@inproceedings{an2023imu,
    title={ImU: Physical Impersonating Attack for Face Recognition System with Natural Style Changes},
    author={An, Shengwei and Yao, Yuan and Xu, Qiuling and Ma, Shiqing and Tao, Guanhong and Cheng, Siyuan and Zhang, Kaiyuan and Liu, Yingqi and Shen, Guangyu and Kelk, Ian and others},
    booktitle={2023 IEEE Symposium on Security and Privacy (SP)},
    pages={899--916},
    year={2023},
    organization={IEEE Computer Society}
}