@inproceedings{bb155400,
        AUTHOR = "Khalsi, R. and Smati, I. and Sallami, M.M. and Ghorbel, F.",
        TITLE = "A Novel System for Deep Contour Classifiers Certification Under
Filtering Attacks",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "3561-3565",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151311"}

@inproceedings{bb155401,
        AUTHOR = "Zhang, Y.X. and Dong, B. and Heide, F.",
        TITLE = "All You Need Is RAW: Defending Against Adversarial Attacks with Camera
Image Pipelines",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "XIX:323-343",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151312"}

@inproceedings{bb155402,
        AUTHOR = "Lu, B. and Liu, J.Y. and Xiong, H.L.",
        TITLE = "Transformation-Based Adversarial Defense Via Sparse Representation",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "1726-1730",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151313"}

@inproceedings{bb155403,
        AUTHOR = "Subramanyam, A.V. and Raj, A.",
        TITLE = "Barycentric Defense",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "2276-2280",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151314"}

@inproceedings{bb155404,
        AUTHOR = "Do, K. and Harikumar, H. and Le, H. and Nguyen, D. and Tran, T. and Rana, S. and Nguyen, D. and Susilo, W. and Venkatesh, S.",
        TITLE = "Towards Effective and Robust Neural Trojan Defenses via Input Filtering",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "V:283-300",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151315"}

@inproceedings{bb155405,
        AUTHOR = "Sun, J.C. and Mehra, A. and Kailkhura, B. and Chen, P.Y. and Hendrycks, D. and Hamm, J. and Mao, Z.M.",
        TITLE = "A Spectral View of Randomized Smoothing Under Common Corruptions:
Benchmarking and Improving Certified Robustness",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "IV:654-671",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151316"}

@inproceedings{bb155406,
        AUTHOR = "Li, G.L. and Xu, G.W. and Qiu, H. and He, R. and Li, J. and Zhang, T.W.",
        TITLE = "Improving Adversarial Robustness of 3D Point Cloud Classification
Models",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "IV:672-689",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151317"}

@inproceedings{bb155407,
        AUTHOR = "Kowalski, C. and Famili, A. and Lao, Y.J.",
        TITLE = "Towards Model Quantization on the Resilience Against Membership
Inference Attacks",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "3646-3650",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151318"}

@inproceedings{bb155408,
        AUTHOR = "Nayak, G.K. and Rawal, R. and Lal, R. and Patil, H. and Chakraborty, A.",
        TITLE = "Holistic Approach to Measure Sample-level Adversarial Vulnerability
and its Utility in Building Trustworthy Systems",
        BOOKTITLE = HCIS22,
        YEAR = "2022",
        PAGES = "4331-4340",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151319"}

@inproceedings{bb155409,
        AUTHOR = "Chen, Y.W.",
        TITLE = "Rethinking Adversarial Examples in Wargames",
        BOOKTITLE = ArtOfRobust22,
        YEAR = "2022",
        PAGES = "100-106",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151320"}

@inproceedings{bb155410,
        AUTHOR = "Haque, M. and Budnik, C.J. and Yang, W.",
        TITLE = "CorrGAN: Input Transformation Technique Against Natural Corruptions",
        BOOKTITLE = ArtOfRobust22,
        YEAR = "2022",
        PAGES = "193-196",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151321"}

@inproceedings{bb155411,
        AUTHOR = "Ren, S.C. and Gao, Z.Q. and Hua, T.Y. and Xue, Z.H. and Tian, Y.L. and He, S.F. and Zhao, H.",
        TITLE = "Co-advise: Cross Inductive Bias Distillation",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "16752-16761",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151322"}

@inproceedings{bb155412,
        AUTHOR = "Pang, T.Y. and Zhang, H. and He, D. and Dong, Y.P. and Su, H. and Chen, W. and Zhu, J. and Liu, T. .Y.",
        TITLE = "Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15202-15212",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151323"}

@inproceedings{bb155413,
        AUTHOR = "Li, K.D. and Zhang, Z.M. and Zhong, C.C. and Wang, G.H.",
        TITLE = "Robust Structured Declarative Classifiers for 3D Point Clouds:
Defending Adversarial Attacks with Implicit Gradients",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15273-15283",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151324"}

@inproceedings{bb155414,
        AUTHOR = "Ren, Q.B. and Bao, Q.Q. and Wang, R.Z. and Yan, J.C.",
        TITLE = "Appearance and Structure Aware Robust Deep Visual Graph Matching:
Attack, Defense and Beyond",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15242-15251",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151325"}

@inproceedings{bb155415,
        AUTHOR = "Vellaichamy, S. and Hull, M. and Wang, Z.J.J. and Das, N. and Peng, S.Y. and Park, H. and Chau, D.H.P.",
        TITLE = "DetectorDetective:
Investigating the Effects of Adversarial Examples on Object Detectors",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "21452-21459",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151326"}

@inproceedings{bb155416,
        AUTHOR = "Lee, B.K. and Kim, J. and Ro, Y.M.",
        TITLE = "Masking Adversarial Damage: Finding Adversarial Saliency for Robust
and Sparse Network",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15105-15115",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151327"}

@inproceedings{bb155417,
        AUTHOR = "Ozdenizci, O. and Legenstein, R.",
        TITLE = "Improving Robustness Against Stealthy Weight Bit-Flip Attacks by
Output Code Matching",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "13378-13387",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151328"}

@inproceedings{bb155418,
        AUTHOR = "Dong, J.H. and Wang, Y. and Lai, J.H. and Xie, X.H.",
        TITLE = "Improving Adversarially Robust Few-shot Image Classification with
Generalizable Representations",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "9015-9024",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151329"}

@inproceedings{bb155419,
        AUTHOR = "Yamada, Y. and Otani, M.",
        TITLE = "Does Robustness on ImageNet Transfer to Downstream Tasks?",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "9205-9214",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151330"}

@inproceedings{bb155420,
        AUTHOR = "Mao, X.F. and Qi, G. and Chen, Y.F. and Li, X.D. and Duan, R.J. and Ye, S. and He, Y. and Xue, H.",
        TITLE = "Towards Robust Vision Transformer",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "12032-12041",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151331"}

@inproceedings{bb155421,
        AUTHOR = "Chen, T.L. and Zhang, Z.Y. and Zhang, Y.H. and Chang, S.Y. and Liu, S. and Wang, Z.Y.",
        TITLE = "Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "588-599",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151332"}

@inproceedings{bb155422,
        AUTHOR = "Sun, M.J. and Li, Z.C. and Xiao, C.W. and Qiu, H. and Kailkhura, B. and Liu, M.Y. and Li, B.",
        TITLE = "Can Shape Structure Features Improve Model Robustness under Diverse
Adversarial Settings?",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7506-7515",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151333"}

@inproceedings{bb155423,
        AUTHOR = "Huang, J.X. and Guan, D. and Xiao, A. and Lu, S.J.",
        TITLE = "RDA: Robust Domain Adaptation via Fourier Adversarial Attacking",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "8968-8979",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151334"}

@inproceedings{bb155424,
        AUTHOR = "Yin, M.J. and Li, S. and Cai, Z. and Song, C.Y. and Asif, M.S. and Roy Chowdhury, A.K. and Krishnamurthy, S.V.",
        TITLE = "Exploiting Multi-Object Relationships for Detecting Adversarial
Attacks in Complex Scenes",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7838-7847",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151335"}

@inproceedings{bb155425,
        AUTHOR = "Abusnaina, A. and Wu, Y.H. and Arora, S. and Wang, Y.Z. and Wang, F. and Yang, H. and Mohaisen, D.",
        TITLE = "Adversarial Example Detection Using Latent Neighborhood Graph",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7667-7676",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151336"}

@inproceedings{bb155426,
        AUTHOR = "Mao, C.Z. and Chiquier, M. and Wang, H. and Yang, J.F. and Vondrick, C.",
        TITLE = "Adversarial Attacks are Reversible with Natural Supervision",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "641-651",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151337"}

@inproceedings{bb155427,
        AUTHOR = "Zhao, X.J. and Zhang, W.C. and Xiao, X.K. and Lim, B.",
        TITLE = "Exploiting Explanations for Model Inversion Attacks",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "662-672",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151338"}

@inproceedings{bb155428,
        AUTHOR = "Wang, Q. and Kurz, D.",
        TITLE = "Reconstructing Training Data from Diverse ML Models by Ensemble
Inversion",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "3870-3878",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151339"}

@inproceedings{bb155429,
        AUTHOR = "Tursynbek, N. and Petiushko, A. and Oseledets, I.",
        TITLE = "Geometry-Inspired Top-k Adversarial Perturbations",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "4059-4068",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151340"}

@inproceedings{bb155430,
        AUTHOR = "Nayak, G.K. and Rawal, R. and Chakraborty, A.",
        TITLE = "DAD: Data-free Adversarial Defense at Test Time",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "3788-3797",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151341"}

@inproceedings{bb155431,
        AUTHOR = "Scheliga, D. and Mader, P. and Seeland, M.",
        TITLE = "PRECODE - A Generic Model Extension to Prevent Deep Gradient Leakage",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "3605-3614",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151342"}

@inproceedings{bb155432,
        AUTHOR = "Wang, S.J. and Wu, T. and Chakrabarti, A. and Vorobeychik, Y.",
        TITLE = "Adversarial Robustness of Deep Sensor Fusion Models",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "1371-1380",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151343"}

@inproceedings{bb155433,
        AUTHOR = "Drenkow, N. and Fendley, N. and Burlina, P.",
        TITLE = "Attack Agnostic Detection of Adversarial Examples via Random Subspace
Analysis",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "2815-2825",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151344"}

@inproceedings{bb155434,
        AUTHOR = "Cheng, H. and Xu, K.D. and Li, Z.G. and Zhao, P. and Wang, C. and Lin, X. and Kailkhura, B. and Goldhahn, R.",
        TITLE = "More or Less (MoL): Defending against Multiple Perturbation Attacks
on Deep Neural Networks through Model Ensemble and Compression",
        BOOKTITLE = Hazards22,
        YEAR = "2022",
        PAGES = "645-655",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151345"}

@inproceedings{bb155435,
        AUTHOR = "Lang, I. and Kotlicki, U. and Avidan, S.",
        TITLE = "Geometric Adversarial Attacks and Defenses on 3D Point Clouds",
        BOOKTITLE = "3DV21",
        YEAR = "2021",
        PAGES = "1196-1205",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151346"}

@inproceedings{bb155436,
        AUTHOR = "Hasnat, A. and Shvai, N. and Nakib, A.",
        TITLE = "CNN Classifier's Robustness Enhancement when Preserving Privacy",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3887-3891",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151347"}

@inproceedings{bb155437,
        AUTHOR = "Liu, L.Q. and Duan, Z.Y. and Xu, G.Z. and Xu, Y.",
        TITLE = "Self-Supervised Disentangled Embedding for Robust Image
Classification",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "1494-1498",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151348"}

@inproceedings{bb155438,
        AUTHOR = "Maho, T. and Bonnet, B. and Furony, T. and Le Merrer, E.",
        TITLE = "RoBIC: A Benchmark Suite for Assessing Classifiers Robustness",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3612-3616",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151349"}

@inproceedings{bb155439,
        AUTHOR = "Wang, Y.P. and Xie, L. and Liu, X.M. and Yin, J.L. and Zheng, T.J.",
        TITLE = "Model-Agnostic Adversarial Example Detection Through Logit
Distribution Learning",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3617-3621",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151350"}

@inproceedings{bb155440,
        AUTHOR = "Co, K.T. and Munoz Gonzalez, L. and Kanthan, L. and Glocker, B. and Lupu, E.C.",
        TITLE = "Universal Adversarial Robustness of Texture and Shape-Biased Models",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "799-803",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151351"}

@inproceedings{bb155441,
        AUTHOR = "Agarwal, A. and Vatsa, M. and Singh, R. and Ratha, N.",
        TITLE = "Intelligent and Adaptive Mixup Technique for Adversarial Robustness",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "824-828",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151352"}

@inproceedings{bb155442,
        AUTHOR = "Chai, W.H. and Lu, Y.T. and Velipasalar, S.",
        TITLE = "Weighted Average Precision: Adversarial Example Detection for Visual
Perception of Autonomous Vehicles",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "804-808",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151353"}

@inproceedings{bb155443,
        AUTHOR = "Kung, B.H. and Chen, P.C. and Liu, Y.C. and Chen, J.C.",
        TITLE = "Squeeze and Reconstruct: Improved Practical Adversarial Defense Using
Paired Image Compression and Reconstruction",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "849-853",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151354"}

@inproceedings{bb155444,
        AUTHOR = "Li, C.Y. and Sanchez Matilla, R. and Shamsabadi, A.S. and Mazzon, R. and Cavallaro, A.",
        TITLE = "On the Reversibility of Adversarial Attacks",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3073-3077",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151355"}

@inproceedings{bb155445,
        AUTHOR = "Bakiskan, C. and Cekic, M. and Sezer, A.D. and Madhow, U.",
        TITLE = "A Neuro-Inspired Autoencoding Defense Against Adversarial Attacks",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3922-3926",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151356"}

@inproceedings{bb155446,
        AUTHOR = "Perez, J.C. and Alfarra, M. and Jeanneret, G. and Rueda, L. and Thabet, A. and Ghanem, B. and Arbelaez, P.",
        TITLE = "Enhancing Adversarial Robustness via Test-Time Transformation
Ensembling",
        BOOKTITLE = AROW21,
        YEAR = "2021",
        PAGES = "81-91",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151357"}

@inproceedings{bb155447,
        AUTHOR = "De, K. and Pedersen, M.",
        TITLE = "Impact of Colour on Robustness of Deep Neural Networks",
        BOOKTITLE = AROW21,
        YEAR = "2021",
        PAGES = "21-30",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151358"}

@inproceedings{bb155448,
        AUTHOR = "Truong, J.B. and Maini, P. and Walls, R.J. and Papernot, N.",
        TITLE = "Data-Free Model Extraction",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "4769-4778",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151359"}

@inproceedings{bb155449,
        AUTHOR = "Deng, Z.J. and Yang, X. and Xu, S.Z. and Su, H. and Zhu, J.",
        TITLE = "LiBRe: A Practical Bayesian Approach to Adversarial Detection",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "972-982",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151360"}

@inproceedings{bb155450,
        AUTHOR = "Yang, K. and Lin, W.Y. and Barman, M. and Condessa, F. and Kolter, Z.",
        TITLE = "Defending Multimodal Fusion Models against Single-Source Adversaries",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3339-3348",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151361"}

@inproceedings{bb155451,
        AUTHOR = "Wu, T. and Liu, Z.W. and Huang, Q.Q. and Wang, Y. and Lin, D.",
        TITLE = "Adversarial Robustness under Long-Tailed Distribution",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "8655-8664",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151362"}

@inproceedings{bb155452,
        AUTHOR = "Ong, D.S. and Chan, C.S. and Ng, K.W. and Fan, L.X. and Yang, Q.",
        TITLE = "Protecting Intellectual Property of Generative Adversarial Networks
from Ambiguity Attacks",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3629-3638",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151363"}

@inproceedings{bb155453,
        AUTHOR = "Addepalli, S. and Jain, S. and Sriramanan, G. and Babu, R.V.",
        TITLE = "Boosting Adversarial Robustness using Feature Level Stochastic
Smoothing",
        BOOKTITLE = SAIAD21,
        YEAR = "2021",
        PAGES = "93-102",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151364"}

@inproceedings{bb155454,
        AUTHOR = "Pestana, C. and Liu, W. and Glance, D. and Mian, A.",
        TITLE = "Defense-friendly Images in Adversarial Attacks:
Dataset and Metrics for Perturbation Difficulty",
        BOOKTITLE = WACV21,
        YEAR = "2021",
        PAGES = "556-565",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151365"}

@inproceedings{bb155455,
        AUTHOR = "Ali, A. and Migliorati, A. and Bianchi, T. and Magli, E.",
        TITLE = "Beyond Cross-Entropy: Learning Highly Separable Feature Distributions
for Robust and Accurate Classification",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "9711-9718",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151366"}

@inproceedings{bb155456,
        AUTHOR = "Kyatham, V. and Mishra, D. and Prathosh, A.P.",
        TITLE = "Variational Inference with Latent Space Quantization for Adversarial
Resilience",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "9593-9600",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151367"}

@inproceedings{bb155457,
        AUTHOR = "Li, H. and Fan, Y.F. and Ganz, F. and Yezzi, A.J. and Barnaghi, P.",
        TITLE = "Verifying the Causes of Adversarial Examples",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "6750-6757",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151368"}

@inproceedings{bb155458,
        AUTHOR = "Hou, Y.F. and Zou, L.X. and Liu, W.D.",
        TITLE = "Task-based Focal Loss for Adversarially Robust Meta-Learning",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "2824-2829",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151369"}

@inproceedings{bb155459,
        AUTHOR = "Huang, Y.T. and Liao, W.H. and Huang, C.W.",
        TITLE = "Defense Mechanism Against Adversarial Attacks Using Density-based
Representation of Images",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "3499-3504",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151370"}

@inproceedings{bb155460,
        AUTHOR = "Chhabra, S. and Agarwal, A. and Singh, R. and Vatsa, M.",
        TITLE = "Attack Agnostic Adversarial Defense via Visual Imperceptible Bound",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "5302-5309",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151371"}

@inproceedings{bb155461,
        AUTHOR = "Watson, M. and Moubayed, N.A.",
        TITLE = "Attack-agnostic Adversarial Detection on Medical Data Using
Explainable Machine Learning",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "8180-8187",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151372"}

@inproceedings{bb155462,
        AUTHOR = "Alamri, F. and Kalkan, S. and Pugeault, N.",
        TITLE = "Transformer-Encoder Detector Module: Using Context to Improve
Robustness to Adversarial Attacks on Object Detection",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "9577-9584",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151373"}

@inproceedings{bb155463,
        AUTHOR = "Schwartz, D. and Alparslan, Y. and Kim, E.",
        TITLE = "Regularization and Sparsity for Adversarial Robustness and Stable
Attribution",
        BOOKTITLE = ISVC20,
        YEAR = "2020",
        PAGES = "I:3-14",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151374"}

@inproceedings{bb155464,
        AUTHOR = "Carrara, F. and Caldelli, R. and Falchi, F. and Amato, G.",
        TITLE = "Defending Neural ODE Image Classifiers from Adversarial Attacks with
Tolerance Randomization",
        BOOKTITLE = MMForWild20,
        YEAR = "2020",
        PAGES = "425-438",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151375"}

@inproceedings{bb155465,
        AUTHOR = "Rusak, E. and Schott, L. and Zimmermann, R.S. and Bitterwolf, J. and Bringmann, O. and Bethge, M. and Brendel, W.",
        TITLE = "A Simple Way to Make Neural Networks Robust Against Diverse Image
Corruptions",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "III:53-69",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151376"}

@inproceedings{bb155466,
        AUTHOR = "Li, Y.W. and Bai, S. and Xie, C.H. and Liao, Z.Y. and Shen, X.H. and Yuille, A.L.",
        TITLE = "Regional Homogeneity: Towards Learning Transferable Universal
Adversarial Perturbations Against Defenses",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XI:795-813",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151377"}

@inproceedings{bb155467,
        AUTHOR = "Bui, A. and Le, T. and Zhao, H. and Montague, P. and deVel, O. and Abraham, T. and Phung, D.",
        TITLE = "Improving Adversarial Robustness by Enforcing Local and Global
Compactness",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXVII:209-223",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151378"}

@inproceedings{bb155468,
        AUTHOR = "Xu, J. and Li, Y. and Jiang, Y. and Xia, S.T.",
        TITLE = "Adversarial Defense Via Local Flatness Regularization",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "2196-2200",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151379"}

@inproceedings{bb155469,
        AUTHOR = "Maung, M. and Pyone, A. and Kiya, H.",
        TITLE = "Encryption Inspired Adversarial Defense For Visual Classification",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "1681-1685",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151380"}

@inproceedings{bb155470,
        AUTHOR = "Shah, S.A.A. and Bougre, M. and Akhtar, N. and Bennamoun, M. and Zhang, L.",
        TITLE = "Efficient Detection of Pixel-Level Adversarial Attacks",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "718-722",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151381"}

@inproceedings{bb155471,
        AUTHOR = "Mao, C.Z. and Cha, A. and Gupta, A. and Wang, H. and Yang, J.F. and Vondrick, C.",
        TITLE = "Generative Interventions for Causal Learning",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3946-3955",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151382"}

@inproceedings{bb155472,
        AUTHOR = "Mao, C.Z. and Gupta, A. and Nitin, V. and Ray, B. and Song, S. and Yang, J.F. and Vondrick, C.",
        TITLE = "Multitask Learning Strengthens Adversarial Robustness",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "II:158-174",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151383"}

@inproceedings{bb155473,
        AUTHOR = "Li, S.S. and Zhu, S.T. and Paul, S. and Roy Chowdhury, A.K. and Song, C.Y. and Krishnamurthy, S. and Swami, A. and Chan, K.S.",
        TITLE = "Connecting the Dots: Detecting Adversarial Perturbations Using Context
Inconsistency",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXIII:396-413",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151384"}

@inproceedings{bb155474,
        AUTHOR = "Li, Y. and Cheng, S.Y. and Su, H. and Zhu, J.",
        TITLE = "Defense Against Adversarial Attacks via Controlling Gradient Leaking on
Embedded Manifolds",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXVIII:753-769",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151385"}

@inproceedings{bb155475,
        AUTHOR = "Rounds, J. and Kingsland, A. and Henry, M.J. and Duskin, K.R.",
        TITLE = "Probing for Artifacts: Detecting Imagenet Model Evasions",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3432-3441",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151386"}

@inproceedings{bb155476,
        AUTHOR = "Kariyappa, S. and Qureshi, M.K.",
        TITLE = "Defending Against Model Stealing Attacks With Adaptive Misinformation",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "767-775",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151387"}

@inproceedings{bb155477,
        AUTHOR = "Mohapatra, J. and Weng, T. and Chen, P. and Liu, S. and Daniel, L.",
        TITLE = "Towards Verifying Robustness of Neural Networks Against A Family of
Semantic Perturbations",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "241-249",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151388"}

@inproceedings{bb155478,
        AUTHOR = "Wu, M. and Kwiatkowska, M.",
        TITLE = "Robustness Guarantees for Deep Neural Networks on Videos",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "308-317",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151389"}

@inproceedings{bb155479,
        AUTHOR = "Chan, A. and Tay, Y. and Ong, Y.",
        TITLE = "What It Thinks Is Important Is Important: Robustness Transfers
Through Input Gradients",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "329-338",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151390"}

@inproceedings{bb155480,
        AUTHOR = "Jefferson, B. and Marrero, C.O.",
        TITLE = "Robust Assessment of Real-World Adversarial Examples",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3442-3449",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151391"}

@inproceedings{bb155481,
        AUTHOR = "Goel, A. and Agarwal, A. and Vatsa, M. and Singh, R. and Ratha, N.K.",
        TITLE = "DNDNet: Reconfiguring CNN for Adversarial Robustness",
        BOOKTITLE = TCV20,
        YEAR = "2020",
        PAGES = "103-110",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151392"}

@inproceedings{bb155482,
        AUTHOR = "Cohen, G. and Sapiro, G. and Giryes, R.",
        TITLE = "Detecting Adversarial Samples Using Influence Functions and Nearest
Neighbors",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14441-14450",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151393"}

@inproceedings{bb155483,
        AUTHOR = "Rahnama, A. and Nguyen, A.T. and Raff, E.",
        TITLE = "Robust Design of Deep Neural Networks Against Adversarial Attacks
Based on Lyapunov Theory",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "8175-8184",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151394"}

@inproceedings{bb155484,
        AUTHOR = "Zhao, Y. and Wu, Y. and Chen, C. and Lim, A.",
        TITLE = "On Isometry Robustness of Deep 3D Point Cloud Models Under
Adversarial Attacks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "1198-1207",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151395"}

@inproceedings{bb155485,
        AUTHOR = "Gowal, S. and Qin, C. and Huang, P. and Cemgil, T. and Dvijotham, K. and Mann, T. and Kohli, P.",
        TITLE = "Achieving Robustness in the Wild via Adversarial Mixing With
Disentangled Representations",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "1208-1217",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151396"}

@inproceedings{bb155486,
        AUTHOR = "Jeddi, A. and Shafiee, M.J. and Karg, M. and Scharfenberger, C. and Wong, A.",
        TITLE = "Learn2Perturb: An End-to-End Feature Perturbation Learning to Improve
Adversarial Robustness",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "1238-1247",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151397"}

@inproceedings{bb155487,
        AUTHOR = "Addepalli, S. and Vivek, B.S. and Baburaj, A. and Sriramanan, G. and Babu, R.V.",
        TITLE = "Towards Achieving Adversarial Robustness by Enforcing Feature
Consistency Across Bit Planes",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "1017-1026",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151398"}

@inproceedings{bb155488,
        AUTHOR = "Yuan, J. and He, Z.",
        TITLE = "Ensemble Generative Cleaning With Feedback Loops for Defending
Adversarial Attacks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "578-587",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151399"}

@inproceedings{bb155489,
        AUTHOR = "Guo, M. and Yang, Y. and Xu, R. and Liu, Z. and Lin, D.",
        TITLE = "When NAS Meets Robustness: In Search of Robust Architectures Against
Adversarial Attacks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "628-637",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151400"}

@inproceedings{bb155490,
        AUTHOR = "Lee, S. and Lee, H. and Yoon, S.",
        TITLE = "Adversarial Vertex Mixup: Toward Better Adversarially Robust
Generalization",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "269-278",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151401"}

@inproceedings{bb155491,
        AUTHOR = "Dong, Y. and Fu, Q. and Yang, X. and Pang, T. and Su, H. and Xiao, Z. and Zhu, J.",
        TITLE = "Benchmarking Adversarial Robustness on Image Classification",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "318-328",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151402"}

@inproceedings{bb155492,
        AUTHOR = "Xiao, C. and Zheng, C.",
        TITLE = "One Man's Trash Is Another Man's Treasure:
Resisting Adversarial Examples by Adversarial Examples",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "409-418",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151403"}

@inproceedings{bb155493,
        AUTHOR = "Naseer, M. and Khan, S. and Hayat, M. and Khan, F.S. and Porikli, F.M.",
        TITLE = "A Self-supervised Approach for Adversarial Robustness",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "259-268",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151404"}

@inproceedings{bb155494,
        AUTHOR = "Zhao, Y. and Tian, Y. and Fowlkes, C. and Shen, W. and Yuille, A.L.",
        TITLE = "Resisting Large Data Variations via Introspective Transformation
Network",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "3069-3078",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151405"}

@inproceedings{bb155495,
        AUTHOR = "Kim, D.H. and Bargal, S.A. and Zhang, J.M. and Sclaroff, S.",
        TITLE = "Multi-way Encoding for Robustness",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "1341-1349",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151406"}

@inproceedings{bb155496,
        AUTHOR = "Folz, J. and Palacio, S. and Hees, J. and Dengel, A.",
        TITLE = "Adversarial Defense based on Structure-to-Signal Autoencoders",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "3568-3577",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151407"}

@inproceedings{bb155497,
        AUTHOR = "Zheng, S. and Zhu, Z. and Zhang, X. and Liu, Z. and Cheng, J. and Zhao, Y.",
        TITLE = "Distribution-Induced Bidirectional Generative Adversarial Network for
Graph Representation Learning",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "7222-7231",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151408"}

@inproceedings{bb155498,
        AUTHOR = "Benz, P. and Zhang, C.N. and Imtiaz, T. and Kweon, I.S.",
        TITLE = "Double Targeted Universal Adversarial Perturbations",
        BOOKTITLE = ACCV20,
        YEAR = "2020",
        PAGES = "IV:284-300",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151409"}

@inproceedings{bb155499,
        AUTHOR = "Zhang, C.N. and Benz, P. and Imtiaz, T. and Kweon, I.S.",
        TITLE = "Understanding Adversarial Examples From the Mutual Influence of
Images and Perturbations",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14509-14518",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT151410"}