<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-02023746</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T05:57:08+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">When George Clooney Is Not George Clooney: Using GenAttack to Deceive Amazon’s and Naver’s Celebrity Recognition APIs</title>
            <author role="aut">
              <persName>
                <forename type="first">Keeyoung</forename>
                <surname>Kim</surname>
              </persName>
              <email type="md5">857dee28616b7d2c703fae26cf56ba9a</email>
              <email type="domain">sunykorea.ac.kr</email>
              <idno type="idhal" notation="numeric">1042924</idno>
              <idno type="halauthorid" notation="string">1526009-1042924</idno>
              <affiliation ref="#struct-522721"/>
              <affiliation ref="#struct-303386"/>
              <affiliation ref="#struct-553976"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Simon</forename>
                <forename type="middle">S.</forename>
                <surname>Woo</surname>
              </persName>
              <email type="md5">5815ebbe92601042f835475cbdfb7d7e</email>
              <email type="domain">sunykorea.ac.kr</email>
              <idno type="idhal" notation="numeric">1042925</idno>
              <idno type="halauthorid" notation="string">1526010-1042925</idno>
              <affiliation ref="#struct-522721"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2019-02-21 17:07:18</date>
              <date type="whenModified">2025-02-28 16:28:48</date>
              <date type="whenReleased">2019-02-21 17:08:01</date>
              <date type="whenProduced">2018-09-18</date>
              <date type="whenEndEmbargoed">2021-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-02023746v1/document">
                <date notBefore="2021-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-02023746v1/file/472722_1_En_25_Chapter.pdf" id="file-2044984-2051783">
                <date notBefore="2021-01-01"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-02023746</idno>
            <idno type="halUri">https://inria.hal.science/hal-02023746</idno>
            <idno type="halBibtex">kim:hal-02023746</idno>
            <idno type="halRefHtml">&lt;i&gt;33th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC)&lt;/i&gt;, Sep 2018, Poznan, Poland. pp.355-369, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-319-99828-2_25"&gt;&amp;#x27E8;10.1007/978-3-319-99828-2_25&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">33th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Sep 2018, Poznan, Poland. pp.355-369, &amp;#x27E8;10.1007/978-3-319-99828-2_25&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-2044984-2051783"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-SEC" corresp="IFIP"> International Information Security Conference</idno>
            <idno type="stamp" n="IFIP-AICT-529" corresp="IFIP-AICT">ICT Systems Security and Privacy Protection</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 4: Software Security / Attacks</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">When George Clooney Is Not George Clooney: Using GenAttack to Deceive Amazon’s and Naver’s Celebrity Recognition APIs</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Keeyoung</forename>
                    <surname>Kim</surname>
                  </persName>
                  <email type="md5">857dee28616b7d2c703fae26cf56ba9a</email>
                  <email type="domain">sunykorea.ac.kr</email>
                  <idno type="idhal" notation="numeric">1042924</idno>
                  <idno type="halauthorid" notation="string">1526009-1042924</idno>
                  <affiliation ref="#struct-522721"/>
                  <affiliation ref="#struct-303386"/>
                  <affiliation ref="#struct-553976"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Simon</forename>
                    <forename type="middle">S.</forename>
                    <surname>Woo</surname>
                  </persName>
                  <email type="md5">5815ebbe92601042f835475cbdfb7d7e</email>
                  <email type="domain">sunykorea.ac.kr</email>
                  <idno type="idhal" notation="numeric">1042925</idno>
                  <idno type="halauthorid" notation="string">1526010-1042925</idno>
                  <affiliation ref="#struct-522721"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>33th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC)</title>
                  <date type="start">2018-09-18</date>
                  <date type="end">2018-09-20</date>
                  <settlement>Poznan</settlement>
                  <country key="PL">Poland</country>
                </meeting>
                <editor>Lech Jan Janczewski</editor>
                <editor>Mirosław Kutyłowski</editor>
                <imprint>
                  <publisher>Springer International Publishing</publisher>
                  <biblScope unit="serie">ICT Systems Security and Privacy Protection</biblScope>
                  <biblScope unit="volume">AICT-529</biblScope>
                  <biblScope unit="pp">355-369</biblScope>
                  <date type="datePub">2018</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-319-99828-2_25</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Genetic Algorithm</term>
                <term xml:lang="en">Adversarial Example</term>
                <term xml:lang="en">Black-box attack</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>In recent years, significant advancements have been made in detecting and recognizing contents of images using Deep Neural Networks (DNNs). As a result, many companies offer image recognition APIs for use in diverse applications. However, image classification algorithms trained with DNNs can misclassify adversarial examples, posing a significant threat to critical applications. In this work, we present a novel way to generate adversarial example images using an evolutionary genetic algorithm (GA). Our algorithm builds adversarial images by iteratively adding noise to the original images. Unlike DNN based adversarial example generations by other researchers, our approach does not require GPU resources and access to the target DNNs’ parameters. We design, GenAttack, a simple yet powerful attack algorithm to create adversarial examples using complex celebrity images and evaluate those with real-world celebrity recognition APIs from Amazon and Naver. With our attack, we successfully deceive Amazon’s and Naver’s APIs with a success probability of 86.6% and 100%, respectively. Our work demonstrates the practicability of generating adversarial examples and successfully fooling the state-of-the-art commercial image recognition systems.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-522721" status="VALID">
          <orgName>State University of New York Korea</orgName>
          <orgName type="acronym">SUNY Korea</orgName>
          <desc>
            <address>
              <addrLine>119 Songdo Moonhwa-Ro, Yeonsu-GuIncheon, Korea</addrLine>
              <country key="KR"/>
            </address>
            <ref type="url">http://sunykorea.ac.kr/page/about</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-303386" status="VALID">
          <idno type="ISNI">0000 0001 2216 9681</idno>
          <idno type="ROR">https://ror.org/05qghxh33</idno>
          <orgName>Stony Brook University [SUNY]</orgName>
          <orgName type="acronym">SBU</orgName>
          <desc>
            <address>
              <addrLine>100 Nicolls Road, Stony Brook, NY 11794</addrLine>
              <country key="US"/>
            </address>
            <ref type="url">http://www.stonybrook.edu</ref>
          </desc>
          <listRelation>
            <relation active="#struct-361557" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-553976" status="VALID">
          <orgName>Artificial Intelligence Research Institute [South Korea]</orgName>
          <orgName type="acronym">AIRI</orgName>
          <desc>
            <address>
              <addrLine>5F, Yeongu-dong, Global R&amp;D Center, 22, Daewangpangyyo-ro 712beon-gil, Seongnam-siGyeonggi-do 13488</addrLine>
              <country key="KR"/>
            </address>
            <ref type="url">http://www.airi.kr</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-361557" status="VALID">
          <idno type="IdRef">026425157</idno>
          <idno type="ROR">https://ror.org/01q1z8k08</idno>
          <orgName>State University of New York</orgName>
          <orgName type="acronym">SUNY</orgName>
          <desc>
            <address>
              <country key="US"/>
            </address>
            <ref type="url">http://www.suny.edu/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>