@inproceedings{An.ImU.SP.2023, title={ImU: Physical Impersonating Attack for Face Recognition System with Natural Style Changes}, author={An, Shengwei and Yao, Yuan and Xu, Qiuling and Ma, Shiqing and Tao, Guanhong and Cheng, Siyuan and Zhang, Kaiyuan and Liu, Yingqi and Shen, Guangyu and Kelk, Ian and Zhang, Xiangyu}, booktitle={IEEE Symposium on Security and Privacy (SP 2023)}, year={2023} }