@article{makeupattackfeaturespaceblackboxbackdoor,
  title = {MakeupAttack: Feature Space Black-box Backdoor Attack on Face Recognition via Makeup Transfer},
  author = {Ming Sun and Lihua Jing and Zixuan Zhu and Rui Wang},
  year = {2024},
  eprint = {2408.12312},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2408.12312v1},
}