e_1_3_2_51_2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3703626","article-title":"Security and privacy on generative data in aigc: A survey","volume":"57","author":"Wang Tao","year":"2024","unstructured":"Tao Wang, Yushu Zhang, Shuren Qi, Ruoyu Zhao, Zhihua Xia, and Jian Weng. 2024. Security and privacy on generative data in aigc: A survey. ACM Computing Surveys 57, 4 (2024), 1\u201334.","journal-title":"ACM Computing Surveys"},{"key":"e_1_3_2_52_2","first-page":"2393","volume-title":"IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","author":"Wang Yitu","year":"2020","unstructured":"Yitu Wang and Takayuki Nakachi. 2020. Secure face recognition in edge and cloud networks: From the ensemble learning perspective. In IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), 2393\u20132397."},{"key":"e_1_3_2_53_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2024.111071"},{"key":"e_1_3_2_54_2","first-page":"12434","volume-title":"AAAI Conference on Artificial Intelligence (AAAI)","volume":"34","author":"Xiao Taihong","year":"2020","unstructured":"Taihong Xiao, Yi-Hsuan Tsai, Kihyuk Sohn, Manmohan Chandraker, and Ming-Hsuan Yang. 2020. Adversarial learning of privacy-preserving and task-oriented representations. In AAAI Conference on Artificial Intelligence (AAAI), Vol. 34, 12434\u201312441."},{"key":"e_1_3_2_55_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-022-03808-8"},{"key":"e_1_3_2_56_2","first-page":"578","volume-title":"IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Xu Xingkun","year":"2021","unstructured":"Xingkun Xu, Yuge Huang, Pengcheng Shen, Shaoxin Li, Jilin Li, Feiyue Huang, Yong Li, and Zhen Cui. 2021. Consistent instance false positive improves fairness in face recognition. In IEEE Conference on Computer Vision and Pattern Recognition (CVPR), 578\u2013586."},{"key":"e_1_3_2_57_2","first-page":"2122","volume-title":"International World Wide Web Conference (WWW)","author":"Yin Yupeng","year":"2023","unstructured":"Yupeng Yin, Xianglong Zhang, Huanle Zhang, Feng Li, Yue Yu, Xiuzhen Cheng, and Pengfei Hu. 2023. Ginver: Generative model inversion attacks against collaborative inference. In International World Wide Web Conference (WWW), 2122\u20132131."},{"key":"e_1_3_2_58_2","doi-asserted-by":"publisher","DOI":"10.1145\/3632292"},{"key":"e_1_3_2_59_2","first-page":"12205","volume-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Zhang Hui","year":"2024","unstructured":"Hui Zhang, Xingbo Dong, YenLung Lai, Ying Zhou, Xiaoyan Zhang, Xingguo Lv, Zhe Jin, and Xuejun Li. 2024. Validating privacy-preserving face recognition under a minimum assumption. In IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), 12205\u201312214."},{"key":"e_1_3_2_60_2","volume-title":"AAAI Conference on Artificial Intelligence (AAAI)","author":"Zhang Ruobei","year":"2026","unstructured":"Ruobei Zhang, Shengeng Tang, Huan Yan, Xiang Zhang, and Jiabao Guo. 2026. Wi-CBR: Salient-aware adaptive WiFi sensing for cross-domain behavior recognition. In AAAI Conference on Artificial Intelligence (AAAI)."},{"key":"e_1_3_2_61_2","doi-asserted-by":"publisher","DOI":"10.1145\/3490237"},{"key":"e_1_3_2_62_2","first-page":"2487","volume-title":"ACM International Conference on Multimedia (ACM MM)","author":"Zhou Fengfan","year":"2024","unstructured":"Fengfan Zhou, Qianyu Zhou, Bangjie Yin, Hui Zheng, Xuequan Lu, Lizhuang Ma, and Hefei Ling. 2024. Rethinking impersonation and dodging attacks on face recognition systems. In ACM International Conference on Multimedia (ACM MM), 2487\u20132496."},{"key":"e_1_3_2_63_2","doi-asserted-by":"publisher","DOI":"10.1109\/JSTARS.2024.3399780"}],"container-title":["ACM Transactions on Intelligent Systems and Technology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3779060","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,17]],"date-time":"2026-01-17T11:57:24Z","timestamp":1768651044000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3779060"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1,17]]},"references-count":62,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2026,2,28]]}},"alternative-id":["10.1145\/3779060"],"URL":"https:\/\/doi.org\/10.1145\/3779060","relation":{},"ISSN":["2157-6904","2157-6912"],"issn-type":[{"value":"2157-6904","type":"print"},{"value":"2157-6912","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,1,17]]},"assertion":[{"value":"2025-02-18","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-11-18","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2026-01-17","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}