Bei Yan, Jie Zhang, Zheng Yuan, Shiguang Shan: Adaptive Adversarial Patch Attack on Face Recognition Models. IJCB 2023: 1-11