@inproceedings{discretepointwiseattackisnotenough,
  title = {Discrete Point-wise Attack Is Not Enough: Generalized Manifold Adversarial Attack for Face Recognition},
  author = {Qian Li and Yuxiao Hu and Ye Liu and Dongxiao Zhang and Xin Jin and Yuntian Chen},
  year = {2022},
  booktitle = {CVPR 2023 1},
  eprint = {2301.06083},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2301.06083v2},
}