@inproceedings{bb162600,
        AUTHOR = "Truong, J.B. and Maini, P. and Walls, R.J. and Papernot, N.",
        TITLE = "Data-Free Model Extraction",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "4769-4778",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158453"}

@inproceedings{bb162601,
        AUTHOR = "Deng, Z.J. and Yang, X. and Xu, S.Z. and Su, H. and Zhu, J.",
        TITLE = "LiBRe: A Practical Bayesian Approach to Adversarial Detection",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "972-982",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158454"}

@inproceedings{bb162602,
        AUTHOR = "Yang, K. and Lin, W.Y. and Barman, M. and Condessa, F. and Kolter, Z.",
        TITLE = "Defending Multimodal Fusion Models against Single-Source Adversaries",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3339-3348",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158455"}

@inproceedings{bb162603,
        AUTHOR = "Ong, D.S. and Chan, C.S. and Ng, K.W. and Fan, L.X. and Yang, Q.",
        TITLE = "Protecting Intellectual Property of Generative Adversarial Networks
from Ambiguity Attacks",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3629-3638",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158456"}

@inproceedings{bb162604,
        AUTHOR = "Pestana, C. and Liu, W. and Glance, D. and Mian, A.",
        TITLE = "Defense-friendly Images in Adversarial Attacks:
Dataset and Metrics for Perturbation Difficulty",
        BOOKTITLE = WACV21,
        YEAR = "2021",
        PAGES = "556-565",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158457"}

@inproceedings{bb162605,
        AUTHOR = "Kyatham, V. and Mishra, D. and Prathosh, A.P.",
        TITLE = "Variational Inference with Latent Space Quantization for Adversarial
Resilience",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "9593-9600",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158458"}

@inproceedings{bb162606,
        AUTHOR = "Li, H.L. and Fan, Y.F. and Ganz, F. and Yezzi, A.J. and Barnaghi, P.",
        TITLE = "Verifying the Causes of Adversarial Examples",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "6750-6757",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158459"}

@inproceedings{bb162607,
        AUTHOR = "Huang, Y.T. and Liao, W.H. and Huang, C.W.",
        TITLE = "Defense Mechanism Against Adversarial Attacks Using Density-based
Representation of Images",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "3499-3504",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158460"}

@inproceedings{bb162608,
        AUTHOR = "Chhabra, S. and Agarwal, A. and Singh, R. and Vatsa, M.",
        TITLE = "Attack Agnostic Adversarial Defense via Visual Imperceptible Bound",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "5302-5309",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158461"}

@inproceedings{bb162609,
        AUTHOR = "Watson, M. and Moubayed, N.A.",
        TITLE = "Attack-agnostic Adversarial Detection on Medical Data Using
Explainable Machine Learning",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "8180-8187",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158462"}

@inproceedings{bb162610,
        AUTHOR = "Carrara, F. and Caldelli, R. and Falchi, F. and Amato, G.",
        TITLE = "Defending Neural ODE Image Classifiers from Adversarial Attacks with
Tolerance Randomization",
        BOOKTITLE = MMForWild20,
        YEAR = "2020",
        PAGES = "425-438",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158463"}

@inproceedings{bb162611,
        AUTHOR = "Li, Y.W. and Bai, S. and Xie, C.H. and Liao, Z.Y. and Shen, X.H. and Yuille, A.L.",
        TITLE = "Regional Homogeneity: Towards Learning Transferable Universal
Adversarial Perturbations Against Defenses",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XI:795-813",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158464"}

@inproceedings{bb162612,
        AUTHOR = "Xu, J. and Li, Y. and Jiang, Y. and Xia, S.T.",
        TITLE = "Adversarial Defense Via Local Flatness Regularization",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "2196-2200",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158465"}

@inproceedings{bb162613,
        AUTHOR = "Maung, M. and Pyone, A. and Kiya, H.",
        TITLE = "Encryption Inspired Adversarial Defense For Visual Classification",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "1681-1685",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158466"}

@inproceedings{bb162614,
        AUTHOR = "Shah, S.A.A. and Bougre, M. and Akhtar, N. and Bennamoun, M. and Zhang, L.",
        TITLE = "Efficient Detection of Pixel-Level Adversarial Attacks",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "718-722",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158467"}

@inproceedings{bb162615,
        AUTHOR = "Mao, C.Z. and Cha, A. and Gupta, A. and Wang, H. and Yang, J.F. and Vondrick, C.",
        TITLE = "Generative Interventions for Causal Learning",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3946-3955",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158468"}

@inproceedings{bb162616,
        AUTHOR = "Li, S.S. and Zhu, S.T. and Paul, S. and Roy Chowdhury, A.K. and Song, C.Y. and Krishnamurthy, S. and Swami, A. and Chan, K.S.",
        TITLE = "Connecting the Dots: Detecting Adversarial Perturbations Using Context
Inconsistency",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXIII:396-413",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158469"}

@inproceedings{bb162617,
        AUTHOR = "Li, Y. and Cheng, S.Y. and Su, H. and Zhu, J.",
        TITLE = "Defense Against Adversarial Attacks via Controlling Gradient Leaking on
Embedded Manifolds",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXVIII:753-769",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158470"}

@inproceedings{bb162618,
        AUTHOR = "Rounds, J. and Kingsland, A. and Henry, M.J. and Duskin, K.R.",
        TITLE = "Probing for Artifacts: Detecting Imagenet Model Evasions",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3432-3441",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158471"}

@inproceedings{bb162619,
        AUTHOR = "Kariyappa, S. and Qureshi, M.K.",
        TITLE = "Defending Against Model Stealing Attacks With Adaptive Misinformation",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "767-775",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158472"}

@inproceedings{bb162620,
        AUTHOR = "Cohen, G. and Sapiro, G. and Giryes, R.",
        TITLE = "Detecting Adversarial Samples Using Influence Functions and Nearest
Neighbors",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14441-14450",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158473"}

@inproceedings{bb162621,
        AUTHOR = "Yuan, J. and He, Z.",
        TITLE = "Ensemble Generative Cleaning With Feedback Loops for Defending
Adversarial Attacks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "578-587",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158474"}

@inproceedings{bb162622,
        AUTHOR = "Xiao, C. and Zheng, C.",
        TITLE = "One Man's Trash Is Another Man's Treasure:
Resisting Adversarial Examples by Adversarial Examples",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "409-418",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158475"}

@inproceedings{bb162623,
        AUTHOR = "Zhao, Y. and Tian, Y. and Fowlkes, C. and Shen, W. and Yuille, A.L.",
        TITLE = "Resisting Large Data Variations via Introspective Transformation
Network",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "3069-3078",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158476"}

@inproceedings{bb162624,
        AUTHOR = "Folz, J. and Palacio, S. and Hees, J. and Dengel, A.",
        TITLE = "Adversarial Defense based on Structure-to-Signal Autoencoders",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "3568-3577",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158477"}

@inproceedings{bb162625,
        AUTHOR = "Zheng, S. and Zhu, Z. and Zhang, X. and Liu, Z. and Cheng, J. and Zhao, Y.",
        TITLE = "Distribution-Induced Bidirectional Generative Adversarial Network for
Graph Representation Learning",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "7222-7231",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158478"}

@inproceedings{bb162626,
        AUTHOR = "Benz, P. and Zhang, C.N. and Imtiaz, T. and Kweon, I.S.",
        TITLE = "Double Targeted Universal Adversarial Perturbations",
        BOOKTITLE = ACCV20,
        YEAR = "2020",
        PAGES = "IV:284-300",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158479"}

@inproceedings{bb162627,
        AUTHOR = "Zhang, C.N. and Benz, P. and Imtiaz, T. and Kweon, I.S.",
        TITLE = "Understanding Adversarial Examples From the Mutual Influence of
Images and Perturbations",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14509-14518",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158480"}

@inproceedings{bb162628,
        AUTHOR = "Xie, C. and Tan, M. and Gong, B. and Wang, J. and Yuille, A.L. and Le, Q.V.",
        TITLE = "Adversarial Examples Improve Image Recognition",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "816-825",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158481"}

@inproceedings{bb162629,
        AUTHOR = "Dabouei, A. and Soleymani, S. and Taherkhani, F. and Dawson, J. and Nasrabadi, N.M.",
        TITLE = "SmoothFool: An Efficient Framework for Computing Smooth Adversarial
Perturbations",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "2654-2663",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158482"}

@inproceedings{bb162630,
        AUTHOR = "Bai, Y. and Feng, Y. and Wang, Y. and Dai, T. and Xia, S. and Jiang, Y.",
        TITLE = "Hilbert-Based Generative Defense for Adversarial Examples",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "4783-4792",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158483"}

@inproceedings{bb162631,
        AUTHOR = "Jang, Y. and Zhao, T. and Hong, S. and Lee, H.",
        TITLE = "Adversarial Defense via Learning to Generate Diverse Attacks",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "2740-2749",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158484"}

@inproceedings{bb162632,
        AUTHOR = "Mustafa, A. and Khan, S. and Hayat, M. and Goecke, R. and Shen, J. and Shao, L.",
        TITLE = "Adversarial Defense by Restricting the Hidden Space of Deep Neural
Networks",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "3384-3393",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158485"}

@inproceedings{bb162633,
        AUTHOR = "Taran, O. and Rezaeifar, S. and Holotyak, T. and Voloshynovskiy, S.",
        TITLE = "Defending Against Adversarial Attacks by Randomized Diversification",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "11218-11225",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158486"}

@inproceedings{bb162634,
        AUTHOR = "Sun, B. and Tsai, N.H. and Liu, F.C. and Yu, R. and Su, H.",
        TITLE = "Adversarial Defense by Stratified Convolutional Sparse Coding",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "11439-11448",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158487"}

@inproceedings{bb162635,
        AUTHOR = "Ho, C.H. and Leung, B. and Sandstrom, E. and Chang, Y. and Vasconcelos, N.M.",
        TITLE = "Catastrophic Child's Play:
Easy to Perform, Hard to Defend Adversarial Attacks",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "9221-9229",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158488"}

@inproceedings{bb162636,
        AUTHOR = "Dubey, A. and van der Maaten, L. and Yalniz, Z. and Li, Y.X. and Mahajan, D.",
        TITLE = "Defense Against Adversarial Images Using Web-Scale Nearest-Neighbor
Search",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "8759-8768",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158489"}

@inproceedings{bb162637,
        AUTHOR = "Dong, Y.P. and Pang, T.Y. and Su, H. and Zhu, J.",
        TITLE = "Evading Defenses to Transferable Adversarial Examples by
Translation-Invariant Attacks",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4307-4316",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158490"}

@inproceedings{bb162638,
        AUTHOR = "Rony, J. and Hafemann, L.G. and Oliveira, L.S. and Ben Ayed, I. and Sabourin, R. and Granger, E.",
        TITLE = "Decoupling Direction and Norm for Efficient Gradient-Based L2
Adversarial Attacks and Defenses",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4317-4325",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158491"}

@inproceedings{bb162639,
        AUTHOR = "Qiu, Y.X. and Leng, J.W. and Guo, C. and Chen, Q. and Li, C. and Guo, M. and Zhu, Y.H.",
        TITLE = "Adversarial Defense Through Network Profiling Based Path Extraction",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4772-4781",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158492"}

@inproceedings{bb162640,
        AUTHOR = "Jia, X.J. and Wei, X.X. and Cao, X.C. and Foroosh, H.",
        TITLE = "ComDefend: An Efficient Image Compression Model to Defend Adversarial
Examples",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "6077-6085",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158493"}

@inproceedings{bb162641,
        AUTHOR = "Ji, J. and Zhong, B. and Ma, K.",
        TITLE = "Multi-Scale Defense of Adversarial Images",
        BOOKTITLE = ICIP19,
        YEAR = "2019",
        PAGES = "4070-4074",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158494"}

@inproceedings{bb162642,
        AUTHOR = "Saha, S. and Kumar, A. and Sahay, P. and Jose, G. and Kruthiventi, S. and Muralidhara, H.",
        TITLE = "Attack Agnostic Statistical Method for Adversarial Detection",
        BOOKTITLE = SDL-CV19,
        YEAR = "2019",
        PAGES = "798-802",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158495"}

@inproceedings{bb162643,
        AUTHOR = "Taran, O. and Rezaeifar, S. and Voloshynovskiy, S.",
        TITLE = "Bridging Machine Learning and Cryptography in Defence Against
Adversarial Attacks",
        BOOKTITLE = Objectionable18,
        YEAR = "2018",
        PAGES = "II:267-279",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158496"}

@inproceedings{bb162644,
        AUTHOR = "Naseer, M. and Khan, S. and Porikli, F.M.",
        TITLE = "Local Gradients Smoothing: Defense Against Localized Adversarial
Attacks",
        BOOKTITLE = WACV19,
        YEAR = "2019",
        PAGES = "1300-1307",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158497"}

@inproceedings{bb162645,
        AUTHOR = "Akhtar, N. and Liu, J. and Mian, A.",
        TITLE = "Defense Against Universal Adversarial Perturbations",
        BOOKTITLE = CVPR18,
        YEAR = "2018",
        PAGES = "3389-3398",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158498"}

@inproceedings{bb162646,
        AUTHOR = "Moosavi Dezfooli, S.M. and Fawzi, A. and Fawzi, O. and Frossard, P.",
        TITLE = "Universal Adversarial Perturbations",
        BOOKTITLE = CVPR17,
        YEAR = "2017",
        PAGES = "86-94",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158499"}

@article{bb162647,
        AUTHOR = "Amini, S. and Ghaemmaghami, S.",
        TITLE = "Towards Improving Robustness of Deep Neural Networks to Adversarial
Perturbations",
        JOURNAL = MultMed,
        VOLUME = "22",
        YEAR = "2020",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "1889-1903",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158500"}

@article{bb162648,
        AUTHOR = "Shi, Y.C. and Han, Y.H. and Zhang, Q.X. and Kuang, X.H.",
        TITLE = "Adaptive iterative attack towards explainable adversarial robustness",
        JOURNAL = PR,
        VOLUME = "105",
        YEAR = "2020",
        PAGES = "107309",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158501"}

@article{bb162649,
        AUTHOR = "Wang, Y. and Su, H. and Zhang, B. and Hu, X.",
        TITLE = "Interpret Neural Networks by Extracting Critical Subnetworks",
        JOURNAL = IP,
        VOLUME = "29",
        YEAR = "2020",
        PAGES = "6707-6720",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158502"}

@article{bb162650,
        AUTHOR = "Ortiz Jimenez, G. and Modas, A. and Moosavi Dezfooli, S.M. and Frossard, P.",
        TITLE = "Optimism in the Face of Adversity: Understanding and Improving Deep
Learning Through Adversarial Robustness",
        JOURNAL = PIEEE,
        VOLUME = "109",
        YEAR = "2021",
        NUMBER = "5",
        MONTH = "May",
        PAGES = "635-659",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158503"}

@article{bb162651,
        AUTHOR = "Li, Z.R. and Feng, C. and Wu, M.H. and Yu, H.C. and Zheng, J.W. and Zhu, F.",
        TITLE = "Adversarial robustness via attention transfer",
        JOURNAL = PRL,
        VOLUME = "146",
        YEAR = "2021",
        PAGES = "172-178",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158504"}

@article{bb162652,
        AUTHOR = "Hu, W.Z. and Li, M.Y. and Wang, Z. and Wang, J.Q. and Zhang, C.S.",
        TITLE = "DiFNet: Densely High-Frequency Convolutional Neural Networks",
        JOURNAL = SPLetters,
        VOLUME = "28",
        YEAR = "2021",
        PAGES = "1340-1344",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158505"}

@article{bb162653,
        AUTHOR = "Mustafa, A. and Khan, S.H. and Hayat, M. and Goecke, R. and Shen, J.B. and Shao, L.",
        TITLE = "Deeply Supervised Discriminative Learning for Adversarial Defense",
        JOURNAL = PAMI,
        VOLUME = "43",
        YEAR = "2021",
        NUMBER = "9",
        MONTH = "September",
        PAGES = "3154-3166",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158506"}

@article{bb162654,
        AUTHOR = "Yu, H. and Liu, A.S. and Li, G.C. and Yang, J.C. and Zhang, C.Z.",
        TITLE = "Progressive Diversified Augmentation for General Robustness of DNNs:
A Unified Approach",
        JOURNAL = IP,
        VOLUME = "30",
        YEAR = "2021",
        PAGES = "8955-8967",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158507"}

@article{bb162655,
        AUTHOR = "Lo, S.Y. and Patel, V.M.",
        TITLE = "Defending Against Multiple and Unforeseen Adversarial Videos",
        JOURNAL = IP,
        VOLUME = "31",
        YEAR = "2022",
        PAGES = "962-973",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158508"}

@article{bb162656,
        AUTHOR = "Mygdalis, V. and Pitas, I.",
        TITLE = "Hyperspherical class prototypes for adversarial robustness",
        JOURNAL = PR,
        VOLUME = "125",
        YEAR = "2022",
        PAGES = "108527",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158509"}

@article{bb162657,
        AUTHOR = "Khong, T.T.T. and Nakada, T. and Nakashima, Y.",
        TITLE = "A Hybrid Bayesian-Convolutional Neural Network for Adversarial
Robustness",
        JOURNAL = IEICE,
        VOLUME = "E105-D",
        YEAR = "2022",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "1308-1319",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158510"}

@article{bb162658,
        AUTHOR = "Wang, K. and Li, F.J. and Chen, C.M. and Hassan, M.M. and Long, J.Y. and Kumar, N.",
        TITLE = "Interpreting Adversarial Examples and Robustness for Deep
Learning-Based Auto-Driving Systems",
        JOURNAL = ITS,
        VOLUME = "23",
        YEAR = "2022",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "9755-9764",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158511"}

@article{bb162659,
        AUTHOR = "Wang, J. and Su, W.Q. and Luo, C.W. and Chen, J. and Song, H.B. and Li, J.Q.",
        TITLE = "CSG: Classifier-Aware Defense Strategy Based on Compressive Sensing
and Generative Networks for Visual Recognition in Autonomous Vehicle
Systems",
        JOURNAL = ITS,
        VOLUME = "23",
        YEAR = "2022",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "9543-9553",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158512"}

@article{bb162660,
        AUTHOR = "Shi, X.S. and Peng, Y.F. and Chen, Q.Y. and Keenan, T. and Thavikulwat, A.T. and Lee, S. and Tang, Y.X. and Chew, E.Y. and Summers, R.M. and Lu, Z.Y.",
        TITLE = "Robust convolutional neural networks against adversarial attacks on
medical images",
        JOURNAL = PR,
        VOLUME = "132",
        YEAR = "2022",
        PAGES = "108923",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158513"}

@article{bb162661,
        AUTHOR = "Yu, X. and Smedemark Margulies, N. and Aeron, S. and Koike Akino, T. and Moulin, P. and Brand, M. and Parsons, K. and Wang, Y.",
        TITLE = "Improving adversarial robustness by learning shared information",
        JOURNAL = PR,
        VOLUME = "134",
        YEAR = "2023",
        PAGES = "109054",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158514"}

@article{bb162662,
        AUTHOR = "Lee, S. and Kim, H. and Lee, J.W.",
        TITLE = "GradDiv: Adversarial Robustness of Randomized Neural Networks via
Gradient Diversity Regularization",
        JOURNAL = PAMI,
        VOLUME = "45",
        YEAR = "2023",
        NUMBER = "2",
        MONTH = "February",
        PAGES = "2645-2651",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158515"}

@article{bb162663,
        AUTHOR = "Picot, M. and Messina, F. and Boudiaf, M. and Labeau, F. and Ben Ayed, I. and Piantanida, P.",
        TITLE = "Adversarial Robustness Via Fisher-Rao Regularization",
        JOURNAL = PAMI,
        VOLUME = "45",
        YEAR = "2023",
        NUMBER = "3",
        MONTH = "March",
        PAGES = "2698-2710",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158516"}

@article{bb162664,
        AUTHOR = "Stutz, D. and Chandramoorthy, N. and Hein, M. and Schiele, B.",
        TITLE = "Random and Adversarial Bit Error Robustness:
Energy-Efficient and Secure DNN Accelerators",
        JOURNAL = PAMI,
        VOLUME = "45",
        YEAR = "2023",
        NUMBER = "3",
        MONTH = "March",
        PAGES = "3632-3647",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158517"}

@inproceedings{bb162665,
        AUTHOR = "Stutz, D. and Hein, M. and Schiele, B.",
        TITLE = "Disentangling Adversarial Robustness and Generalization",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "6969-6980",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158518"}

@inproceedings{bb162666,
        AUTHOR = "Guo, Y. and Stutz, D. and Schiele, B.",
        TITLE = "Improving Robustness by Enhancing Weak Subnets",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "XXIV:320-338",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158519"}

@article{bb162667,
        AUTHOR = "Zhang, J.J. and Chao, H.Q. and Yan, P.K.",
        TITLE = "Toward Adversarial Robustness in Unlabeled Target Domains",
        JOURNAL = IP,
        VOLUME = "32",
        YEAR = "2023",
        PAGES = "1272-1284",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158520"}

@article{bb162668,
        AUTHOR = "Li, W. and Wang, H.Y. and Huo, L.Z. and He, Q. and Zhang, C.L.",
        TITLE = "Robust attention ranking architecture with frequency-domain transform
to defend against adversarial samples",
        JOURNAL = CVIU,
        VOLUME = "233",
        YEAR = "2023",
        PAGES = "103717",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158521"}

@article{bb162669,
        AUTHOR = "Dong, J.H. and Yang, L.X. and Wang, Y. and Xie, X.H. and Lai, J.H.",
        TITLE = "Toward Intrinsic Adversarial Robustness Through Probabilistic
Training",
        JOURNAL = IP,
        VOLUME = "32",
        YEAR = "2023",
        PAGES = "3862-3872",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158522"}

@article{bb162670,
        AUTHOR = "Saini, N. and Chattopadhyay, C. and Das, D.",
        TITLE = "SOLARNet: A single stage regression based framework for efficient and
robust object recognition in aerial images",
        JOURNAL = PRL,
        VOLUME = "172",
        YEAR = "2023",
        PAGES = "37-43",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158523"}

@article{bb162671,
        AUTHOR = "Heo, J. and Seo, S. and Kang, P.",
        TITLE = "Exploring the differences in adversarial robustness between ViT- and
CNN-based models using novel metrics",
        JOURNAL = CVIU,
        VOLUME = "235",
        YEAR = "2023",
        PAGES = "103800",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158524"}

@article{bb162672,
        AUTHOR = "Wang, K. and Chen, Z.C. and Dang, X.L. and Fan, X. and Han, X.M. and Chen, C.M. and Ding, W.P. and Yiu, S.M. and Weng, J.",
        TITLE = "Uncovering Hidden Vulnerabilities in Convolutional Neural Networks
through Graph-based Adversarial Robustness Evaluation",
        JOURNAL = PR,
        VOLUME = "143",
        YEAR = "2023",
        PAGES = "109745",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158525"}

@article{bb162673,
        AUTHOR = "Chu, T.S. and Fang, K. and Yang, J. and Huang, X.L.",
        TITLE = "Improving the adversarial robustness of quantized neural networks via
exploiting the feature diversity",
        JOURNAL = PRL,
        VOLUME = "176",
        YEAR = "2023",
        PAGES = "117-122",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158526"}

@article{bb162674,
        AUTHOR = "Fang, K. and Tao, Q.H. and Wu, Y.W. and Li, T. and Cai, J. and Cai, F.P. and Huang, X.L. and Yang, J.",
        TITLE = "Towards robust neural networks via orthogonal diversity",
        JOURNAL = PR,
        VOLUME = "149",
        YEAR = "2024",
        PAGES = "110281",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158527"}

@inproceedings{bb162675,
        AUTHOR = "Chu, T.S. and Yang, Z.P. and Yang, J. and Huang, X.L.",
        TITLE = "Improving the Robustness of Convolutional Neural Networks Via Sketch
Attention",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "869-873",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158528"}

@article{bb162676,
        AUTHOR = "Xu, S.W. and Qiao, T. and Xu, M. and Wang, W. and Zheng, N.",
        TITLE = "Robust Adversarial Watermark Defending Against GAN Synthesization
Attack",
        JOURNAL = SPLetters,
        VOLUME = "31",
        YEAR = "2024",
        PAGES = "351-355",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158529"}

@article{bb162677,
        AUTHOR = "Zhuang, W. and Huang, L.F. and Gao, C.Y. and Liu, N.",
        TITLE = "LAFED: Towards robust ensemble models via Latent Feature
Diversification",
        JOURNAL = PR,
        VOLUME = "150",
        YEAR = "2024",
        PAGES = "110225",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158530"}

@article{bb162678,
        AUTHOR = "Zhang, L. and Zhou, Y.H. and Yang, Y. and Gao, X.B.",
        TITLE = "Meta Invariance Defense Towards Generalizable Robustness to Unknown
Adversarial Attacks",
        JOURNAL = PAMI,
        VOLUME = "46",
        YEAR = "2024",
        NUMBER = "10",
        MONTH = "October",
        PAGES = "6669-6687",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158531"}

@article{bb162679,
        AUTHOR = "Li, Z.R. and Wu, M.H. and Jin, C. and Yu, D. and Yu, H.",
        TITLE = "Adversarial self-training for robustness and generalization",
        JOURNAL = PRL,
        VOLUME = "185",
        YEAR = "2024",
        PAGES = "117-123",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158532"}

@article{bb162680,
        AUTHOR = "Li, Z.Y. and Hu, C. and Wang, Y. and Yang, Y.J. and Li, S.B.E.",
        TITLE = "Safe Reinforcement Learning With Dual Robustness",
        JOURNAL = PAMI,
        VOLUME = "46",
        YEAR = "2024",
        NUMBER = "12",
        MONTH = "December",
        PAGES = "10876-10890",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158533"}

@article{bb162681,
        AUTHOR = "Li, J.W. and Fang, K. and Huang, X.L. and Yang, J.",
        TITLE = "Boosting certified robustness via an expectation-based similarity
regularization",
        JOURNAL = IVC,
        VOLUME = "151",
        YEAR = "2024",
        PAGES = "105272",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158534"}

@article{bb162682,
        AUTHOR = "Xiao, J.C. and Yang, L. and Fan, Y.B. and Wang, J. and Luo, Z.Q.",
        TITLE = "Understanding adversarial robustness against on-manifold adversarial
examples",
        JOURNAL = PR,
        VOLUME = "159",
        YEAR = "2025",
        PAGES = "111071",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158535"}

@article{bb162683,
        AUTHOR = "Li, L. and Qiu, J.N. and Spratling, M.W.",
        TITLE = "AROID: Improving Adversarial Robustness Through Online Instance-Wise
Data Augmentation",
        JOURNAL = IJCV,
        VOLUME = "133",
        YEAR = "2025",
        NUMBER = "2",
        MONTH = "February",
        PAGES = "929-950",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158536"}

@article{bb162684,
        AUTHOR = "Fu, X.W. and Ma, L. and Zhang, L.",
        TITLE = "Remove to Regenerate: Boosting Adversarial Generalization with Attack
Invariance",
        JOURNAL = CirSysVideo,
        VOLUME = "35",
        YEAR = "2025",
        NUMBER = "3",
        MONTH = "March",
        PAGES = "1999-2012",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158537"}

@article{bb162685,
        AUTHOR = "Dardour, O. and Aguilar, E. and Radeva, P. and Zaied, M.",
        TITLE = "Inter-separability and intra-concentration to enhance stochastic
neural network adversarial robustness",
        JOURNAL = PRL,
        VOLUME = "191",
        YEAR = "2025",
        PAGES = "1-7",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158538"}

@article{bb162686,
        AUTHOR = "Peng, H.Q. and Chen, M.X. and Wang, Y.H. and Guo, Y.F.",
        TITLE = "HFA2RE: Enhancing adversarial robustness via Hyperspherical Feature
Aggregation",
        JOURNAL = PR,
        VOLUME = "169",
        YEAR = "2026",
        PAGES = "111857",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158539"}

@article{bb162687,
        AUTHOR = "Jeary, L. and Kuipers, T. and Hosseini, M. and Paoletti, N.",
        TITLE = "Verifiably robust conformal prediction for probabilistic guarantees
under adversarial attacks",
        JOURNAL = PR,
        VOLUME = "170",
        YEAR = "2026",
        PAGES = "112051",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158540"}

@article{bb162688,
        AUTHOR = "Wang, Z. and Xu, X. and Zhu, L. and Bin, Y. and Wang, G.Q. and Yang, Y. and Shen, H.T.",
        TITLE = "Evidence-Based Multi-Feature Fusion for Adversarial Robustness",
        JOURNAL = PAMI,
        VOLUME = "47",
        YEAR = "2025",
        NUMBER = "10",
        MONTH = "October",
        PAGES = "8923-8937",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158541"}

@article{bb162689,
        AUTHOR = "Yang, X. and Wu, L.X. and Wang, L.Z. and Ying, C.Y. and Su, H. and Zhu, J.",
        TITLE = "Reinforced Embodied Active Defense: Exploiting Adaptive Interaction
for Robust Visual Perception in Adversarial 3D Environments",
        JOURNAL = PAMI,
        VOLUME = "47",
        YEAR = "2025",
        NUMBER = "10",
        MONTH = "October",
        PAGES = "9078-9094",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158542"}

@article{bb162690,
        AUTHOR = "Won, S. and Kim, H.B. and Ahn, Y.H. and Lee, H.J. and Kim, S.T.",
        TITLE = "Understanding adversarial robustness of deep neural networks via
decision reliance",
        JOURNAL = IVC,
        VOLUME = "163",
        YEAR = "2025",
        PAGES = "105743",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158543"}

@article{bb162691,
        AUTHOR = "Yagoda, M. and Abu Hussein, S. and Giryes, R.",
        TITLE = "Diffusion Models are Robust Pretrainers",
        JOURNAL = SPLetters,
        VOLUME = "32",
        YEAR = "2025",
        PAGES = "4219-4223",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158544"}

@article{bb162692,
        AUTHOR = "Zhu, J. and Tan, L.P. and Li, Y.C. and Tian, S.J. and Li, J.Q. and Wang, Y.N.",
        TITLE = "Guided Adversarial Attack in the Low-Frequency Space",
        JOURNAL = MultMed,
        VOLUME = "27",
        YEAR = "2025",
        PAGES = "8029-8044",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158545"}

@article{bb162693,
        AUTHOR = "Ledda, E. and Scodeller, G. and Angioni, D. and Piras, G. and Cina, A.E. and Fumera, G. and Biggio, B. and Roli, F.",
        TITLE = "On the robustness of adversarial training against uncertainty attacks",
        JOURNAL = PR,
        VOLUME = "172",
        YEAR = "2026",
        PAGES = "112519",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158546"}

@article{bb162694,
        AUTHOR = "Liang, Z.Y. and Wang, L.P. and Diao, Y.F. and Wang, Y.Y. and Mu, H. and Zuo, L. and Gao, H.Q. and Fan, Z.X. and Yang, X.",
        TITLE = "Understanding the adversarial robustness of deep learning-based
single-pixel imaging",
        JOURNAL = PR,
        VOLUME = "172",
        YEAR = "2026",
        PAGES = "112555",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158547"}

@article{bb162695,
        AUTHOR = "Rogannagari, R.K. and Islam, K.A.",
        TITLE = "MTFM: Multi-Teacher Feature Matching for Cross-Dataset and
Cross-Architecture Adversarial Robustness Transfer in Remote Sensing
Applications",
        JOURNAL = RS,
        VOLUME = "18",
        YEAR = "2026",
        NUMBER = "1",
        PAGES = "8",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158548"}

@article{bb162696,
        AUTHOR = "Liu, R. and Cai, J. and Liu, Y. and Cai, S. and Chen, B.Z. and Guo, Y.L. and Bennamoun, M.",
        TITLE = "InfoARD: Enhancing Adversarial Robustness Distillation With
Attack-Strength Adaptation and Mutual-Information Maximization",
        JOURNAL = IP,
        VOLUME = "35",
        YEAR = "2026",
        PAGES = "276-289",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158549"}

@inproceedings{bb162697,
        AUTHOR = "Toishi, K. and Maeda, K. and Togo, R. and Ogawa, T. and Haseyama, M.",
        TITLE = "Enhancing Adversarial Robustness of Foundation Models Without Data
Centralization",
        BOOKTITLE = ICIP25,
        YEAR = "2025",
        PAGES = "1756-1761",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158550"}

@inproceedings{bb162698,
        AUTHOR = "Malik, H.S. and Shamshad, F. and Naseer, M. and Nandakumar, K. and Khan, F.S. and Khan, S.",
        TITLE = "Towards Evaluating the Robustness of Visual State Space Models",
        BOOKTITLE = AML25,
        YEAR = "2025",
        PAGES = "3544-3553",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158551"}

@inproceedings{bb162699,
        AUTHOR = "Ma, Z.S. and Cai, X. and Tian, C.H. and Fan, Y.Q. and Jiang, K. and Liu, G. and Bai, X.S. and Li, A. and Ren, Y.L. and Yu, H.Y.",
        TITLE = "FullCycle: Full Stage Adversarial Attack for Reinforcement Learning
Robustness Evaluation",
        BOOKTITLE = AML25,
        YEAR = "2025",
        PAGES = "3554-3560",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158552"}