@inproceedings{bb166700,
        AUTHOR = "Zheng, Z.H. and Ying, X.W. and Yao, Z. and Chuah, M.C.",
        TITLE = "Robustness of Trajectory Prediction Models Under Map-Based Attacks",
        BOOKTITLE = WACV23,
        YEAR = "2023",
        PAGES = "4530-4539",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162535"}

@inproceedings{bb166701,
        AUTHOR = "Modas, A. and Rade, R. and Ortiz Jimenez, G. and Moosavi Dezfooli, S.M. and Frossard, P.",
        TITLE = "PRIME: A Few Primitives Can Boost Robustness to Common Corruptions",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "XXV:623-640",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162536"}

@inproceedings{bb166702,
        AUTHOR = "Do, K. and Harikumar, H. and Le, H. and Nguyen, D. and Tran, T. and Rana, S. and Nguyen, D. and Susilo, W. and Venkatesh, S.",
        TITLE = "Towards Effective and Robust Neural Trojan Defenses via Input Filtering",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "V:283-300",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162537"}

@inproceedings{bb166703,
        AUTHOR = "Sun, J.C. and Mehra, A. and Kailkhura, B. and Chen, P.Y. and Hendrycks, D. and Hamm, J. and Mao, Z.M.",
        TITLE = "A Spectral View of Randomized Smoothing Under Common Corruptions:
Benchmarking and Improving Certified Robustness",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "IV:654-671",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162538"}

@inproceedings{bb166704,
        AUTHOR = "Li, G.L. and Xu, G.W. and Qiu, H. and He, R. and Li, J. and Zhang, T.W.",
        TITLE = "Improving Adversarial Robustness of 3D Point Cloud Classification
Models",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "IV:672-689",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162539"}

@inproceedings{bb166705,
        AUTHOR = "Li, K.D. and Zhang, Z.M. and Zhong, C.C. and Wang, G.H.",
        TITLE = "Robust Structured Declarative Classifiers for 3D Point Clouds:
Defending Adversarial Attacks with Implicit Gradients",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15273-15283",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162540"}

@inproceedings{bb166706,
        AUTHOR = "Ren, Q.B. and Bao, Q.Q. and Wang, R.Z. and Yan, J.C.",
        TITLE = "Appearance and Structure Aware Robust Deep Visual Graph Matching:
Attack, Defense and Beyond",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15242-15251",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162541"}

@inproceedings{bb166707,
        AUTHOR = "Lee, B.K. and Kim, J. and Ro, Y.M.",
        TITLE = "Masking Adversarial Damage: Finding Adversarial Saliency for Robust
and Sparse Network",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15105-15115",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162542"}

@inproceedings{bb166708,
        AUTHOR = "Ozdenizci, O. and Legenstein, R.",
        TITLE = "Improving Robustness Against Stealthy Weight Bit-Flip Attacks by
Output Code Matching",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "13378-13387",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162543"}

@inproceedings{bb166709,
        AUTHOR = "Yamada, Y. and Otani, M.",
        TITLE = "Does Robustness on ImageNet Transfer to Downstream Tasks?",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "9205-9214",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162544"}

@inproceedings{bb166710,
        AUTHOR = "Mao, X.F. and Qi, G. and Chen, Y.F. and Li, X.D. and Duan, R.J. and Ye, S. and He, Y. and Xue, H.",
        TITLE = "Towards Robust Vision Transformer",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "12032-12041",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162545"}

@inproceedings{bb166711,
        AUTHOR = "Sun, M.J. and Li, Z.C. and Xiao, C.W. and Qiu, H.N. and Kailkhura, B. and Liu, M.Y. and Li, B.",
        TITLE = "Can Shape Structure Features Improve Model Robustness under Diverse
Adversarial Settings?",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7506-7515",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162546"}

@inproceedings{bb166712,
        AUTHOR = "Huang, J.X. and Guan, D. and Xiao, A. and Lu, S.J.",
        TITLE = "RDA: Robust Domain Adaptation via Fourier Adversarial Attacking",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "8968-8979",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162547"}

@inproceedings{bb166713,
        AUTHOR = "Wang, S.J. and Wu, T. and Chakrabarti, A. and Vorobeychik, Y.",
        TITLE = "Adversarial Robustness of Deep Sensor Fusion Models",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "1371-1380",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162548"}

@inproceedings{bb166714,
        AUTHOR = "Hasnat, A. and Shvai, N. and Nakib, A.",
        TITLE = "CNN Classifier's Robustness Enhancement when Preserving Privacy",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3887-3891",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162549"}

@inproceedings{bb166715,
        AUTHOR = "Liu, L.Q. and Duan, Z.Y. and Xu, G.Z. and Xu, Y.",
        TITLE = "Self-Supervised Disentangled Embedding for Robust Image
Classification",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "1494-1498",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162550"}

@inproceedings{bb166716,
        AUTHOR = "Maho, T. and Bonnet, B. and Furony, T. and Le Merrer, E.",
        TITLE = "RoBIC: A Benchmark Suite for Assessing Classifiers Robustness",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3612-3616",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162551"}

@inproceedings{bb166717,
        AUTHOR = "Co, K.T. and Munoz Gonzalez, L. and Kanthan, L. and Glocker, B. and Lupu, E.C.",
        TITLE = "Universal Adversarial Robustness of Texture and Shape-Biased Models",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "799-803",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162552"}

@inproceedings{bb166718,
        AUTHOR = "Agarwal, A. and Vatsa, M. and Singh, R. and Ratha, N.",
        TITLE = "Intelligent and Adaptive Mixup Technique for Adversarial Robustness",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "824-828",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162553"}

@inproceedings{bb166719,
        AUTHOR = "Perez, J.C. and Alfarra, M. and Jeanneret, G. and Rueda, L. and Thabet, A. and Ghanem, B. and Arbelaez, P.",
        TITLE = "Enhancing Adversarial Robustness via Test-Time Transformation
Ensembling",
        BOOKTITLE = AROW21,
        YEAR = "2021",
        PAGES = "81-91",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162554"}

@inproceedings{bb166720,
        AUTHOR = "De, K. and Pedersen, M.",
        TITLE = "Impact of Colour on Robustness of Deep Neural Networks",
        BOOKTITLE = AROW21,
        YEAR = "2021",
        PAGES = "21-30",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162555"}

@inproceedings{bb166721,
        AUTHOR = "Wu, T. and Liu, Z.W. and Huang, Q.Q. and Wang, Y. and Lin, D.",
        TITLE = "Adversarial Robustness under Long-Tailed Distribution",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "8655-8664",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162556"}

@inproceedings{bb166722,
        AUTHOR = "Addepalli, S. and Jain, S. and Sriramanan, G. and Babu, R.V.",
        TITLE = "Boosting Adversarial Robustness using Feature Level Stochastic
Smoothing",
        BOOKTITLE = SAIAD21,
        YEAR = "2021",
        PAGES = "93-102",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162557"}

@inproceedings{bb166723,
        AUTHOR = "Ali, A. and Migliorati, A. and Bianchi, T. and Magli, E.",
        TITLE = "Beyond Cross-Entropy: Learning Highly Separable Feature Distributions
for Robust and Accurate Classification",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "9711-9718",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162558"}

@inproceedings{bb166724,
        AUTHOR = "Hou, Y.F. and Zou, L.X. and Liu, W.D.",
        TITLE = "Task-based Focal Loss for Adversarially Robust Meta-Learning",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "2824-2829",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162559"}

@inproceedings{bb166725,
        AUTHOR = "Alamri, F. and Kalkan, S. and Pugeault, N.",
        TITLE = "Transformer-Encoder Detector Module: Using Context to Improve
Robustness to Adversarial Attacks on Object Detection",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "9577-9584",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162560"}

@inproceedings{bb166726,
        AUTHOR = "Schwartz, D. and Alparslan, Y. and Kim, E.",
        TITLE = "Regularization and Sparsity for Adversarial Robustness and Stable
Attribution",
        BOOKTITLE = ISVC20,
        YEAR = "2020",
        PAGES = "I:3-14",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162561"}

@inproceedings{bb166727,
        AUTHOR = "Rusak, E. and Schott, L. and Zimmermann, R.S. and Bitterwolf, J. and Bringmann, O. and Bethge, M. and Brendel, W.",
        TITLE = "A Simple Way to Make Neural Networks Robust Against Diverse Image
Corruptions",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "III:53-69",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162562"}

@inproceedings{bb166728,
        AUTHOR = "Bui, A. and Le, T. and Zhao, H. and Montague, P. and deVel, O. and Abraham, T. and Phung, D.",
        TITLE = "Improving Adversarial Robustness by Enforcing Local and Global
Compactness",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXVII:209-223",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162563"}

@inproceedings{bb166729,
        AUTHOR = "Mao, C.Z. and Gupta, A. and Nitin, V. and Ray, B. and Song, S. and Yang, J.F. and Vondrick, C.",
        TITLE = "Multitask Learning Strengthens Adversarial Robustness",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "II:158-174",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162564"}

@inproceedings{bb166730,
        AUTHOR = "Mohapatra, J. and Weng, T. and Chen, P. and Liu, S. and Daniel, L.",
        TITLE = "Towards Verifying Robustness of Neural Networks Against A Family of
Semantic Perturbations",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "241-249",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162565"}

@inproceedings{bb166731,
        AUTHOR = "Wu, M. and Kwiatkowska, M.",
        TITLE = "Robustness Guarantees for Deep Neural Networks on Videos",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "308-317",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162566"}

@inproceedings{bb166732,
        AUTHOR = "Chan, A. and Tay, Y. and Ong, Y.",
        TITLE = "What It Thinks Is Important Is Important: Robustness Transfers
Through Input Gradients",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "329-338",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162567"}

@inproceedings{bb166733,
        AUTHOR = "Jefferson, B. and Marrero, C.O.",
        TITLE = "Robust Assessment of Real-World Adversarial Examples",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3442-3449",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162568"}

@inproceedings{bb166734,
        AUTHOR = "Goel, A. and Agarwal, A. and Vatsa, M. and Singh, R. and Ratha, N.K.",
        TITLE = "DNDNet: Reconfiguring CNN for Adversarial Robustness",
        BOOKTITLE = TCV20,
        YEAR = "2020",
        PAGES = "103-110",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162569"}

@inproceedings{bb166735,
        AUTHOR = "Rahnama, A. and Nguyen, A.T. and Raff, E.",
        TITLE = "Robust Design of Deep Neural Networks Against Adversarial Attacks
Based on Lyapunov Theory",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "8175-8184",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162570"}

@inproceedings{bb166736,
        AUTHOR = "Zhao, Y. and Wu, Y. and Chen, C. and Lim, A.",
        TITLE = "On Isometry Robustness of Deep 3D Point Cloud Models Under
Adversarial Attacks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "1198-1207",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162571"}

@inproceedings{bb166737,
        AUTHOR = "Gowal, S. and Qin, C. and Huang, P. and Cemgil, T. and Dvijotham, K. and Mann, T. and Kohli, P.",
        TITLE = "Achieving Robustness in the Wild via Adversarial Mixing With
Disentangled Representations",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "1208-1217",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162572"}

@inproceedings{bb166738,
        AUTHOR = "Jeddi, A. and Shafiee, M.J. and Karg, M. and Scharfenberger, C. and Wong, A.",
        TITLE = "Learn2Perturb: An End-to-End Feature Perturbation Learning to Improve
Adversarial Robustness",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "1238-1247",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162573"}

@inproceedings{bb166739,
        AUTHOR = "Addepalli, S. and Vivek, B.S. and Baburaj, A. and Sriramanan, G. and Babu, R.V.",
        TITLE = "Towards Achieving Adversarial Robustness by Enforcing Feature
Consistency Across Bit Planes",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "1017-1026",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162574"}

@inproceedings{bb166740,
        AUTHOR = "Guo, M. and Yang, Y. and Xu, R. and Liu, Z. and Lin, D.",
        TITLE = "When NAS Meets Robustness: In Search of Robust Architectures Against
Adversarial Attacks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "628-637",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162575"}

@inproceedings{bb166741,
        AUTHOR = "Lee, S. and Lee, H. and Yoon, S.",
        TITLE = "Adversarial Vertex Mixup: Toward Better Adversarially Robust
Generalization",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "269-278",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162576"}

@inproceedings{bb166742,
        AUTHOR = "Dong, Y. and Fu, Q. and Yang, X. and Pang, T. and Su, H. and Xiao, Z. and Zhu, J.",
        TITLE = "Benchmarking Adversarial Robustness on Image Classification",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "318-328",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162577"}

@inproceedings{bb166743,
        AUTHOR = "Naseer, M. and Khan, S. and Hayat, M. and Khan, F.S. and Porikli, F.M.",
        TITLE = "A Self-supervised Approach for Adversarial Robustness",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "259-268",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162578"}

@inproceedings{bb166744,
        AUTHOR = "Kim, D.H. and Bargal, S.A. and Zhang, J.M. and Sclaroff, S.",
        TITLE = "Multi-way Encoding for Robustness",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "1341-1349",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162579"}

@inproceedings{bb166745,
        AUTHOR = "Zhang, L. and Yu, M. and Chen, T. and Shi, Z. and Bao, C. and Ma, K.",
        TITLE = "Auxiliary Training: Towards Accurate and Robust Models",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "369-378",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162580"}

@inproceedings{bb166746,
        AUTHOR = "Peterson, J. and Battleday, R. and Griffiths, T. and Russakovsky, O.",
        TITLE = "Human Uncertainty Makes Classification More Robust",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "9616-9625",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162581"}

@inproceedings{bb166747,
        AUTHOR = "Ramanathan, T. and Manimaran, A. and You, S. and Kuo, C.J.",
        TITLE = "Robustness of Saak Transform Against Adversarial Attacks",
        BOOKTITLE = ICIP19,
        YEAR = "2019",
        PAGES = "2531-2535",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162582"}

@inproceedings{bb166748,
        AUTHOR = "Chen, H. and Liang, J. and Chang, S. and Pan, J. and Chen, Y. and Wei, W. and Juan, D.",
        TITLE = "Improving Adversarial Robustness via Guided Complement Entropy",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "4880-4888",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162583"}

@inproceedings{bb166749,
        AUTHOR = "Raff, E. and Sylvester, J. and Forsyth, S. and McLean, M.",
        TITLE = "Barrage of Random Transforms for Adversarially Robust Defense",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "6521-6530",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162584"}

@inproceedings{bb166750,
        AUTHOR = "Agarwal, C. and Nguyen, A. and Schonfeld, D.",
        TITLE = "Improving Robustness to Adversarial Examples by Encouraging
Discriminative Features",
        BOOKTITLE = ICIP19,
        YEAR = "2019",
        PAGES = "3801-3805",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162585"}

@inproceedings{bb166751,
        AUTHOR = "Behpour, S. and Xing, W. and Ziebart, B.D.",
        TITLE = "ARC: Adversarial Robust Cuts for Semi-Supervised and Multi-label
Classification",
        BOOKTITLE = WiCV18,
        YEAR = "2018",
        PAGES = "1986-19862",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162586"}

@inproceedings{bb166752,
        AUTHOR = "Karim, R. and Islam, M.A. and Mohammed, N. and Bruce, N.D.B.",
        TITLE = "On the Robustness of Deep Learning Models to Universal Adversarial
Attack",
        BOOKTITLE = CRV18,
        YEAR = "2018",
        PAGES = "55-62",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162587"}

@inproceedings{bb166753,
        AUTHOR = "Jakubovitz, D. and Giryes, R.",
        TITLE = "Improving DNN Robustness to Adversarial Attacks Using Jacobian
Regularization",
        BOOKTITLE = ECCV18,
        YEAR = "2018",
        PAGES = "XII: 525-541",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162588"}

@inproceedings{bb166754,
        AUTHOR = "Rozsa, A. and Gunther, M. and Boult, T.E.",
        TITLE = "Towards Robust Deep Neural Networks with BANG",
        BOOKTITLE = WACV18,
        YEAR = "2018",
        PAGES = "803-811",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162589"}

@inproceedings{bb166755,
        AUTHOR = "Lu, J. and Issaranon, T. and Forsyth, D.A.",
        TITLE = "SafetyNet: Detecting and Rejecting Adversarial Examples Robustly",
        BOOKTITLE = ICCV17,
        YEAR = "2017",
        PAGES = "446-454",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162590"}

@article{bb166756,
        AUTHOR = "Yu, Y.J. and Lee, H.J. and Lee, H. and Ro, Y.M.",
        TITLE = "Defending Person Detection Against Adversarial Patch Attack by Using
Universal Defensive Frame",
        JOURNAL = IP,
        VOLUME = "31",
        YEAR = "2022",
        PAGES = "6976-6990",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162591"}

@article{bb166757,
        AUTHOR = "Zhang, Y.C. and Zhang, Y. and Qi, J.H. and Bin, K.C. and Wen, H. and Tong, X.Q. and Zhong, P.",
        TITLE = "Adversarial Patch Attack on Multi-Scale Object Detection for UAV
Remote Sensing Images",
        JOURNAL = RS,
        VOLUME = "14",
        YEAR = "2022",
        NUMBER = "21",
        PAGES = "xx-yy",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162592"}

@article{bb166758,
        AUTHOR = "Shi, M.C. and Xie, F. and Yang, J.Q. and Zhao, J. and Liu, X.X. and Wang, F.",
        TITLE = "Cutout with patch-loss augmentation for improving generative
adversarial networks against instability",
        JOURNAL = CVIU,
        VOLUME = "234",
        YEAR = "2023",
        PAGES = "103761",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162593"}

@article{bb166759,
        AUTHOR = "Pintor, M. and Angioni, D. and Sotgiu, A. and Demetrio, L. and Demontis, A. and Biggio, B. and Roli, F.",
        TITLE = "ImageNet-Patch: A dataset for benchmarking machine learning
robustness against adversarial patches",
        JOURNAL = PR,
        VOLUME = "134",
        YEAR = "2023",
        PAGES = "109064",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162594"}

@article{bb166760,
        AUTHOR = "Wei, X.X. and Wang, S.P. and Yan, H.Q.",
        TITLE = "Efficient Robustness Assessment via Adversarial Spatial-Temporal
Focus on Videos",
        JOURNAL = PAMI,
        VOLUME = "45",
        YEAR = "2023",
        NUMBER = "9",
        MONTH = "September",
        PAGES = "10898-10912",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162595"}

@article{bb166761,
        AUTHOR = "Wang, Z. and Wang, B.H. and Zhang, C.L. and Liu, Y.H.",
        TITLE = "Defense against Adversarial Patch Attacks for Aerial Image Semantic
Segmentation by Robust Feature Extraction",
        JOURNAL = RS,
        VOLUME = "15",
        YEAR = "2023",
        NUMBER = "6",
        PAGES = "1690",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162596"}

@article{bb166762,
        AUTHOR = "Wang, Z. and Wang, B.H. and Zhang, C.L. and Liu, Y.H. and Guo, J.X.",
        TITLE = "Defending against Poisoning Attacks in Aerial Image Semantic
Segmentation with Robust Invariant Feature Enhancement",
        JOURNAL = RS,
        VOLUME = "15",
        YEAR = "2023",
        NUMBER = "12",
        PAGES = "xx-yy",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162597"}

@article{bb166763,
        AUTHOR = "Wang, Z. and Wang, B.H. and Zhang, C.L. and Liu, Y.H. and Guo, J.X.",
        TITLE = "Robust Feature-Guided Generative Adversarial Network for Aerial Image
Semantic Segmentation against Backdoor Attacks",
        JOURNAL = RS,
        VOLUME = "15",
        YEAR = "2023",
        NUMBER = "10",
        PAGES = "xx-yy",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162598"}

@article{bb166764,
        AUTHOR = "Wei, X.X. and Guo, Y. and Yu, J. and Zhang, B.",
        TITLE = "Simultaneously Optimizing Perturbations and Positions for Black-Box
Adversarial Patch Attacks",
        JOURNAL = PAMI,
        VOLUME = "45",
        YEAR = "2023",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "9041-9054",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162599"}

@article{bb166765,
        AUTHOR = "Ran, Y. and Wang, W.J. and Li, M.J. and Li, L.C. and Wang, Y.G. and Li, J.",
        TITLE = "Cross-Shaped Adversarial Patch Attack",
        JOURNAL = CirSysVideo,
        VOLUME = "34",
        YEAR = "2024",
        NUMBER = "4",
        MONTH = "April",
        PAGES = "2289-2303",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162600"}

@article{bb166766,
        AUTHOR = "Yang, J. and Guan, Z.Y. and Li, J. and Shi, Z.P. and Liu, X.L.",
        TITLE = "Diffusion Patch Attack With Spatial-Temporal Cross-Evolution for
Video Recognition",
        JOURNAL = CirSysVideo,
        VOLUME = "34",
        YEAR = "2024",
        NUMBER = "12",
        MONTH = "December",
        PAGES = "13190-13200",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162601"}

@article{bb166767,
        AUTHOR = "Qi, L. and Zhao, D.J. and Shi, Y.H. and Geng, X.",
        TITLE = "Patch-Aware Batch Normalization for Improving Cross-Domain Robustness",
        JOURNAL = CirSysVideo,
        VOLUME = "35",
        YEAR = "2025",
        NUMBER = "1",
        MONTH = "January",
        PAGES = "800-810",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162602"}

@article{bb166768,
        AUTHOR = "Yang, J. and Li, J. and Cai, Y. and Wu, G.M. and Shi, Z.P. and Tan, C. and Liu, X.L.",
        TITLE = "Hard-Sample Style Guided Patch Attack With RL-Enhanced Motion Pattern
for Video Recognition",
        JOURNAL = MultMed,
        VOLUME = "27",
        YEAR = "2025",
        PAGES = "1205-1215",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162603"}

@article{bb166769,
        AUTHOR = "Wang, J. and Li, F. and He, L.J.",
        TITLE = "A Unified Framework for Adversarial Patch Attacks Against Visual 3D
Object Detection in Autonomous Driving",
        JOURNAL = CirSysVideo,
        VOLUME = "35",
        YEAR = "2025",
        NUMBER = "5",
        MONTH = "May",
        PAGES = "4949-4962",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162604"}

@article{bb166770,
        AUTHOR = "Deng, K. and Chen, Q.X. and Zhang, Y. and Lin, Z. and Gong, S. and Liang, Z.Y. and Peng, A.J. and Yang, X. and Lian, D.",
        TITLE = "Targeted attack via adversarial patch outside bounding box",
        JOURNAL = PR,
        VOLUME = "171",
        YEAR = "2026",
        PAGES = "112244",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162605"}

@article{bb166771,
        AUTHOR = "Wei, X.X. and Kang, C.X. and Dong, Y.P. and Wang, Z.Y. and Ruan, S. and Chen, Y. and Su, H.",
        TITLE = "Real-World Adversarial Defense Against Patch Attacks Based on
Diffusion Model",
        JOURNAL = PAMI,
        VOLUME = "47",
        YEAR = "2025",
        NUMBER = "12",
        MONTH = "December",
        PAGES = "11124-11140",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162606"}

@inproceedings{bb166772,
        AUTHOR = "Kang, C.X. and Dong, Y.P. and Wang, Z.Y. and Ruan, S. and Chen, Y. and Su, H. and Wei, X.X.",
        TITLE = "Diffender: Diffusion-based Adversarial Defense Against Patch Attacks",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "LII: 130-147",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162607"}

@article{bb166773,
        AUTHOR = "Peng, F. and Liu, Y. and Zhou, G.H. and Long, M.",
        TITLE = "AdvDiffusion: Adversarial Patches Generation for Face Recognition
with High Transferability in Physical Domain",
        JOURNAL = PAMI,
        VOLUME = "48",
        YEAR = "2026",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "7485-7502",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162608"}

@article{bb166774,
        AUTHOR = "Ai, N. and Chen, G. and Cai, X.W. and Guo, Z.L. and Liu, D.Z. and Zhou, P. and Arandjelovic, O.",
        TITLE = "Attacking hard-label large vision-language models with
model-sensitive adversarial patch designs",
        JOURNAL = PR,
        VOLUME = "180",
        YEAR = "2026",
        PAGES = "114261",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162609"}

@inproceedings{bb166775,
        AUTHOR = "Lee, W. and Lee, J. and Na, H. and Park, S. and Choi, D.",
        TITLE = "TRACE: Confounder-free Adversarial Fine-tuning for Robust Object
Detection",
        BOOKTITLE = WACV26,
        YEAR = "2026",
        PAGES = "6705-6714",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162610"}

@inproceedings{bb166776,
        AUTHOR = "Kazoom, R. and Goldberg, A. and Cohen, H. and Hadar, O.",
        TITLE = "Seeing Isn't Believing: Context-Aware Adversarial Patch Synthesis via
Conditional GAN",
        BOOKTITLE = SAForensics26,
        YEAR = "2026",
        PAGES = "202-211",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162611"}

@inproceedings{bb166777,
        AUTHOR = "Lin, S.Y. and Chu, E. and Yeh, P.H. and Chen, J.C. and Wang, J.C.",
        TITLE = "Diffusion to Confusion: Naturalistic Adversarial Patch Generation
Based on Diffusion Model for Object Detector",
        BOOKTITLE = ICIP25,
        YEAR = "2025",
        PAGES = "2378-2383",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162612"}

@inproceedings{bb166778,
        AUTHOR = "Victorica, M.B. and Dan, G. and Sandberg, H.",
        TITLE = "Saliuitl: Ensemble Salience Guided Recovery of Adversarial Patches
against CNNs",
        BOOKTITLE = CVPR25,
        YEAR = "2025",
        PAGES = "20360-20369",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162613"}

@inproceedings{bb166779,
        AUTHOR = "Xiang, X.Y. and Yan, Q.L. and Zhang, H. and Ma, J.Y.",
        TITLE = "ACAttack: Adaptive Cross Attacking RGB-T Tracker via Multi-Modal
Response Decoupling",
        BOOKTITLE = CVPR25,
        YEAR = "2025",
        PAGES = "22099-22108",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162614"}

@inproceedings{bb166780,
        AUTHOR = "Kumar, V. and Agarwal, A.",
        TITLE = "A Unified, Resilient, and Explainable Adversarial Patch Detector",
        BOOKTITLE = CVPR25,
        YEAR = "2025",
        PAGES = "30387-30397",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162615"}

@inproceedings{bb166781,
        AUTHOR = "Fu, J. and Zhang, X. and Pashami, S. and Rahimian, F. and Holst, A.",
        TITLE = "DiffPAD: Denoising Diffusion-Based Adversarial Patch Decontamination",
        BOOKTITLE = WACV25,
        YEAR = "2025",
        PAGES = "6602-6611",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162616"}

@inproceedings{bb166782,
        AUTHOR = "Long, J.H. and Jiang, T.S. and Yao, W. and Jia, S. and Zhang, W.J. and Zhou, W. and Ma, C. and Chen, X.Q.",
        TITLE = "Papmot: Exploring Adversarial Patch Attack Against Multiple Object
Tracking",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "LI: 128-144",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162617"}

@inproceedings{bb166783,
        AUTHOR = "Yang, M.Y. and Liu, D.Z. and Tang, K. and Zhou, P. and Chen, L.X. and Chen, J.Y.",
        TITLE = "Hiding Imperceptible Noise in Curvature-aware Patches for 3d Point
Cloud Attack",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "XXX: 431-448",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162618"}

@inproceedings{bb166784,
        AUTHOR = "Wu, S.Y. and Wang, J. and Zhao, J. and Wang, Y.Z. and Liu, X.L.",
        TITLE = "NAPGuard: Towards Detecting Naturalistic Adversarial Patches",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24367-24376",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162619"}

@inproceedings{bb166785,
        AUTHOR = "Jing, L.H. and Wang, R. and Ren, W.Q. and Dong, X. and Zou, C.",
        TITLE = "PAD: Patch-Agnostic Defense against Adversarial Patch Attacks",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24472-24481",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162620"}

@inproceedings{bb166786,
        AUTHOR = "Gittings, T. and Schneider, S. and Collomosse, J.",
        TITLE = "SegGuard: Defending Scene Segmentation Against Adversarial Patch
Attack",
        BOOKTITLE = ICIP24,
        YEAR = "2024",
        PAGES = "794-800",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162621"}

@inproceedings{bb166787,
        AUTHOR = "Zhao, Q. and Wang, Y.G.",
        TITLE = "Universal Black-Box Adversarial Patch Attack with Optimized Genetic
Algorithm",
        BOOKTITLE = ICIP24,
        YEAR = "2024",
        PAGES = "780-786",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162622"}

@inproceedings{bb166788,
        AUTHOR = "Chattopadhyay, N. and Guesmi, A. and Shafique, M.",
        TITLE = "Anomaly Unveiled: Securing Image Classification against Adversarial
Patch Attacks",
        BOOKTITLE = ICIP24,
        YEAR = "2024",
        PAGES = "929-935",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162623"}

@inproceedings{bb166789,
        AUTHOR = "Mathur, A.N. and Madan, A. and Sharma, O.",
        TITLE = "SLI-pSp: Injecting Multi-Scale Spatial Layout in pSp",
        BOOKTITLE = WACV23,
        YEAR = "2023",
        PAGES = "4084-4093",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162624"}

@inproceedings{bb166790,
        AUTHOR = "Jiang, K.X. and Chen, Z.Y. and Huang, H. and Wang, J.F. and Yang, D.K. and Li, B. and Wang, Y. and Zhang, W.Q.",
        TITLE = "Efficient Decision-based Black-box Patch Attacks on Video Recognition",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4356-4366",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162625"}

@inproceedings{bb166791,
        AUTHOR = "Hingun, N. and Sitawarin, C. and Li, J. and Wagner, D.",
        TITLE = "REAP: A Large-Scale Realistic Adversarial Patch Benchmark",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4617-4628",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162626"}

@inproceedings{bb166792,
        AUTHOR = "Tarchoun, B. and Ben Khalifa, A. and Mahjoub, M.A. and Abu Ghazaleh, N. and Alouani, I.",
        TITLE = "Jedi: Entropy-Based Localization and Removal of Adversarial Patches",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "4087-4095",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162627"}

@inproceedings{bb166793,
        AUTHOR = "Xu, K. and Xiao, Y. and Zheng, Z.H. and Cai, K.J. and Nevatia, R.",
        TITLE = "PatchZero: Defending against Adversarial Patch Attacks by Detecting
and Zeroing the Patch",
        BOOKTITLE = WACV23,
        YEAR = "2023",
        PAGES = "4621-4630",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162628"}

@inproceedings{bb166794,
        AUTHOR = "Li, J. and Zhang, H. and Xie, C.",
        TITLE = "ViP: Unified Certified Detection and Recovery for Patch Attack with
Vision Transformers",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "XXV:573-587",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162629"}

@inproceedings{bb166795,
        AUTHOR = "Lovisotto, G. and Finnie, N. and Munoz, M. and Murnmadi, C.K. and Metzen, J.H.",
        TITLE = "Give Me Your Attention: Dot-Product Attention Considered Harmful for
Adversarial Patch Robustness",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15213-15222",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162630"}

@inproceedings{bb166796,
        AUTHOR = "Liu, J. and Levine, A. and Lau, C.P. and Chellappa, R. and Feizi, S.",
        TITLE = "Segment and Complete: Defending Object Detectors against Adversarial
Patch Attacks with Robust Patch Detection",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "14953-14962",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162631"}

@inproceedings{bb166797,
        AUTHOR = "Yu, C. and Chen, J.S. and Xue, Y.Z. and Liu, Y.Y. and Wan, W.T. and Bao, J.Y. and Ma, H.M.",
        TITLE = "Defending against Universal Adversarial Patches by Clipping Feature
Norms",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "16414-16422",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162632"}

@inproceedings{bb166798,
        AUTHOR = "Nesti, F. and Rossolini, G. and Nair, S. and Biondi, A. and Buttazzo, G.",
        TITLE = "Evaluating the Robustness of Semantic Segmentation for Autonomous
Driving against Real-World Adversarial Patch Attacks",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "2826-2835",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162633"}

@inproceedings{bb166799,
        AUTHOR = "Lennon, M. and Drenkow, N. and Burlina, P.",
        TITLE = "Patch Attack Invariance: How Sensitive are Patch Attacks to 3D Pose?",
        BOOKTITLE = AROW21,
        YEAR = "2021",
        PAGES = "112-121",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advpat8.html#TT162634"}

Last update:Sep 30, 2026 at 11:45:00