X. Liu, “Recoverable Facial Identity Protection via Adaptive Makeup Transfer Adversarial Attacks”, AAAI, vol. 39, no. 1, pp. 514-522, Apr. 2025.