@inproceedings{bb167100,
AUTHOR = "Han, J. and Dong, X. and Zhang, R. and Chen, D. and Zhang, W. and Yu, N. and Luo, P. and Wang, X.",
TITLE = "Once a MAN: Towards Multi-Target Attack via Learning Multi-Target
Adversarial Network Once",
BOOKTITLE = ICCV19,
YEAR = "2019",
PAGES = "5157-5166",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162935"}
@inproceedings{bb167101,
AUTHOR = "Deng, Y. and Karam, L.J.",
TITLE = "Universal Adversarial Attack Via Enhanced Projected Gradient Descent",
BOOKTITLE = ICIP20,
YEAR = "2020",
PAGES = "1241-1245",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162936"}
@inproceedings{bb167102,
AUTHOR = "Sun, C. and Chen, S. and Cai, J. and Huang, X.",
TITLE = "Type I Attack For Generative Models",
BOOKTITLE = ICIP20,
YEAR = "2020",
PAGES = "593-597",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162937"}
@inproceedings{bb167103,
AUTHOR = "Braunegg, A. and Chakraborty, A. and Krumdick, M. and Lape, N. and Leary, S. and Manville, K. and Merkhofer, E. and Strickhart, L. and Walmer, M.",
TITLE = "Apricot: A Dataset of Physical Adversarial Attacks on Object Detection",
BOOKTITLE = ECCV20,
YEAR = "2020",
PAGES = "XXI:35-50",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162938"}
@inproceedings{bb167104,
AUTHOR = "Zhang, H. and Zhu, L.C. and Zhu, Y. and Yang, Y.",
TITLE = "Motion-Excited Sampler: Video Adversarial Attack with Sparked Prior",
BOOKTITLE = ECCV20,
YEAR = "2020",
PAGES = "XX:240-256",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162939"}
@inproceedings{bb167105,
AUTHOR = "Gao, L.L. and Zhang, Q.L. and Song, J.K. and Liu, X.L. and Shen, H.T.",
TITLE = "Patch-wise Attack for Fooling Deep Neural Network",
BOOKTITLE = ECCV20,
YEAR = "2020",
PAGES = "XXVIII:307-322",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162940"}
@inproceedings{bb167106,
AUTHOR = "Bai, J.W. and Chen, B. and Li, Y.M. and Wu, D.X. and Guo, W.W. and Xia, S.T. and Yang, E.H.",
TITLE = "Targeted Attack for Deep Hashing Based Retrieval",
BOOKTITLE = ECCV20,
YEAR = "2020",
PAGES = "I:618-634",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162941"}
@inproceedings{bb167107,
AUTHOR = "Nakka, K.K. and Salzmann, M.",
TITLE = "Indirect Local Attacks for Context-aware Semantic Segmentation Networks",
BOOKTITLE = ECCV20,
YEAR = "2020",
PAGES = "V:611-628",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162942"}
@inproceedings{bb167108,
AUTHOR = "Wu, Z.X. and Lim, S.N. and Davis, L.S. and Goldstein, T.",
TITLE = "Making an Invisibility Cloak: Real World Adversarial Attacks on Object
Detectors",
BOOKTITLE = ECCV20,
YEAR = "2020",
PAGES = "IV:1-17",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162943"}
@inproceedings{bb167109,
AUTHOR = "Li, Q.Z. and Guo, Y.W. and Chen, H.",
TITLE = "Yet Another Intermediate-level Attack",
BOOKTITLE = ECCV20,
YEAR = "2020",
PAGES = "XVI: 241-257",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162944"}
@inproceedings{bb167110,
AUTHOR = "Li, M. and Deng, C. and Li, T. and Yan, J. and Gao, X. and Huang, H.",
TITLE = "Towards Transferable Targeted Attack",
BOOKTITLE = CVPR20,
YEAR = "2020",
PAGES = "638-646",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162945"}
@inproceedings{bb167111,
AUTHOR = "Gupta, S. and Dube, P. and Verma, A.",
TITLE = "Improving the affordability of robustness training for DNNs",
BOOKTITLE = AML-CV20,
YEAR = "2020",
PAGES = "3383-3392",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162946"}
@inproceedings{bb167112,
AUTHOR = "Zhang, Z. and Wu, T.",
TITLE = "Learning Ordered Top-k Adversarial Attacks via Adversarial
Distillation",
BOOKTITLE = AML-CV20,
YEAR = "2020",
PAGES = "3364-3373",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162947"}
@inproceedings{bb167113,
AUTHOR = "Chen, X. and Yan, X. and Zheng, F. and Jiang, Y. and Xia, S. and Zhao, Y. and Ji, R.",
TITLE = "One-Shot Adversarial Attacks on Visual Tracking With Dual Attention",
BOOKTITLE = CVPR20,
YEAR = "2020",
PAGES = "10173-10182",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162948"}
@inproceedings{bb167114,
AUTHOR = "Zhou, H. and Chen, D. and Liao, J. and Chen, K. and Dong, X. and Liu, K. and Zhang, W. and Hua, G. and Yu, N.",
TITLE = "LG-GAN: Label Guided Adversarial Network for Flexible Targeted Attack
of Point Cloud Based Deep Networks",
BOOKTITLE = CVPR20,
YEAR = "2020",
PAGES = "10353-10362",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162949"}
@inproceedings{bb167115,
AUTHOR = "Machiraju, H. and Balasubramanian, V.N.",
TITLE = "A Little Fog for a Large Turn",
BOOKTITLE = WACV20,
YEAR = "2020",
PAGES = "2891-2900",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162950"}
@inproceedings{bb167116,
AUTHOR = "Yang, C.H. and Liu, Y. and Chen, P. and Ma, X. and Tsai, Y.J.",
TITLE = "When Causal Intervention Meets Adversarial Examples and Image Masking
for Deep Neural Networks",
BOOKTITLE = ICIP19,
YEAR = "2019",
PAGES = "3811-3815",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162951"}
@inproceedings{bb167117,
AUTHOR = "Yao, H. and Regan, M. and Yang, Y. and Ren, Y.",
TITLE = "Image Decomposition and Classification Through a Generative Model",
BOOKTITLE = ICIP19,
YEAR = "2019",
PAGES = "400-404",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162952"}
@inproceedings{bb167118,
AUTHOR = "Li, J. and Ji, R. and Liu, H. and Hong, X. and Gao, Y. and Tian, Q.",
TITLE = "Universal Perturbation Attack Against Image Retrieval",
BOOKTITLE = ICCV19,
YEAR = "2019",
PAGES = "4898-4907",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162953"}
@inproceedings{bb167119,
AUTHOR = "Finlay, C. and Pooladian, A. and Oberman, A.",
TITLE = "The LogBarrier Adversarial Attack:
Making Effective Use of Decision Boundary Information",
BOOKTITLE = ICCV19,
YEAR = "2019",
PAGES = "4861-4869",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162954"}
@inproceedings{bb167120,
AUTHOR = "Jandial, S. and Mangla, P. and Varshney, S. and Balasubramanian, V.",
TITLE = "AdvGAN++: Harnessing Latent Layers for Adversary Generation",
BOOKTITLE = NeruArch19,
YEAR = "2019",
PAGES = "2045-2048",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162955"}
@inproceedings{bb167121,
AUTHOR = "Wang, C.L. and Bunel, R. and Dvijotham, K. and Huang, P.S. and Grefenstette, E. and Kohli, P.",
TITLE = "Knowing When to Stop: Evaluation and Verification of Conformity to
Output-Size Specifications",
BOOKTITLE = CVPR19,
YEAR = "2019",
PAGES = "12252-12261",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162956"}
@inproceedings{bb167122,
AUTHOR = "Modas, A. and Moosavi Dezfooli, S.M. and Frossard, P.",
TITLE = "SparseFool: A Few Pixels Make a Big Difference",
BOOKTITLE = CVPR19,
YEAR = "2019",
PAGES = "9079-9088",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162957"}
@inproceedings{bb167123,
AUTHOR = "Yao, Z.W. and Gholami, A. and Xu, P. and Keutzer, K. and Mahoney, M.W.",
TITLE = "Trust Region Based Adversarial Attack on Neural Networks",
BOOKTITLE = CVPR19,
YEAR = "2019",
PAGES = "11342-11351",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162958"}
@inproceedings{bb167124,
AUTHOR = "Zeng, X.H. and Liu, C.X. and Wang, Y.S. and Qiu, W.C. and Xie, L.X. and Tai, Y.W. and Tang, C.K. and Yuille, A.L.",
TITLE = "Adversarial Attacks Beyond the Image Space",
BOOKTITLE = CVPR19,
YEAR = "2019",
PAGES = "4297-4306",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162959"}
@inproceedings{bb167125,
AUTHOR = "Corneanu, C.A. and Madadi, M. and Escalera, S. and Martinez, A.M.",
TITLE = "What Does It Mean to Learn in Deep Networks? And, How Does One Detect
Adversarial Attacks?",
BOOKTITLE = CVPR19,
YEAR = "2019",
PAGES = "4752-4761",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162960"}
@inproceedings{bb167126,
AUTHOR = "Liu, X.Q. and Hsieh, C.J.",
TITLE = "Rob-GAN: Generator, Discriminator, and Adversarial Attacker",
BOOKTITLE = CVPR19,
YEAR = "2019",
PAGES = "11226-11235",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162961"}
@inproceedings{bb167127,
AUTHOR = "Gupta, P. and Rahtu, E.",
TITLE = "MLAttack: Fooling Semantic Segmentation Networks by Multi-layer Attacks",
BOOKTITLE = GCPR19,
YEAR = "2019",
PAGES = "401-413",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162962"}
@inproceedings{bb167128,
AUTHOR = "Zhao, W. and Yang, P.P. and Ni, R.R. and Zhao, Y. and Li, W.J.",
TITLE = "Cycle GAN-Based Attack on Recaptured Images to Fool both Human and
Machine",
BOOKTITLE = IWDW18,
YEAR = "2018",
PAGES = "83-92",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162963"}
@inproceedings{bb167129,
AUTHOR = "Xu, X.J. and Chen, X.Y. and Liu, C. and Rohrbach, A. and Darrell, T.J. and Song, D.",
TITLE = "Fooling Vision and Language Models Despite Localization and Attention
Mechanism",
BOOKTITLE = CVPR18,
YEAR = "2018",
PAGES = "4951-4961",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162964"}
@inproceedings{bb167130,
AUTHOR = "Dong, Y. and Liao, F. and Pang, T. and Su, H. and Zhu, J. and Hu, X. and Li, J.",
TITLE = "Boosting Adversarial Attacks with Momentum",
BOOKTITLE = CVPR18,
YEAR = "2018",
PAGES = "9185-9193",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162965"}
@inproceedings{bb167131,
AUTHOR = "Eykholt, K. and Evtimov, I. and Fernandes, E. and Li, B. and Rahmati, A. and Xiao, C. and Prakash, A. and Kohno, T. and Song, D.",
TITLE = "Robust Physical-World Attacks on Deep Learning Visual Classification",
BOOKTITLE = CVPR18,
YEAR = "2018",
PAGES = "1625-1634",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT162966"}
@article{bb167132,
AUTHOR = "Li, Y.Z. and Chang, M.C. and Sun, P. and Qi, H.G. and Dong, J.Y. and Lyu, S.W.",
TITLE = "TransRPN: Towards the Transferable Adversarial Perturbations using
Region Proposal Networks and Beyond",
JOURNAL = CVIU,
VOLUME = "213",
YEAR = "2021",
PAGES = "103302",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162967"}
@article{bb167133,
AUTHOR = "Gao, L.L. and Huang, Z.J. and Song, J.K. and Yang, Y. and Shen, H.T.",
TITLE = "Push & Pull: Transferable Adversarial Examples With Attentive
Attack",
JOURNAL = MultMed,
VOLUME = "24",
YEAR = "2022",
PAGES = "2329-2338",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162968"}
@article{bb167134,
AUTHOR = "Zhang, S.H. and Zuo, D.X. and Yang, Y.L. and Zhang, X.W.",
TITLE = "A Transferable Adversarial Belief Attack With Salient Region
Perturbation Restriction",
JOURNAL = MultMed,
VOLUME = "25",
YEAR = "2023",
PAGES = "4296-4306",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162969"}
@article{bb167135,
AUTHOR = "Khedr, Y.M. and Liu, X. and He, K.",
TITLE = "TransMix: Crafting highly transferable adversarial examples to evade
face recognition models",
JOURNAL = IVC,
VOLUME = "146",
YEAR = "2024",
PAGES = "105022",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162970"}
@article{bb167136,
AUTHOR = "Lu, Y.T. and Liu, N. and Li, Y. and Chen, J.C. and Velipasalar, S.",
TITLE = "Cross-task and time-aware adversarial attack framework for perception
of autonomous driving",
JOURNAL = PR,
VOLUME = "165",
YEAR = "2025",
PAGES = "111652",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162971"}
@article{bb167137,
AUTHOR = "Lu, Y.T. and Ren, H.N. and Chai, W.H. and Velipasalar, S. and Li, Y.",
TITLE = "Time-aware and task-transferable adversarial attack for perception of
autonomous vehicles",
JOURNAL = PRL,
VOLUME = "178",
YEAR = "2024",
PAGES = "145-152",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162972"}
@article{bb167138,
AUTHOR = "Chen, H. and Zhao, S. and Yan, Y. and Qian, F.",
TITLE = "Enhancing the Transferability of Adversarial Point Clouds by
Initializing Transferable Adversarial Noise",
JOURNAL = SPLetters,
VOLUME = "32",
YEAR = "2025",
PAGES = "201-205",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162973"}
@article{bb167139,
AUTHOR = "Peng, X. and Zhou, J.Y. and Wu, X.F.",
TITLE = "Distillation-Based Cross-Model Transferable Adversarial Attack for
Remote Sensing Image Classification",
JOURNAL = RS,
VOLUME = "17",
YEAR = "2025",
NUMBER = "10",
PAGES = "1700",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162974"}
@article{bb167140,
AUTHOR = "Hu, C. and He, Z.C. and Wu, X.J.",
TITLE = "Query-efficient black-box ensemble attack via dynamic surrogate
weighting",
JOURNAL = PR,
VOLUME = "161",
YEAR = "2025",
PAGES = "111263",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162975"}
@article{bb167141,
AUTHOR = "Chen, J.Q. and Chen, H. and Chen, K. and Zhang, Y. and Zou, Z.X. and Shi, Z.W.",
TITLE = "Diffusion Models for Imperceptible and Transferable Adversarial
Attack",
JOURNAL = PAMI,
VOLUME = "47",
YEAR = "2025",
NUMBER = "2",
MONTH = "February",
PAGES = "961-977",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162976"}
@article{bb167142,
AUTHOR = "Liu, J.L. and Lyu, X.C. and Ren, C. and Cui, Q.",
TITLE = "Crafting More Transferable Adversarial Examples via Quality-Aware
Transformation Combination",
JOURNAL = MultMed,
VOLUME = "27",
YEAR = "2025",
PAGES = "7917-7929",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162977"}
@article{bb167143,
AUTHOR = "Zhao, Z.Y. and Zhang, H.W. and Li, R. and Sicre, R. and Amsaleg, L. and Backes, M. and Li, Q. and Wang, Q. and Shen, C.",
TITLE = "Revisiting Transferable Adversarial Images:
Systemization, Evaluation, and New Insights",
JOURNAL = PAMI,
VOLUME = "48",
YEAR = "2026",
NUMBER = "1",
MONTH = "January",
PAGES = "765-780",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162978"}
@article{bb167144,
AUTHOR = "Wei, X.X. and Ruan, S. and Dong, Y.P. and Su, H. and Cao, X.C.",
TITLE = "Distributionally Location-Aware Transferable Adversarial Patches for
Facial Images",
JOURNAL = PAMI,
VOLUME = "47",
YEAR = "2025",
NUMBER = "4",
MONTH = "April",
PAGES = "2849-2864",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162979"}
@article{bb167145,
AUTHOR = "Wang, H.Q. and Lan, Y.Q. and Yue, F.Z. and Xia, Z.H. and Zhang, T.",
TITLE = "BUM: Bayesian Uncertainty Minimization for Transferable Adversarial
Examples in SAR Recognition",
JOURNAL = RS,
VOLUME = "18",
YEAR = "2026",
NUMBER = "5",
PAGES = "693",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162980"}
@article{bb167146,
AUTHOR = "Zhang, H. and Huang, B.Q. and Wang, B.S. and Zhang, L.X. and Shangguan, A. and Zhang, H.",
TITLE = "DPSF: A Dynamic Patch Shape Selection Framework for Cross-Model
Transferable Adversarial Attacks",
JOURNAL = RS,
VOLUME = "18",
YEAR = "2026",
NUMBER = "14",
PAGES = "2426",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162981"}
@article{bb167147,
AUTHOR = "Zhou, Z. and Wang, Z. and Zhang, X.P. and Feng, G.R.",
TITLE = "Improving the Transferability of Adversarial Examples Through
Spatial-Based Color Modification",
JOURNAL = MultMed,
VOLUME = "28",
YEAR = "2026",
PAGES = "6663-6674",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162982"}
@inproceedings{bb167148,
AUTHOR = "Yang, H. and Jeong, J. and Yoon, K.J.",
TITLE = "Prompt-driven Contrastive Learning for Transferable Adversarial Attacks",
BOOKTITLE = ECCV24,
YEAR = "2024",
PAGES = "XLIII: 36-53",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162983"}
@inproceedings{bb167149,
AUTHOR = "Fang, Z.W. and Wang, R. and Huang, T. and Jing, L.P.",
TITLE = "Strong Transferable Adversarial Attacks via Ensembled Asymptotically
Normal Distribution Learning",
BOOKTITLE = CVPR24,
YEAR = "2024",
PAGES = "24841-24850",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162984"}
@inproceedings{bb167150,
AUTHOR = "Zhang, J.P. and Huang, Y.Z. and Wu, W.B. and Lyu, M.R.",
TITLE = "Transferable Adversarial Attacks on Vision Transformers with Token
Gradient Regularization",
BOOKTITLE = CVPR23,
YEAR = "2023",
PAGES = "16415-16424",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162985"}
@inproceedings{bb167151,
AUTHOR = "Ma, W.S. and Li, Y.D. and Jia, X.F. and Xu, W.",
TITLE = "Transferable Adversarial Attack for Both Vision Transformers and
Convolutional Networks via Momentum Integrated Gradients",
BOOKTITLE = ICCV23,
YEAR = "2023",
PAGES = "4607-4616",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162986"}
@inproceedings{bb167152,
AUTHOR = "Wu, T. and Luo, T. and Wunsch, D.C.",
TITLE = "GNP Attack: Transferable Adversarial Examples Via Gradient Norm
Penalty",
BOOKTITLE = ICIP23,
YEAR = "2023",
PAGES = "3110-3114",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162987"}
@inproceedings{bb167153,
AUTHOR = "Lin, Z. and Peng, A.J. and Wei, R. and Yu, W.X. and Zeng, H.",
TITLE = "An Enhanced Transferable Adversarial Attack of Scale-Invariant
Methods",
BOOKTITLE = ICIP22,
YEAR = "2022",
PAGES = "3788-3792",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162988"}
@inproceedings{bb167154,
AUTHOR = "Son, M.J. and Kwon, M.J. and Kim, H.S. and Byun, J. and Cho, S. and Kim, C.",
TITLE = "Adaptive Warping Network for Transferable Adversarial Attacks",
BOOKTITLE = ICIP22,
YEAR = "2022",
PAGES = "3056-3060",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162989"}
@inproceedings{bb167155,
AUTHOR = "Wang, Z.B. and Guo, H.C. and Zhang, Z.F. and Liu, W.X. and Qin, Z. and Ren, K.",
TITLE = "Feature Importance-aware Transferable Adversarial Attacks",
BOOKTITLE = ICCV21,
YEAR = "2021",
PAGES = "7619-7628",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162990"}
@inproceedings{bb167156,
AUTHOR = "Zheng, H. and Zhang, Z. and Gu, J. and Lee, H. and Prakash, A.",
TITLE = "Efficient Adversarial Training With Transferable Adversarial Examples",
BOOKTITLE = CVPR20,
YEAR = "2020",
PAGES = "1178-1187",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162991"}
@inproceedings{bb167157,
AUTHOR = "Dong, Y.P. and Pang, T.Y. and Su, H. and Zhu, J.",
TITLE = "Evading Defenses to Transferable Adversarial Examples by
Translation-Invariant Attacks",
BOOKTITLE = CVPR19,
YEAR = "2019",
PAGES = "4307-4316",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162992"}
@inproceedings{bb167158,
AUTHOR = "Inkawhich, N. and Wen, W. and Li, H.(. and Chen, Y.R.",
TITLE = "Feature Space Perturbations Yield More Transferable Adversarial
Examples",
BOOKTITLE = CVPR19,
YEAR = "2019",
PAGES = "7059-7067",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162993"}
@inproceedings{bb167159,
AUTHOR = "Zhou, W. and Hou, X. and Chen, Y.J. and Tang, M.Y. and Huang, X.Q. and Gan, X. and Yang, Y.",
TITLE = "Transferable Adversarial Perturbations",
BOOKTITLE = ECCV18,
YEAR = "2018",
PAGES = "XIV: 471-486",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654tradv8.html#TT162994"}
@article{bb167160,
AUTHOR = "Chen, X. and Ma, Y.N. and Lu, S.W. and Yao, Y.",
TITLE = "Boundary augment: A data augment method to defend poison attack",
JOURNAL = IET-IPR,
VOLUME = "15",
YEAR = "2021",
NUMBER = "13",
PAGES = "3292-3303",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT162995"}
@article{bb167161,
AUTHOR = "Ma, K. and Xu, Q.Q. and Zeng, J.S. and Cao, X.C. and Huang, Q.M.",
TITLE = "Poisoning Attack Against Estimating From Pairwise Comparisons",
JOURNAL = PAMI,
VOLUME = "44",
YEAR = "2022",
NUMBER = "10",
MONTH = "October",
PAGES = "6393-6408",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT162996"}
@article{bb167162,
AUTHOR = "Zhang, J. and Chen, D.D. and Huang, Q.D. and Liao, J. and Zhang, W.M. and Feng, H.M. and Hua, G. and Yu, N.H.",
TITLE = "Poison Ink: Robust and Invisible Backdoor Attack",
JOURNAL = IP,
VOLUME = "31",
YEAR = "2022",
PAGES = "5691-5705",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT162997"}
@article{bb167163,
AUTHOR = "Gao, Y.H. and Li, Y.M. and Zhu, L.H. and Wu, D.X. and Jiang, Y. and Xia, S.T.",
TITLE = "Not All Samples Are Born Equal:
Towards Effective Clean-Label Backdoor Attacks",
JOURNAL = PR,
VOLUME = "139",
YEAR = "2023",
PAGES = "109512",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT162998"}
@article{bb167164,
AUTHOR = "Ma, Q.L. and Qin, J.P. and Yan, K. and Wang, L. and Sun, H.",
TITLE = "Stealthy Frequency-Domain Backdoor Attacks:
Fourier Decomposition and Fundamental Frequency Injection",
JOURNAL = SPLetters,
VOLUME = "30",
YEAR = "2023",
PAGES = "1677-1681",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT162999"}
@article{bb167165,
AUTHOR = "Zhang, Z. and Yuan, X. and Zhu, L. and Song, J.K. and Nie, L.Q.",
TITLE = "BadCM: Invisible Backdoor Attack Against Cross-Modal Learning",
JOURNAL = IP,
VOLUME = "33",
YEAR = "2024",
PAGES = "2558-2571",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163000"}
@article{bb167166,
AUTHOR = "Wang, K.Y. and Deng, H.X. and Xu, Y.J. and Liu, Z.L. and Fang, Y.",
TITLE = "Multi-target label backdoor attacks on graph neural networks",
JOURNAL = PR,
VOLUME = "152",
YEAR = "2024",
PAGES = "110449",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163001"}
@article{bb167167,
AUTHOR = "Niu, Z.X. and Sun, Y.Y. and Miao, Q.G. and Jin, R. and Hua, G.",
TITLE = "Towards Unified Robustness Against Both Backdoor and Adversarial
Attacks",
JOURNAL = PAMI,
VOLUME = "46",
YEAR = "2024",
NUMBER = "12",
MONTH = "December",
PAGES = "7589-7605",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163002"}
@article{bb167168,
AUTHOR = "Wang, B. and Yu, F. and Wei, F. and Li, Y. and Wang, W.",
TITLE = "Invisible Intruders: Label-Consistent Backdoor Attack Using
Re-Parameterized Noise Trigger",
JOURNAL = MultMed,
VOLUME = "26",
YEAR = "2024",
PAGES = "10766-10778",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163003"}
@article{bb167169,
AUTHOR = "Chen, W.M. and Xu, X.W. and Wang, X.D. and Zhou, H.S. and Li, Z. and Chen, Y.M.",
TITLE = "Invisible backdoor attack with attention and steganography",
JOURNAL = CVIU,
VOLUME = "249",
YEAR = "2024",
PAGES = "104208",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163004"}
@article{bb167170,
AUTHOR = "Hou, L.S. and Hua, Z.Y. and Li, Y.H. and Zheng, Y.F. and Zhang, L.Y.",
TITLE = "M-to-N Backdoor Paradigm: A Multi-Trigger and Multi-Target Attack to
Deep Learning Models",
JOURNAL = CirSysVideo,
VOLUME = "34",
YEAR = "2024",
NUMBER = "11",
MONTH = "November",
PAGES = "11299-11312",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163005"}
@article{bb167171,
AUTHOR = "Tang, W.X. and Li, J.H. and Rao, Y. and Zhou, Z. and Peng, F.",
TITLE = "A trigger-perceivable backdoor attack framework driven by image
steganography",
JOURNAL = PR,
VOLUME = "161",
YEAR = "2025",
PAGES = "111262",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163006"}
@article{bb167172,
AUTHOR = "Feng, Y. and Ma, B.T. and Liu, D.N. and Zhang, Y.N. and Cai, W.D. and Xia, Y.",
TITLE = "Contrastive Neuron Pruning for Backdoor Defense",
JOURNAL = IP,
VOLUME = "34",
YEAR = "2025",
PAGES = "1234-1245",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163007"}
@article{bb167173,
AUTHOR = "Sundar, A.P. and Li, F. and Zou, X. and Gao, T. and Hosler, R.",
TITLE = "Vaccination Against Backdoor Attacks on Federated Learning Systems",
JOURNAL = SMCS,
VOLUME = "55",
YEAR = "2025",
NUMBER = "7",
MONTH = "July",
PAGES = "4434-4443",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163008"}
@article{bb167174,
AUTHOR = "Hou, L.S. and Hua, Z.Y. and Luo, W. and Zhang, L.Y.",
TITLE = "FixGuard: Repairing Backdoored Models via Class-Wise Trigger Recovery
and Unlearning",
JOURNAL = SPLetters,
VOLUME = "32",
YEAR = "2025",
PAGES = "2544-2548",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163009"}
@article{bb167175,
AUTHOR = "Zhang, X.Y. and Jin, Y.L. and Tong, H.Y. and Lou, J. and Wu, K. and Chen, X.F.",
TITLE = "Purifier+: Plug-and-Play Backdoor Mitigation for Pre-Trained Models
via Activation Alignment",
JOURNAL = MultMed,
VOLUME = "27",
YEAR = "2025",
PAGES = "3910-3924",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163010"}
@article{bb167176,
AUTHOR = "Wu, B.Y. and Chen, H.R. and Zhang, M.D. and Zhu, Z.H. and Wei, S.K. and Yuan, D.N. and Zhu, M.L. and Wang, R.T. and Liu, L. and Shen, C.",
TITLE = "BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor
Learning",
JOURNAL = IJCV,
VOLUME = "133",
YEAR = "2025",
NUMBER = "8",
MONTH = "August",
PAGES = "5700-5787",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163011"}
@article{bb167177,
AUTHOR = "Wu, S.X. and He, Q. and Yu, J. and Sang, J.",
TITLE = "Backdoor for Debias: Mitigating Model Bias With Backdoor Attack-Based
Artificial Bias",
JOURNAL = CirSysVideo,
VOLUME = "35",
YEAR = "2025",
NUMBER = "8",
MONTH = "August",
PAGES = "8421-8432",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163012"}
@article{bb167178,
AUTHOR = "Wu, Z.X. and Wen, J. and Peng, W.L. and Zhou, Y. and Zhang, Z.W.",
TITLE = "IBSD: Iterable Black-Box Self-Defense Against Backdoor Attacks",
JOURNAL = SPLetters,
VOLUME = "32",
YEAR = "2025",
PAGES = "3979-3983",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163013"}
@article{bb167179,
AUTHOR = "Zhang, Y.L. and Pu, Y.J. and Li, J.Z. and Zhao, S.X. and Lang, B.",
TITLE = "TSBA: A two-stage poison-only backdoor attack on visual object
tracking",
JOURNAL = PR,
VOLUME = "171",
YEAR = "2026",
PAGES = "112222",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163014"}
@article{bb167180,
AUTHOR = "Li, S. and Zhang, J. and Qi, Y. and Chen, K.J. and Zhang, T.W. and Zhang, W.M. and Yu, N.H.",
TITLE = "Clean Image May Be Dangerous:
Data Poisoning Attacks Against Deep Hashing",
JOURNAL = MultMed,
VOLUME = "27",
YEAR = "2025",
PAGES = "8541-8554",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163015"}
@article{bb167181,
AUTHOR = "Hao, L.G. and Hao, K.R. and Wei, B. and Tang, X.S.",
TITLE = "Multi-target federated backdoor attack based on feature aggregation",
JOURNAL = PR,
VOLUME = "172",
YEAR = "2026",
PAGES = "112333",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163016"}
@article{bb167182,
AUTHOR = "Huang, L. and Zhang, L.Y. and Chang, C.C. and Wang, W. and Qin, C.",
TITLE = "Backdoor defense based on adversarial prediction proximity and
contrastive knowledge distillation",
JOURNAL = PR,
VOLUME = "172",
YEAR = "2026",
PAGES = "112336",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163017"}
@article{bb167183,
AUTHOR = "Zeng, D.Y. and Liu, Y.P. and Zhang, S.Z. and Zhang, S. and Fang, B.X. and Yang, Z.",
TITLE = "Perturbation distillation and backdoor feature induction for
universal defense in deep vision models",
JOURNAL = PR,
VOLUME = "172",
YEAR = "2026",
PAGES = "112485",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163018"}
@article{bb167184,
AUTHOR = "Li, B.L. and Hu, T. and Liu, X.L. and Xie, J.C. and Yi, P.",
TITLE = "Generalizable poisoning-resistant backdoor detection and removal
framework: From dataset perspective",
JOURNAL = PR,
VOLUME = "172",
YEAR = "2026",
PAGES = "112766",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163019"}
@article{bb167185,
AUTHOR = "Lu, R. and Yu, P. and Huang, Z.T. and Xia, Z.H. and Jiang, X.Y.",
TITLE = "BAM: Backdoor defense based on adversarial mitigation",
JOURNAL = PR,
VOLUME = "172",
YEAR = "2026",
PAGES = "112662",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163020"}
@article{bb167186,
AUTHOR = "Wang, R.T. and Chen, H.R. and Zhu, Z.H. and Liu, L. and Wu, B.Y.",
TITLE = "Versatile Backdoor Attack With Visible, Semantic, Sample-Specific and
Compatible Triggers",
JOURNAL = PAMI,
VOLUME = "48",
YEAR = "2026",
NUMBER = "3",
MONTH = "March",
PAGES = "3680-3697",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163021"}
@inproceedings{bb167187,
AUTHOR = "Li, Y.Z. and Li, Y.M. and Wu, B.Y. and Li, L.K. and He, R. and Lyu, S.W.",
TITLE = "Invisible Backdoor Attack with Sample-Specific Triggers",
BOOKTITLE = ICCV21,
YEAR = "2021",
PAGES = "16443-16452",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163022"}
@article{bb167188,
AUTHOR = "Wang, Z.Q. and Zhang, J. and Shan, S.G. and Chen, X.L.",
TITLE = "Dynamic Attention Analysis for Backdoor Detection in Text-to-Image
Diffusion Models",
JOURNAL = PAMI,
VOLUME = "48",
YEAR = "2026",
NUMBER = "3",
MONTH = "March",
PAGES = "3652-3665",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163023"}
@article{bb167189,
AUTHOR = "Li, Z.Q. and Zeng, Y. and Xia, P.F. and Liu, L. and Fu, Z.J. and Li, B.",
TITLE = "Large language models are good attackers: Efficient and stealthy
textual backdoor attacks",
JOURNAL = PR,
VOLUME = "174",
YEAR = "2026",
PAGES = "112967",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163024"}
@article{bb167190,
AUTHOR = "Li, Y. and Wu, X. and Guo, Z.L. and Xiao, L. and Jia, Y.H. and Zhao, S.",
TITLE = "Backdoor defense for large language models with weak-to-strong
knowledge distillation",
JOURNAL = PR,
VOLUME = "175",
YEAR = "2026",
PAGES = "113030",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163025"}
@article{bb167191,
AUTHOR = "Xue, D.Z. and Qian, S.S. and Xu, C.S.",
TITLE = "A Unified Framework for Backdoor Trigger Segmentation",
JOURNAL = IP,
VOLUME = "35",
YEAR = "2026",
PAGES = "2364-2379",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163026"}
@article{bb167192,
AUTHOR = "Zhang, Y.L. and Lang, B.",
TITLE = "Towards invisible backdoor attacks on multi-object tracking via
suppressed feature learning",
JOURNAL = PR,
VOLUME = "176",
YEAR = "2026",
PAGES = "113248",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163027"}
@article{bb167193,
AUTHOR = "Li, J. and Yuan, X.J. and Tian, J. and Lu, S.W. and Yu, D.X.",
TITLE = "UPGP: Backdoor defense via unlearning perturbation and
orthogonality-constraint gradient projection",
JOURNAL = PR,
VOLUME = "176",
YEAR = "2026",
PAGES = "113211",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163028"}
@article{bb167194,
AUTHOR = "Hao, F.R. and Gu, T.L. and Jiang, J.H. and Chang, L. and Zhang, F. and Bin, C.Z.",
TITLE = "Stealthy backdoor attack method targeting group fairness in
self-supervised learning",
JOURNAL = PR,
VOLUME = "179",
YEAR = "2026",
PAGES = "113499",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163029"}
@article{bb167195,
AUTHOR = "Sui, H. and Chen, B. and Zhang, J. and Zhu, C.C. and Wu, D. and Palaiahnakote, S.",
TITLE = "Explanation-guided backdoor defense for ID and OOD attacks in graph
neural networks",
JOURNAL = PR,
VOLUME = "179",
YEAR = "2026",
PAGES = "113693",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163030"}
@article{bb167196,
AUTHOR = "Li, Y.M. and Zhu, M.Y. and Xia, S.T. and Li, Z.F. and Qin, Z. and Tao, D.C.",
TITLE = "Rethinking the trigger of backdoor attacks: Towards physical backdoor
threats",
JOURNAL = PR,
VOLUME = "179",
YEAR = "2026",
PAGES = "113665",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163031"}
@article{bb167197,
AUTHOR = "Liu, Y. and Ru, X.C. and Li, X. and Li, W.",
TITLE = "SWBA: A Sparse and Stealthy Backdoor Attack via Discrete Wavelet
Transform for Image Classification",
JOURNAL = SPLetters,
VOLUME = "33",
YEAR = "2026",
PAGES = "2350-2354",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163032"}
@article{bb167198,
AUTHOR = "Wang, B. and Qian, S.S. and Xu, C.S.",
TITLE = "Transferable Backdoor Attack on Any CLIP Model With Any Target Class
by Pre-Trained Hack Network",
JOURNAL = MultMed,
VOLUME = "28",
YEAR = "2026",
PAGES = "4917-4927",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163033"}
@article{bb167199,
AUTHOR = "Zhou, C. and Meng, H. and Long, Z.G. and Zhang, M.X. and Zhou, Z.C.",
TITLE = "AdaPT: Adaptive position trigger for improving backdoor attacks in
transfer learning",
JOURNAL = PR,
VOLUME = "180",
YEAR = "2026",
PAGES = "114247",
BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163034"}
Last update:Sep 30, 2026 at 11:45:00