Bei Yan Jie Zhang 0071 Zheng Yuan 0005 Shiguang Shan Adaptive Adversarial Patch Attack on Face Recognition Models. 1-11 2023 IJCB https://doi.org/10.1109/IJCB57857.2023.10449094 conf/icb/2023 db/conf/icb/ijcb2023.html#YanZYS23