@inproceedings{bb167700,
        AUTHOR = "Zhu, L. and Ning, R. and Xin, C.S. and Wang, C.G. and Wu, H.Y.",
        TITLE = "CLEAR: Clean-up Sample-Targeted Backdoor in Neural Networks",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "16433-16442",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163533"}

@inproceedings{bb167701,
        AUTHOR = "Zeng, Y. and Park, W. and Mao, Z.M. and Jia, R.X.",
        TITLE = "Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "16453-16461",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163534"}

@inproceedings{bb167702,
        AUTHOR = "Raj, A. and Pal, A. and Arora, C.",
        TITLE = "Identifying Physically Realizable Triggers for Backdoored Face
Recognition Networks",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3023-3027",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163535"}

@inproceedings{bb167703,
        AUTHOR = "Wang, R. and Zhang, G.Y. and Liu, S.J. and Chen, P.Y. and Xiong, J.J. and Wang, M.",
        TITLE = "Practical Detection of Trojan Neural Networks:
Data-limited and Data-free Cases",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXIII:222-238",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163536"}

@inproceedings{bb167704,
        AUTHOR = "Liu, Y.F. and Ma, X.J. and Bailey, J. and Lu, F.",
        TITLE = "Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "X:182-199",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163537"}

@inproceedings{bb167705,
        AUTHOR = "Zhao, S. and Ma, X. and Zheng, X. and Bailey, J. and Chen, J. and Jiang, Y.",
        TITLE = "Clean-Label Backdoor Attacks on Video Recognition Models",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14431-14440",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163538"}

@inproceedings{bb167706,
        AUTHOR = "Kolouri, S. and Saha, A. and Pirsiavash, H. and Hoffmann, H.",
        TITLE = "Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "298-307",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163539"}

@inproceedings{bb167707,
        AUTHOR = "Truong, L. and Jones, C. and Hutchinson, B. and August, A. and Praggastis, B. and Jasper, R. and Nichols, N. and Tuor, A.",
        TITLE = "Systematic Evaluation of Backdoor Data Poisoning Attacks on Image
Classifiers",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3422-3431",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163540"}

@inproceedings{bb167708,
        AUTHOR = "Barni, M. and Kallas, K. and Tondi, B.",
        TITLE = "A New Backdoor Attack in CNNS by Training Set Corruption Without
Label Poisoning",
        BOOKTITLE = ICIP19,
        YEAR = "2019",
        PAGES = "101-105",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bdoor7.html#TT163541"}

@article{bb167709,
        AUTHOR = "Goldblum, M. and Tsipras, D. and Xie, C. and Chen, X.Y. and Schwarzschild, A. and Song, D. and Madry, A. and Li, B. and Goldstein, T.",
        TITLE = "Dataset Security for Machine Learning:
Data Poisoning, Backdoor Attacks, and Defenses",
        JOURNAL = PAMI,
        VOLUME = "45",
        YEAR = "2023",
        NUMBER = "2",
        MONTH = "February",
        PAGES = "1563-1580",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163542"}

@inproceedings{bb167710,
        AUTHOR = "Mu, B.X. and Niu, Z.X. and Wang, L. and Wang, X. and Mia, Q.G. and Jin, R. and Hua, G.",
        TITLE = "Progressive Backdoor Erasing via connecting Backdoor and Adversarial
Attacks",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "20495-20503",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163543"}

@inproceedings{bb167711,
        AUTHOR = "Pang, L. and Sun, T. and Ling, H.B. and Chen, C.",
        TITLE = "Backdoor Cleansing with Unlabeled Data",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12218-12227",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163544"}

@inproceedings{bb167712,
        AUTHOR = "Zhang, Z. and Liu, Q. and Wang, Z.C. and Lu, Z. and Hu, Q.Y.",
        TITLE = "Backdoor Defense via Deconfounded Representation Learning",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12228-12238",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163545"}

@article{bb167713,
        AUTHOR = "Yu, Y. and Wang, Y.F. and Yang, W.H. and Guo, L.Q. and Lu, S.J. and Duan, L.Y. and Tan, Y.P. and Kot, A.C.",
        TITLE = "Robust and Transferable Backdoor Attacks Against Deep Image
Compression With Selective Frequency Prior",
        JOURNAL = PAMI,
        VOLUME = "47",
        YEAR = "2025",
        NUMBER = "3",
        MONTH = "March",
        PAGES = "1674-1693",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163546"}

@inproceedings{bb167714,
        AUTHOR = "Yu, Y. and Wang, Y.F. and Yang, W.H. and Lu, S.J. and Tan, Y.P. and Kot, A.C.",
        TITLE = "Backdoor Attacks Against Deep Image Compression via Adaptive
Frequency Trigger",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12250-12259",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163547"}

@article{bb167715,
        AUTHOR = "Yang, W.H. and Huang, H.F. and Liu, J.Y. and Kot, A.C.",
        TITLE = "Facial Image Compression via Neural Image Manifold Compression",
        JOURNAL = CirSysVideo,
        VOLUME = "35",
        YEAR = "2025",
        NUMBER = "4",
        MONTH = "April",
        PAGES = "3812-3824",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163548"}

@inproceedings{bb167716,
        AUTHOR = "Feng, S.W. and Tao, G.H. and Cheng, S.Y. and Shen, G.Y. and Xu, X.Z. and Liu, Y.Q. and Zhang, K.Y. and Ma, S.Q. and Zhang, X.Y.",
        TITLE = "Detecting Backdoors in Pre-trained Encoders",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "16352-16362",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163549"}

@inproceedings{bb167717,
        AUTHOR = "Liu, X. and Li, M.H. and Wang, H.Y. and Hu, S.S. and Ye, D. and Jin, H. and Wu, L. and Xiao, C.W.",
        TITLE = "Detecting Backdoors During the Inference Stage Based on Corruption
Robustness Consistency",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "16363-16372",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163550"}

@inproceedings{bb167718,
        AUTHOR = "Xu, Q. and Tao, G.N. and Honorio, J. and Liu, Y.Q. and An, S.W. and Shen, G.Y. and Cheng, S.Y. and Zhang, X.Y.",
        TITLE = "MEDIC: Remove Model Backdoors via Importance Driven Cloning",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "20485-20494",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163551"}

@inproceedings{bb167719,
        AUTHOR = "Chen, S. and Chen, H.L. and Haque, M. and Liu, C. and Yang, W.",
        TITLE = "The Dark Side of Dynamic Routing Neural Networks: Towards Efficiency
Backdoor Injection",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "24585-24594",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163552"}

@inproceedings{bb167720,
        AUTHOR = "Bober Irizar, M. and Shumailov, I. and Zhao, Y.R. and Mullins, R. and Papernot, N.",
        TITLE = "Architectural Backdoors in Neural Networks",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "24595-24604",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163553"}

@inproceedings{bb167721,
        AUTHOR = "Yuan, Z.H. and Zhou, P. and Zou, K. and Cheng, Y.",
        TITLE = "You Are Catching My Attention: Are Vision Transformers Bad Learners
under Backdoor Attacks?",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "24605-24615",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163554"}

@inproceedings{bb167722,
        AUTHOR = "Tejankar, A. and Sanjabi, M. and Wang, Q.F. and Wang, S.N. and Firooz, H. and Pirsiavash, H. and Tan, L.",
        TITLE = "Defending Against Patch-based Backdoor Attacks on Self-Supervised
Learning",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12239-12249",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163555"}

@inproceedings{bb167723,
        AUTHOR = "Saha, A. and Tejankar, A. and Koohpayegani, S.A. and Pirsiavash, H.",
        TITLE = "Backdoor Attacks on Self-Supervised Learning",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "13327-13336",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163556"}

@inproceedings{bb167724,
        AUTHOR = "Qi, X.Y. and Xie, T.H. and Pan, R.Z. and Zhu, J.F. and Yang, Y. and Bu, K.",
        TITLE = "Towards Practical Deployment-Stage Backdoor Attack on Deep Neural
Networks",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "13337-13347",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163557"}

@inproceedings{bb167725,
        AUTHOR = "Huang, S.J. and Peng, W.Q. and Jia, Z.W. and Tu, Z.W.",
        TITLE = "One-pixel Signature: Characterizing CNN Models for Backdoor Detection",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXVII:326-341",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bkdoor5.html#TT163558"}

@article{bb167726,
        AUTHOR = "Hang, J. and Han, K. and Chen, H. and Li, Y.",
        TITLE = "Ensemble adversarial black-box attacks against deep learning systems",
        JOURNAL = PR,
        VOLUME = "101",
        YEAR = "2020",
        PAGES = "107184",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163559"}

@article{bb167727,
        AUTHOR = "Correia Silva, J.R. and Berriel, R.F. and Badue, C. and de Souza, A.F. and Oliveira Santos, T.",
        TITLE = "Copycat CNN: Are random non-Labeled data enough to steal knowledge
from black-box models?",
        JOURNAL = PR,
        VOLUME = "113",
        YEAR = "2021",
        PAGES = "107830",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163560"}

@article{bb167728,
        AUTHOR = "Gragnaniello, D. and Marra, F. and Verdoliva, L. and Poggi, G.",
        TITLE = "Perceptual quality-preserving black-box attack against deep learning
image classifiers",
        JOURNAL = PRL,
        VOLUME = "147",
        YEAR = "2021",
        PAGES = "142-149",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163561"}

@article{bb167729,
        AUTHOR = "Li, N.N. and Chen, Z.Z.",
        TITLE = "Toward Visual Distortion in Black-Box Attacks",
        JOURNAL = IP,
        VOLUME = "30",
        YEAR = "2021",
        PAGES = "6156-6167",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163562"}

@article{bb167730,
        AUTHOR = "Lin, D. and Wang, Y.G. and Tang, W.X. and Kang, X.G.",
        TITLE = "Boosting Query Efficiency of Meta Attack With Dynamic Fine-Tuning",
        JOURNAL = SPLetters,
        VOLUME = "29",
        YEAR = "2022",
        PAGES = "2557-2561",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163563"}

@article{bb167731,
        AUTHOR = "Cina, A.E. and Torcinovich, A. and Pelillo, M.",
        TITLE = "A black-box adversarial attack for poisoning clustering",
        JOURNAL = PR,
        VOLUME = "122",
        YEAR = "2022",
        PAGES = "108306",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163564"}

@article{bb167732,
        AUTHOR = "Ghosh, A. and Mullick, S.S. and Datta, S. and Das, S. and Das, A.K. and Mallipeddi, R.",
        TITLE = "A black-box adversarial attack strategy with adjustable sparsity and
generalizability for deep image classifiers",
        JOURNAL = PR,
        VOLUME = "122",
        YEAR = "2022",
        PAGES = "108279",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163565"}

@article{bb167733,
        AUTHOR = "Chen, S. and He, F. and Huang, X.L. and Zhang, K.",
        TITLE = "Relevance attack on detectors",
        JOURNAL = PR,
        VOLUME = "124",
        YEAR = "2022",
        PAGES = "108491",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163566"}

@article{bb167734,
        AUTHOR = "Wei, X.X. and Yan, H.Q. and Li, B.",
        TITLE = "Sparse Black-Box Video Attack with Reinforcement Learning",
        JOURNAL = IJCV,
        VOLUME = "130",
        YEAR = "2022",
        NUMBER = "6",
        MONTH = "June",
        PAGES = "1459-1473",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163567"}

@article{bb167735,
        AUTHOR = "Hu, Z.C. and Li, H. and Yuan, L.H. and Cheng, Z. and Yuan, W. and Zhu, M.",
        TITLE = "Model scheduling and sample selection for ensemble adversarial
example attacks",
        JOURNAL = PR,
        VOLUME = "130",
        YEAR = "2022",
        PAGES = "108824",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163568"}

@article{bb167736,
        AUTHOR = "Huang, L.F. and Wei, S.X. and Gao, C.Y. and Liu, N.",
        TITLE = "Cyclical Adversarial Attack Pierces Black-box Deep Neural Networks",
        JOURNAL = PR,
        VOLUME = "131",
        YEAR = "2022",
        PAGES = "108831",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163569"}

@article{bb167737,
        AUTHOR = "Lu, X. and Wan, C. and Huang, L.F.",
        TITLE = "Improving the Adversarial Transferability via Histogram
Transformation",
        JOURNAL = SPLetters,
        VOLUME = "32",
        YEAR = "2025",
        PAGES = "3949-3953",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163570"}

@article{bb167738,
        AUTHOR = "Peng, B. and Peng, B. and Yong, S.W. and Liu, L.",
        TITLE = "An Empirical Study of Fully Black-Box and Universal Adversarial
Attack for SAR Target Recognition",
        JOURNAL = RS,
        VOLUME = "14",
        YEAR = "2022",
        NUMBER = "16",
        PAGES = "xx-yy",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163571"}

@article{bb167739,
        AUTHOR = "Li, C. and Yao, W. and Wang, H.D. and Jiang, T.S.",
        TITLE = "Adaptive momentum variance for attention-guided sparse adversarial
attacks",
        JOURNAL = PR,
        VOLUME = "133",
        YEAR = "2023",
        PAGES = "108979",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163572"}

@article{bb167740,
        AUTHOR = "Li, T.J. and Li, M.S. and Yang, Y.H. and Deng, C.",
        TITLE = "Frequency domain regularization for iterative adversarial attacks",
        JOURNAL = PR,
        VOLUME = "134",
        YEAR = "2023",
        PAGES = "109075",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163573"}

@article{bb167741,
        AUTHOR = "Dong, Y.P. and Cheng, S.Y. and Pang, T.Y. and Su, H. and Zhu, J.",
        TITLE = "Query-Efficient Black-Box Adversarial Attacks Guided by a
Transfer-Based Prior",
        JOURNAL = PAMI,
        VOLUME = "44",
        YEAR = "2022",
        NUMBER = "12",
        MONTH = "December",
        PAGES = "9536-9548",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163574"}

@article{bb167742,
        AUTHOR = "Zhao, C.L. and Ni, B.B. and Mei, S.B.",
        TITLE = "Explore Adversarial Attack via Black Box Variational Inference",
        JOURNAL = SPLetters,
        VOLUME = "29",
        YEAR = "2022",
        PAGES = "2088-2092",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163575"}

@article{bb167743,
        AUTHOR = "Hu, C. and Xu, H.Q. and Wu, X.J.",
        TITLE = "Substitute Meta-Learning for Black-Box Adversarial Attack",
        JOURNAL = SPLetters,
        VOLUME = "29",
        YEAR = "2022",
        PAGES = "2472-2476",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163576"}

@article{bb167744,
        AUTHOR = "Theagarajan, R. and Bhanu, B.",
        TITLE = "Privacy Preserving Defense For Black Box Classifiers Against On-Line
Adversarial Attacks",
        JOURNAL = PAMI,
        VOLUME = "44",
        YEAR = "2022",
        NUMBER = "12",
        MONTH = "December",
        PAGES = "9503-9520",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163577"}

@article{bb167745,
        AUTHOR = "Sun, X.X. and Cheng, G. and Li, H.D. and Pei, L. and Han, J.W.",
        TITLE = "On Single-Model Transferable Targeted Attacks:
A Closer Look at Decision-Level Optimization",
        JOURNAL = IP,
        VOLUME = "32",
        YEAR = "2023",
        PAGES = "2972-2984",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163578"}

@article{bb167746,
        AUTHOR = "Mao, Z.S. and Lu, Y.Q. and Cheng, Z. and Shen, X.",
        TITLE = "Enhancing transferability of adversarial examples with pixel-level
scale variation",
        JOURNAL = SP:IC,
        VOLUME = "118",
        YEAR = "2023",
        PAGES = "117020",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163579"}

@article{bb167747,
        AUTHOR = "Mumcu, F. and Yilmaz, Y.",
        TITLE = "Sequential architecture-agnostic black-box attack design and analysis",
        JOURNAL = PR,
        VOLUME = "147",
        YEAR = "2024",
        PAGES = "110066",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163580"}

@article{bb167748,
        AUTHOR = "Wang, D.H. and Yao, W. and Jiang, T.S. and Chen, X.Q.",
        TITLE = "Improving Transferability of Universal Adversarial Perturbation With
Feature Disruption",
        JOURNAL = IP,
        VOLUME = "33",
        YEAR = "2024",
        PAGES = "722-737",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163581"}

@article{bb167749,
        AUTHOR = "Yuan, Z. and Zhang, J. and Jiang, Z.Y. and Li, L.L. and Shan, S.G.",
        TITLE = "Adaptive Perturbation for Adversarial Attack",
        JOURNAL = PAMI,
        VOLUME = "46",
        YEAR = "2024",
        NUMBER = "8",
        MONTH = "August",
        PAGES = "5663-5676",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163582"}

@article{bb167750,
        AUTHOR = "Ran, R. and Wei, J. and Zhang, C.N. and Wang, G.Q. and Yang, Y. and Shen, H.T.",
        TITLE = "Adaptive Multi-scale Degradation-Based Attack for Boosting the
Adversarial Transferability",
        JOURNAL = MultMed,
        VOLUME = "26",
        YEAR = "2024",
        PAGES = "10979-10990",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163583"}

@article{bb167751,
        AUTHOR = "Dai, X.L. and Li, Y.J. and Duan, M.X. and Xiao, B.",
        TITLE = "Diffusion Models as Strong Adversaries",
        JOURNAL = IP,
        VOLUME = "33",
        YEAR = "2024",
        PAGES = "6734-6747",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163584"}

@article{bb167752,
        AUTHOR = "Hu, C.Y. and Shi, W.W. and Tian, L. and Li, W.",
        TITLE = "Adversarial catoptric light: An effective, stealthy and robust
physical-world attack to DNNs",
        JOURNAL = IET-CV,
        VOLUME = "18",
        YEAR = "2024",
        NUMBER = "5",
        PAGES = "557-573",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163585"}

@article{bb167753,
        AUTHOR = "Hu, C.Y. and Shi, W.W. and Tian, L. and Li, W.",
        TITLE = "Adversarial Neon Beam: A light-based physical attack to DNNs",
        JOURNAL = CVIU,
        VOLUME = "238",
        YEAR = "2024",
        PAGES = "103877",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163586"}

@article{bb167754,
        AUTHOR = "Hu, C.Y. and Shi, W.W. and Tian, L.",
        TITLE = "Adversarial color projection: A projector-based physical-world attack
to DNNs",
        JOURNAL = IVC,
        VOLUME = "140",
        YEAR = "2023",
        PAGES = "104861",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163587"}

@article{bb167755,
        AUTHOR = "Shi, Y.C. and Han, Y.H. and Hu, Q.H. and Yang, Y. and Tian, Q.",
        TITLE = "Query-Efficient Black-Box Adversarial Attack With Customized
Iteration and Sampling",
        JOURNAL = PAMI,
        VOLUME = "45",
        YEAR = "2023",
        NUMBER = "2",
        MONTH = "February",
        PAGES = "2226-2245",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163588"}

@article{bb167756,
        AUTHOR = "Zhang, Y. and Gong, Z.Q. and Zhang, Y.C. and Bin, K.C. and Li, Y.Q. and Qi, J.H. and Wen, H. and Zhong, P.",
        TITLE = "Boosting transferability of physical attack against detectors by
redistributing separable attention",
        JOURNAL = PR,
        VOLUME = "138",
        YEAR = "2023",
        PAGES = "109435",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163589"}

@article{bb167757,
        AUTHOR = "Yin, F. and Zhang, Y. and Wu, B.Y. and Feng, Y. and Zhang, J.Y. and Fan, Y.B. and Yang, Y.J.",
        TITLE = "Generalizable Black-Box Adversarial Attack With Meta Learning",
        JOURNAL = PAMI,
        VOLUME = "46",
        YEAR = "2024",
        NUMBER = "3",
        MONTH = "March",
        PAGES = "1804-1818",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163590"}

@inproceedings{bb167758,
        AUTHOR = "Feng, Y. and Wu, B.Y. and Fan, Y.B. and Liu, L. and Li, Z.F. and Xia, S.T.",
        TITLE = "Boosting Black-Box Attack with Partially Transferred Conditional
Adversarial Distribution",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15074-15083",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163591"}

@article{bb167759,
        AUTHOR = "Huang, J.L. and Huang, G.H. and Zhang, X.H. and Yuan, X.C. and Xie, F.F. and Pun, C.M. and Zhong, G.",
        TITLE = "Black-box reversible adversarial examples with invertible neural
network",
        JOURNAL = IVC,
        VOLUME = "147",
        YEAR = "2024",
        PAGES = "105094",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163592"}

@article{bb167760,
        AUTHOR = "Huang, X.S. and Miao, D. and Wang, H.P. and Wang, Y.W. and Li, X.",
        TITLE = "Context-Guided Black-Box Attack for Visual Tracking",
        JOURNAL = MultMed,
        VOLUME = "26",
        YEAR = "2024",
        PAGES = "8824-8835",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163593"}

@article{bb167761,
        AUTHOR = "Qian, X.L. and Wang, W.X. and Jiang, Y.G. and Xue, X.Y. and Fu, Y.W.",
        TITLE = "Dynamic Routing and Knowledge Re-Learning for Data-Free Black-Box
Attack",
        JOURNAL = PAMI,
        VOLUME = "47",
        YEAR = "2025",
        NUMBER = "1",
        MONTH = "January",
        PAGES = "486-501",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163594"}

@article{bb167762,
        AUTHOR = "Sun, X.X. and Cheng, G. and Li, H.D. and Lang, C. and Han, J.W.",
        TITLE = "STDatav2: Accessing Efficient Black-Box Stealing for Adversarial
Attacks",
        JOURNAL = PAMI,
        VOLUME = "47",
        YEAR = "2025",
        NUMBER = "4",
        MONTH = "April",
        PAGES = "2429-2445",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163595"}

@inproceedings{bb167763,
        AUTHOR = "Sun, X.X. and Cheng, G. and Li, H.D. and Pei, L. and Han, J.W.",
        TITLE = "Exploring Effective Data for Surrogate Training Towards Black-box
Attack",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15334-15343",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163596"}

@article{bb167764,
        AUTHOR = "Li, C. and Jiang, T.S. and Wang, H.D. and Yao, W. and Wang, D.H.",
        TITLE = "Optimizing Latent Variables in Integrating Transfer and Query Based
Attack Framework",
        JOURNAL = PAMI,
        VOLUME = "47",
        YEAR = "2025",
        NUMBER = "1",
        MONTH = "January",
        PAGES = "161-171",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163597"}

@article{bb167765,
        AUTHOR = "Cheng, R. and Wang, X.P. and Sohel, F. and Lei, H.",
        TITLE = "Black-Box Explainability-Guided Adversarial Attack for 3D Object
Tracking",
        JOURNAL = CirSysVideo,
        VOLUME = "35",
        YEAR = "2025",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "6881-6894",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163598"}

@article{bb167766,
        AUTHOR = "Wang, D.H. and Yao, W. and Jiang, T.S. and Li, C. and Chen, X.Q.",
        TITLE = "Universal Multi-View Black-Box Attack Against Object Detectors via
Layout Optimization",
        JOURNAL = CirSysVideo,
        VOLUME = "35",
        YEAR = "2025",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "7129-7142",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163599"}

@article{bb167767,
        AUTHOR = "Zheng, M.X. and Yan, X.C. and Zhu, Z. and Chen, H.R. and Wu, B.Y.",
        TITLE = "BlackboxBench: A Comprehensive Benchmark of Black-Box Adversarial
Attacks",
        JOURNAL = PAMI,
        VOLUME = "47",
        YEAR = "2025",
        NUMBER = "9",
        MONTH = "September",
        PAGES = "7867-7885",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163600"}

@article{bb167768,
        AUTHOR = "He, S. and Zheng, S.T. and Ming, A. and Wang, Y. and Ma, H.D.",
        TITLE = "DA3Attacker: A Diffusion-Based Attacker Against Aesthetics-Oriented
Black-Box Models",
        JOURNAL = IP,
        VOLUME = "34",
        YEAR = "2025",
        PAGES = "5300-5311",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163601"}

@article{bb167769,
        AUTHOR = "Zhan, Y. and Zheng, B.L. and Liu, D.X. and Deng, B. and Yang, X.",
        TITLE = "Exploring black-box adversarial attacks on Interpretable Deep
Learning Systems",
        JOURNAL = CVIU,
        VOLUME = "259",
        YEAR = "2025",
        PAGES = "104423",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163602"}

@article{bb167770,
        AUTHOR = "Zeng, P.P. and Yuan, S.M. and Zhang, Q.L. and Deng, H.M. and Xu, H. and Gao, L.",
        TITLE = "Staircase Sign Method: Boosting adversarial attacks by mitigating
gradient distortion",
        JOURNAL = PR,
        VOLUME = "170",
        YEAR = "2026",
        PAGES = "111983",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163603"}

@article{bb167771,
        AUTHOR = "de Paz, E.G.G. and Vaquera Huerta, H. and Albores Velasco, F.J. and Bauer Mengelberg, J.R. and Romero Padilla, J.M.",
        TITLE = "Convex Partition: A Bayesian Regression Tree for Black-box
Optimisation",
        JOURNAL = PRL,
        VOLUME = "196",
        YEAR = "2025",
        PAGES = "344-350",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163604"}

@article{bb167772,
        AUTHOR = "Yu, J. and Chen, H.L. and Li, J.J. and Chen, L.H. and Gao, Y.D. and Liu, W.F. and Zhang, L.",
        TITLE = "Black-Box Adversarial Defense Based on Image Decomposition and
Reconstruction",
        JOURNAL = MultMed,
        VOLUME = "27",
        YEAR = "2025",
        PAGES = "5909-5921",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163605"}

@article{bb167773,
        AUTHOR = "Zhang, Z.X. and Wang, P. and Zheng, X.J. and Qing, L. and Liu, Q.",
        TITLE = "Beyond deceptive flatness: Dual-order solution for strengthening
adversarial transferability",
        JOURNAL = PR,
        VOLUME = "172",
        YEAR = "2026",
        PAGES = "112710",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163606"}

@article{bb167774,
        AUTHOR = "Zhang, R. and Jiang, S. and Kang, Z. and Xu, S. and Lv, Y. and Xia, H.",
        TITLE = "Theft model-based black-box adversarial attack in embedding space",
        JOURNAL = JVCIR,
        VOLUME = "115",
        YEAR = "2026",
        PAGES = "104702",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163607"}

@article{bb167775,
        AUTHOR = "Wan, Q. and Zeng, H. and Peng, A.J.",
        TITLE = "Enhancing heterogeneous model transferability via constrained möbius
attack",
        JOURNAL = PR,
        VOLUME = "176",
        YEAR = "2026",
        PAGES = "113295",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163608"}

@article{bb167776,
        AUTHOR = "Liu, Y.J. and Li, D.Q. and Li, Z.X. and Huang, T.J.",
        TITLE = "SEGA: A Transferable Signed Ensemble Gaussian Black-Box Attack
Against No-Reference Image Quality Assessment Models",
        JOURNAL = PAMI,
        VOLUME = "48",
        YEAR = "2026",
        NUMBER = "6",
        MONTH = "June",
        PAGES = "6660-6672",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163609"}

@article{bb167777,
        AUTHOR = "Zhang, X.X. and Li, Y. and Zhao, Z.L.",
        TITLE = "Towards data-free and model-agnostic black-box attacks against
SAR-ATR via dual-diversity augmentation",
        JOURNAL = PandRS,
        VOLUME = "238",
        YEAR = "2026",
        PAGES = "282-299",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163610"}

@article{bb167778,
        AUTHOR = "Yang, K.Y. and Yuan, J. and Yan, H.Y. and Liu, H.Y. and Sun, Y.Q.",
        TITLE = "SGAN: Shapelet-based GAN for local time series black-box attack",
        JOURNAL = PR,
        VOLUME = "179",
        YEAR = "2026",
        PAGES = "113635",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163611"}

@article{bb167779,
        AUTHOR = "Li, J.Y. and Zhang, B. and Shi, Y.C. and Han, Y.",
        TITLE = "Reinforcement and Complementary Space Search for Multimodal Black-Box
Attack",
        JOURNAL = MultMed,
        VOLUME = "28",
        YEAR = "2026",
        PAGES = "5395-5406",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163612"}

@article{bb167780,
        AUTHOR = "Li, Z.Y. and Guo, S. and Dang, K. and Li, H. and Gong, M.",
        TITLE = "Multi-Task Adaptive Knowledge Transfer for Black-Box Adversarial
Attacks on Hyperspectral Images",
        JOURNAL = RS,
        VOLUME = "18",
        YEAR = "2026",
        NUMBER = "13",
        PAGES = "2131",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163613"}

@article{bb167781,
        AUTHOR = "Wang, J. and Wang, R.J. and Zhang, F.L.",
        TITLE = "Regarding general robust-feature as trigger: A transferable backdoor
attack against black-box models",
        JOURNAL = PR,
        VOLUME = "180",
        YEAR = "2026",
        PAGES = "113908",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163614"}

@article{bb167782,
        AUTHOR = "Zheng, M. and Wu, K. and Fan, Y.B. and Huang, R. and Wu, B.Y.",
        TITLE = "Seeking Flat Minima Over Diverse Surrogates for Improved Adversarial
Transferability: A Theoretical Framework and Algorithmic
Instantiation",
        JOURNAL = PAMI,
        VOLUME = "48",
        YEAR = "2026",
        NUMBER = "8",
        MONTH = "August",
        PAGES = "9552-9570",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163615"}

@article{bb167783,
        AUTHOR = "Men, D.P. and Zhang, X.L. and Wang, J.Y. and Liu, L.X. and Wang, Y.P. and Li, L. and Yang, M.M. and Jia, Z.Y.",
        TITLE = "AdvDPDiff: A diffusion model adversarial attacks strategy combining
multi-model ensemble and dynamic input transformation",
        JOURNAL = JVCIR,
        VOLUME = "119",
        YEAR = "2026",
        PAGES = "104843",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163616"}

@article{bb167784,
        AUTHOR = "Wu, Y. and Liu, J.",
        TITLE = "Diff-BODE: Diffusion guided and boundary optimized deformable
black-box patch attack",
        JOURNAL = PR,
        VOLUME = "180",
        YEAR = "2026",
        PAGES = "114370",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163617"}

@inproceedings{bb167785,
        AUTHOR = "Duwe, H. and Munz, A. and Hoos, H.H.",
        TITLE = "Towards Consistent and Efficient Decision-Based Attacks",
        BOOKTITLE = SAForensics26,
        YEAR = "2026",
        PAGES = "212-221",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163618"}

@inproceedings{bb167786,
        AUTHOR = "Park, J. and McLaughlin, N. and Alouani, I.",
        TITLE = "Mind the Gap: Detecting Black-box Adversarial Attacks in the Making
through Query Update Analysis",
        BOOKTITLE = CVPR25,
        YEAR = "2025",
        PAGES = "10235-10243",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163619"}

@inproceedings{bb167787,
        AUTHOR = "Qiao, Y.Q. and Liu, D.Z. and Wang, R. and Liang, K.",
        TITLE = "Low-Frequency Black-Box Backdoor Attack via Evolutionary Algorithm",
        BOOKTITLE = WACV25,
        YEAR = "2025",
        PAGES = "7582-7592",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163620"}

@inproceedings{bb167788,
        AUTHOR = "Shukla, S. and Dalui, S. and Alam, M. and Datta, S. and Mondal, A. and Mukhopadhyay, D. and Chakrabarti, P.P.",
        TITLE = "Guardian of the Ensembles: Introducing Pairwise Adversarially Robust
Loss for Resisting Adversarial Attacks in DNN Ensembles",
        BOOKTITLE = WACV25,
        YEAR = "2025",
        PAGES = "7205-7214",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163621"}

@inproceedings{bb167789,
        AUTHOR = "Choi, J.I. and Lan, Q.Z. and Tian, Q.",
        TITLE = "Improving Deep Detector Robustness via Detection-Related Discriminant
Maximization and Reorganization",
        BOOKTITLE = WACV25,
        YEAR = "2025",
        PAGES = "1518-1527",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163622"}

@inproceedings{bb167790,
        AUTHOR = "Perla, N.K. and Hossain, M.I. and Sajeeda, A. and Shao, M.",
        TITLE = "Are Exemplar-Based Class Incremental Learning Models Victim of
Black-Box Poison Attacks?",
        BOOKTITLE = WACV25,
        YEAR = "2025",
        PAGES = "6785-6794",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163623"}

@inproceedings{bb167791,
        AUTHOR = "Zhang, X.W. and Zhang, T.Y. and Zhang, Y.T. and Liu, S.C.",
        TITLE = "Enhancing the Transferability of Adversarial Attacks with Stealth
Preservation",
        BOOKTITLE = AML24,
        YEAR = "2024",
        PAGES = "2915-2925",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163624"}

@inproceedings{bb167792,
        AUTHOR = "Ye, M. and Xu, X. and Zhang, Q. and Wu, J.",
        TITLE = "Sharpness-Aware Optimization for Real-World Adversarial Attacks for
Diverse Compute Platforms with Enhanced Transferability",
        BOOKTITLE = AML24,
        YEAR = "2024",
        PAGES = "2937-2946",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163625"}

@inproceedings{bb167793,
        AUTHOR = "Wu, H. and Ou, G. and Wu, W.B. and Zheng, Z.",
        TITLE = "Improving Transferable Targeted Adversarial Attacks with Model
Self-Enhancement",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24615-24624",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163626"}

@inproceedings{bb167794,
        AUTHOR = "Tang, B. and Wang, Z. and Bin, Y. and Dou, Q. and Yang, Y. and Shen, H.T.",
        TITLE = "Ensemble Diversity Facilitates Adversarial Transferability",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24377-24386",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163627"}

@inproceedings{bb167795,
        AUTHOR = "Dubinski, J. and Kowalczuk, A. and Pawlak, S. and Rokita, P. and Trzcinski, T. and Morawiecki, P.",
        TITLE = "Towards More Realistic Membership Inference Attacks on Large
Diffusion Models",
        BOOKTITLE = WACV24,
        YEAR = "2024",
        PAGES = "4848-4857",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163628"}

@inproceedings{bb167796,
        AUTHOR = "Wang, Z.Y. and Shen, L. and Guo, J.F. and Duan, T.H. and Luan, S. and Liu, T.L. and Gao, M.C.",
        TITLE = "Training A Secure Model Against Data-free Model Extraction",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "LXXIX: 323-340",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163629"}

@inproceedings{bb167797,
        AUTHOR = "Meng, L.Z. and Shao, M.W. and Qiao, Y.J. and Liu, W.J.",
        TITLE = "Inter-class Topology Alignment for Efficient Black-box Substitute
Attacks",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "XXXIV: 261-277",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163630"}

@inproceedings{bb167798,
        AUTHOR = "Yang, N. and Li, Z. and Long, Z. and Huang, X.L. and Zhu, C. and Liu, Y.P.",
        TITLE = "Efficient Black-Box Adversarial Attack on Deep Clustering Models",
        BOOKTITLE = ICIP24,
        YEAR = "2024",
        PAGES = "1044-1049",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163631"}

@inproceedings{bb167799,
        AUTHOR = "Nayak, G.K. and Khatri, I. and Rawal, R. and Chakraborty, A.",
        TITLE = "Data-free Defense of Black Box Models Against Adversarial Attacks",
        BOOKTITLE = FaDE-TCV24,
        YEAR = "2024",
        PAGES = "254-263",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654bbox6.html#TT163632"}

Last update: