Shengwei An, Yuan Yao, Qiuling Xu, Shiqing Ma, Guanhong Tao, Siyuan Cheng, Kaiyuan Zhang, Yingqi Liu, Guangyu Shen, Ian Kelk, Xiangyu Zhang: ImU: Physical Impersonating Attack for Face Recognition System with Natural Style Changes. SP 2023: 899-916