{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T15:17:16Z","timestamp":1783610236599,"version":"3.55.0"},"reference-count":61,"publisher":"IEEE","license":[{"start":{"date-parts":[[2019,5,1]],"date-time":"2019-05-01T00:00:00Z","timestamp":1556668800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2019,5,1]],"date-time":"2019-05-01T00:00:00Z","timestamp":1556668800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,5]]},"DOI":"10.1109\/sp.2019.00032","type":"proceedings-article","created":{"date-parts":[[2019,9,17]],"date-time":"2019-09-17T02:03:02Z","timestamp":1568685782000},"page":"952-966","source":"Crossref","is-referenced-by-count":26,"title":["Stealthy Porn: Understanding Real-World Adversarial Images for Illicit Online Promotion"],"prefix":"10.1109","author":[{"given":"Kan","family":"Yuan","sequence":"first","affiliation":[{"name":"Indiana University Bloomington"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Di","family":"Tang","sequence":"additional","affiliation":[{"name":"Chinese University of Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaojing","family":"Liao","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"XiaoFeng","family":"Wang","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xuan","family":"Feng","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington\/Chinese Academy of Sciences"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yi","family":"Chen","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington\/Chinese Academy of Sciences"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Menghan","family":"Sun","sequence":"additional","affiliation":[{"name":"Chinese University of Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haoran","family":"Lu","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kehuan","family":"Zhang","sequence":"additional","affiliation":[{"name":"Chinese University of Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.322"},{"key":"ref38","article-title":"On the (statistical) detection of adversarial examples","author":"grosse","year":"2017","journal-title":"arXiv preprint arXiv 1702 06280"},{"key":"ref33","article-title":"Detecting adversarial samples from artifacts","author":"feinman","year":"2017","journal-title":"arXiv preprint arXiv 1703 00410"},{"key":"ref32","volume":"38","author":"di pietro","year":"2008","journal-title":"Intrusion Detection Systems"},{"key":"ref31","article-title":"Pixellink: Detecting scene text via instance segmentation","author":"deng","year":"2018","journal-title":"arXiv preprint arXiv 1801 01315"},{"key":"ref30","author":"chan","year":"0","journal-title":"Building systems to block pornography"},{"key":"ref37","first-page":"20","article-title":"Explaining and harnessing adversarial examples","volume":"1050","author":"goodfellow","year":"2015","journal-title":"Stat"},{"key":"ref36","article-title":"Adversarial and clean data are not twins","author":"gong","year":"2017","journal-title":"arXiv preprint arXiv704 04960"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.81"},{"key":"ref34","first-page":"1440","article-title":"Fast r-cnn","author":"girshick","year":"2015","journal-title":"Proceedings of the IEEE International Conference on Computer Vision"},{"key":"ref60","first-page":"1689","article-title":"Is feature selection secure against training data poisoning?","author":"xiao","year":"2015","journal-title":"International Conference on Machine Learning"},{"key":"ref61","article-title":"On the origins of memes by means of fringe web communities","volume":"abs 1805 12512","author":"zannettou","year":"2018","journal-title":"CoRR"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref27","author":"borgolte","year":"0","journal-title":"Meerkat Detecting website defacements through image-based object recognition"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref2","year":"0","journal-title":"Baidu tieba policy"},{"key":"ref1","year":"0","journal-title":"Baidu tieba"},{"key":"ref20","year":"2018","journal-title":"COCO - Common Objects in Context"},{"key":"ref22","year":"2018","journal-title":"Opencv Opencv modules"},{"key":"ref21","year":"2018","journal-title":"Implementation of our paper ’pixellink Detecting scene text via instance segmentation’ in aaai2018"},{"key":"ref24","year":"2018","journal-title":"scikit-image"},{"key":"ref23","year":"2018","journal-title":"Pillow"},{"key":"ref26","author":"anderson","year":"2007","journal-title":"Spamscatter Characterizing Internet Scam Hosting Infrastructure"},{"key":"ref25","author":"abdulla","year":"2017","journal-title":"Mask r-cnn for object detection and instance segmentation on keras and tensorflow"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2016.12.017"},{"key":"ref59","article-title":"On attacking statistical spam filters","author":"wittel","year":"2004","journal-title":"CEAS"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2017.07.012"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-013-0620-5"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23014"},{"key":"ref55","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2013","journal-title":"arXiv preprint arXiv 1312 6199"},{"key":"ref54","article-title":"Defense-gan: Protecting classifiers against adversarial attacks using generative models","author":"samangouei","year":"2018","journal-title":"arXiv preprint arXiv805 06605"},{"key":"ref53","first-page":"91","article-title":"Faster r-cnn: Towards real-time object detection with region proposal networks","author":"ren","year":"2015","journal-title":"Advances in neural information processing systems"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/2598918.2598920"},{"key":"ref10","year":"0","journal-title":"Sina weibo service usage agreement"},{"key":"ref11","year":"0","journal-title":"Twitter media policy"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref12","year":"2008","journal-title":"Phash The Open Source Perceptual Hash Library"},{"key":"ref13","year":"2011","journal-title":"ZBar Bar Code Reader"},{"key":"ref14","year":"2011","journal-title":"Zxing (“zebra crossing”) barcode scanning library for java android"},{"key":"ref15","year":"2014","journal-title":"Libmagic"},{"key":"ref16","year":"2016","journal-title":"Ms-celeb-1m Challenge of recognizing one million celebrities in the real world"},{"key":"ref17","year":"2017","journal-title":"Tensorflow implementation of yahoo’s open nsfw model"},{"key":"ref18","year":"2018","journal-title":"Baidu aipimagecensor github"},{"key":"ref19","year":"2018","journal-title":"IMG"},{"key":"ref4","year":"0","journal-title":"CH china cybersecurity law"},{"key":"ref3","year":"0","journal-title":"Boofcv"},{"key":"ref6","year":"0","journal-title":"Downloads - incidental scene text"},{"key":"ref5","year":"0","journal-title":"Clarifai"},{"key":"ref8","year":"0","journal-title":"Safesearch - wikipedia"},{"key":"ref7","year":"0","journal-title":"Google Cloud Vision API"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref9","year":"0","journal-title":"Sina Weibo"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1023\/B:VISI.0000029664.99615.94"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SIBGRAPI.2009.32"},{"key":"ref48","first-page":"1","article-title":"Driving in the cloud: An analysis of drive-by download operations and abuse reporting","author":"nappa","year":"2013","journal-title":"Detection of Intrusions and Malware and Vulnerability Assessment"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/1460877.1460905"},{"key":"ref42","first-page":"1097","article-title":"Imagenet classification with deep convolutional neural networks","author":"krizhevsky","year":"2012","journal-title":"Advances in neural information processing systems"},{"key":"ref41","article-title":"Early methods for detecting adversarial images","author":"hendrycks","year":"2016","journal-title":"arXiv preprint arXiv 1608 00530"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298965"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.615"}],"event":{"name":"2019 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2019,5,19]]},"end":{"date-parts":[[2019,5,23]]}},"container-title":["2019 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8826229\/8835208\/08835391.pdf?arnumber=8835391","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,24]],"date-time":"2025-04-24T17:04:08Z","timestamp":1745514248000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8835391\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,5]]},"references-count":61,"URL":"https:\/\/doi.org\/10.1109\/sp.2019.00032","relation":{},"subject":[],"published":{"date-parts":[[2019,5]]}}}