{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T15:52:10Z","timestamp":1781538730791,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":34,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T00:00:00Z","timestamp":1781481600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6,16]]},"DOI":"10.1145\/3805622.3810653","type":"proceedings-article","created":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T14:42:57Z","timestamp":1781534577000},"page":"2133-2141","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Thinking in High-Frequency: Practical Defense for Deepfake Detectors Against Black-box Adversarial Attacks"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-1176-0944","authenticated-orcid":false,"given":"Fuqiang","family":"Du","sequence":"first","affiliation":[{"name":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4371-7864","authenticated-orcid":false,"given":"Min","family":"Yu","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0947-9500","authenticated-orcid":false,"given":"Jianguo","family":"Jiang","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-9977-2496","authenticated-orcid":false,"given":"Yixin","family":"Zhang","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-0010-9625","authenticated-orcid":false,"given":"Yachao","family":"Liang","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-5509-3902","authenticated-orcid":false,"given":"Meng","family":"Zhang","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9155-4177","authenticated-orcid":false,"given":"Weiqing","family":"Huang","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, CAS and the School of Cyber Security, UCAS, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,15]]},"reference":[{"key":"e_1_3_3_1_2_2","doi-asserted-by":"publisher","DOI":"10.1109\/WIFS.2018.8630761"},{"key":"e_1_3_3_1_3_2","first-page":"38","volume-title":"CVPR workshops","author":"Agarwal Shruti","year":"2019","unstructured":"Shruti Agarwal, Hany Farid, Yuming Gu, Mingming He, Koki Nagano, and Hao Li. 2019. Protecting world leaders against deep fakes.. In CVPR workshops. 38\u201345."},{"key":"e_1_3_3_1_4_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00408"},{"key":"e_1_3_3_1_5_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW50498.2020.00337"},{"key":"e_1_3_3_1_6_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00045"},{"key":"e_1_3_3_1_7_2","doi-asserted-by":"publisher","DOI":"10.1145\/3385003.3410925"},{"key":"e_1_3_3_1_8_2","doi-asserted-by":"crossref","unstructured":"Seok-Hwan Choi Jinmyeong Shin and Yoon-Ho Choi. 2023. PIHA: Detection method using perceptual image hashing against query-based adversarial attacks. Future Generation Computer Systems 145 (2023) 563\u2013577.","DOI":"10.1016\/j.future.2023.04.005"},{"key":"e_1_3_3_1_9_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.195"},{"key":"e_1_3_3_1_10_2","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623116"},{"key":"e_1_3_3_1_11_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW.2019.00213"},{"key":"e_1_3_3_1_12_2","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN48605.2020.9207034"},{"key":"e_1_3_3_1_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_3_1_14_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01181"},{"key":"e_1_3_3_1_15_2","unstructured":"Sandy Huang Nicolas Papernot Ian Goodfellow Yan Duan and Pieter Abbeel. 2017. Adversarial attacks on neural network policies. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1702.02284 (2017)."},{"key":"e_1_3_3_1_16_2","doi-asserted-by":"publisher","DOI":"10.1109\/WACV48630.2021.00339"},{"key":"e_1_3_3_1_17_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00407"},{"key":"e_1_3_3_1_18_2","first-page":"2117","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Li Huiying","year":"2022","unstructured":"Huiying Li, Shawn Shan, Emily Wenger, Jiayun Zhang, Haitao Zheng, and Ben\u00a0Y Zhao. 2022. Blacklight: Scalable defense for neural networks against { Query-Based}{ Black-Box} attacks. In 31st USENIX Security Symposium (USENIX Security 22). 2117\u20132134."},{"key":"e_1_3_3_1_19_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00130"},{"key":"e_1_3_3_1_20_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00639"},{"key":"e_1_3_3_1_21_2","doi-asserted-by":"publisher","DOI":"10.1109\/WIFS.2018.8630787"},{"key":"e_1_3_3_1_22_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00327"},{"key":"e_1_3_3_1_23_2","doi-asserted-by":"crossref","unstructured":"Honggu Liu Xiaodan Li Wenbo Zhou Yuefeng Chen Yuan He Hui Xue Weiming Zhang and Nenghai Yu. 2021. Spatial-Phase Shallow Learning: Rethinking Face Forgery Detection in Frequency Domain. 2021 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2021) 772\u2013781. https:\/\/api.semanticscholar.org\/CorpusID:232092167","DOI":"10.1109\/CVPR46437.2021.00083"},{"key":"e_1_3_3_1_24_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01605"},{"key":"e_1_3_3_1_25_2","doi-asserted-by":"crossref","unstructured":"Yucheng Luo Yong Zhang Junchi Yan and Wei Liu. 2021. Generalizing Face Forgery Detection with High-frequency Features. 2021 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR) (2021) 16312\u201316321. https:\/\/api.semanticscholar.org\/CorpusID:232320599","DOI":"10.1109\/CVPR46437.2021.01605"},{"key":"e_1_3_3_1_26_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52734.2025.00957"},{"key":"e_1_3_3_1_27_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58610-2_6"},{"key":"e_1_3_3_1_28_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00009"},{"key":"e_1_3_3_1_29_2","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3681032"},{"key":"e_1_3_3_1_30_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00402"},{"key":"e_1_3_3_1_31_2","unstructured":"Daan Wierstra Tom Schaul Tobias Glasmachers Yi Sun Jan Peters and J\u00fcrgen Schmidhuber. 2014. Natural evolution strategies. The Journal of Machine Learning Research 15 1 (2014) 949\u2013980."},{"key":"e_1_3_3_1_32_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00858"},{"key":"e_1_3_3_1_33_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.02048"},{"key":"e_1_3_3_1_34_2","unstructured":"Zhiyuan Yan Yong Zhang Xinhang Yuan Siwei Lyu and Baoyuan Wu. 2023. Deepfakebench: A comprehensive benchmark of deepfake detection. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2307.01426 (2023)."},{"key":"e_1_3_3_1_35_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00222"}],"event":{"name":"ICMR '26: International Conference on Multimedia Retrieval","location":"Amsterdam The Netherlands","acronym":"ICMR '26","sponsor":["SIGMM ACM Special Interest Group on Multimedia"]},"container-title":["Proceedings of the 2026 International Conference on Multimedia Retrieval"],"original-title":[],"deposited":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T14:52:48Z","timestamp":1781535168000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3805622.3810653"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,15]]},"references-count":34,"alternative-id":["10.1145\/3805622.3810653","10.1145\/3805622"],"URL":"https:\/\/doi.org\/10.1145\/3805622.3810653","relation":{},"subject":[],"published":{"date-parts":[[2026,6,15]]},"assertion":[{"value":"2026-06-15","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}