Liu, X.; Ma, J.; Wang, X.; Lin, Q.; Zhang, J.; Schaefer, G.; Turkay, C.; Fang, H. Recoverable Facial Identity Protection via Adaptive Makeup Transfer Adversarial Attacks. AAAI 2025, 39, 514-522.