@inproceedings{bb166500,
        AUTHOR = "Tao, Y. and Liu, D.Z. and Zhou, P. and Xie, Y. and Du, W. and Hu, W.",
        TITLE = "3DHacker: Spectrum-based Decision Boundary Generation for Hard-label
3D Point Cloud Attack",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "14294-14304",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162335"}

@inproceedings{bb166501,
        AUTHOR = "Lee, B.K. and Kim, J. and Ro, Y.M.",
        TITLE = "Mitigating Adversarial Vulnerability through Causal Parameter
Estimation by Adversarial Double Machine Learning",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4476-4486",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162336"}

@inproceedings{bb166502,
        AUTHOR = "Fang, H. and Zhang, J. and Qiu, Y.P. and Liu, J.Y. and Xu, K. and Fang, C.F. and Chang, E.C.",
        TITLE = "Tracing the Origin of Adversarial Attack for Forensic Investigation
and Deterrence",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4312-4321",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162337"}

@inproceedings{bb166503,
        AUTHOR = "Zhu, P. and Osada, G. and Kataoka, H. and Takahashi, T.",
        TITLE = "Frequency-aware GAN for Adversarial Manipulation Generation",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4292-4301",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162338"}

@inproceedings{bb166504,
        AUTHOR = "Frosio, I. and Kautz, J.",
        TITLE = "The Best Defense is a Good Offense:
Adversarial Augmentation Against Adversarial Attacks",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "4067-4076",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162339"}

@inproceedings{bb166505,
        AUTHOR = "Silva, H.P. and Seidenari, L. and del Bimbo, A.",
        TITLE = "Diffdefense: Defending Against Adversarial Attacks via Diffusion Models",
        BOOKTITLE = CIAP23,
        YEAR = "2023",
        PAGES = "II:430-442",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162340"}

@inproceedings{bb166506,
        AUTHOR = "di Domenico, N. and Borghi, G. and Franco, A. and Maltoni, D.",
        TITLE = "Combining Identity Features and Artifact Analysis for Differential
Morphing Attack Detection",
        BOOKTITLE = CIAP23,
        YEAR = "2023",
        PAGES = "I:100-111",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162341"}

@inproceedings{bb166507,
        AUTHOR = "Tapia, J. and Busch, C.",
        TITLE = "Impact of Synthetic Images on Morphing Attack Detection Using a Siamese
Network",
        BOOKTITLE = CIARP23,
        YEAR = "2023",
        PAGES = "I:343-357",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162342"}

@inproceedings{bb166508,
        AUTHOR = "Zeng, H. and Chen, B.W. and Deng, K. and Peng, A.J.",
        TITLE = "Adversarial Example Detection Bayesian Game",
        BOOKTITLE = ICIP23,
        YEAR = "2023",
        PAGES = "1710-1714",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162343"}

@inproceedings{bb166509,
        AUTHOR = "Zhang, J.F. and Wang, J. and Lyu, W.L. and Yin, Z.X.",
        TITLE = "Local Texture Complexity Guided Adversarial Attack",
        BOOKTITLE = ICIP23,
        YEAR = "2023",
        PAGES = "2065-2069",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162344"}

@inproceedings{bb166510,
        AUTHOR = "Nguyen, N.B. and Chandrasegaran, K. and Abdollahzadeh, M. and Cheung, N.M.",
        TITLE = "Re-Thinking Model Inversion Attacks Against Deep Neural Networks",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "16384-16393",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162345"}

@inproceedings{bb166511,
        AUTHOR = "Tan, C.C. and Zhao, Y. and Wei, S.K. and Gu, G.H. and Wei, Y.C.",
        TITLE = "Learning on Gradients: Generalized Artifacts Representation for
GAN-Generated Images Detection",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12105-12114",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162346"}

@inproceedings{bb166512,
        AUTHOR = "Bai, Q.Y. and Yang, C. and Xu, Y.H. and Liu, X.H. and Yang, Y. and Shen, Y.J.",
        TITLE = "GLeaD: Improving GANs with A Generator-Leading Task",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12094-12104",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162347"}

@inproceedings{bb166513,
        AUTHOR = "Jamil, H. and Liu, Y.J. and Caglar, T. and Cole, C. and Blanchard, N. and Peterson, C. and Kirby, M.",
        TITLE = "Hamming Similarity and Graph Laplacians for Class Partitioning and
Adversarial Image Detection",
        BOOKTITLE = TAG-PRA23,
        YEAR = "2023",
        PAGES = "590-599",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162348"}

@inproceedings{bb166514,
        AUTHOR = "Li, S. and Zhang, S. and Chen, G. and Wang, D. and Feng, P. and Wang, J. and Liu, A. and Yi, X. and Liu, X.L.",
        TITLE = "Towards Benchmarking and Assessing Visual Naturalness of Physical
World Adversarial Attacks",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12324-12333",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162349"}

@inproceedings{bb166515,
        AUTHOR = "Godfrey, C. and Kvinge, H. and Bishoff, E. and Mckay, M. and Brown, D. and Doster, T. and Byler, E.",
        TITLE = "How many dimensions are required to find an adversarial example?",
        BOOKTITLE = AML23,
        YEAR = "2023",
        PAGES = "2353-2360",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162350"}

@inproceedings{bb166516,
        AUTHOR = "Chen, Y.W. and Chu, S.Y.",
        TITLE = "Adversarial Defense in Aerial Detection",
        BOOKTITLE = AML23,
        YEAR = "2023",
        PAGES = "2306-2313",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162351"}

@inproceedings{bb166517,
        AUTHOR = "Zhou, Q.G. and Lei, M. and Zhi, P. and Zhao, R. and Shen, J. and Yong, B.B.",
        TITLE = "Towards Improving the Anti-Attack Capability of the Rangenet++",
        BOOKTITLE = "ACCVWS22",
        YEAR = "2022",
        PAGES = "60-70",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162352"}

@inproceedings{bb166518,
        AUTHOR = "Zhao, Z.Y. and Dang, N. and Larson, M.",
        TITLE = "The Importance of Image Interpretation: Patterns of Semantic
Misclassification in Real-world Adversarial Images",
        BOOKTITLE = MMMod23,
        YEAR = "2023",
        PAGES = "II: 718-725",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162353"}

@inproceedings{bb166519,
        AUTHOR = "Dargaud, L. and Ibsen, M. and Tapia, J. and Busch, C.",
        TITLE = "A Principal Component Analysis-Based Approach for Single Morphing
Attack Detection",
        BOOKTITLE = Explain-Bio23,
        YEAR = "2023",
        PAGES = "683-692",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162354"}

@inproceedings{bb166520,
        AUTHOR = "Drenkow, N. and Lennon, M. and Wang, I.J. and Burlina, P.",
        TITLE = "Do Adaptive Active Attacks Pose Greater Risk Than Static Attacks?",
        BOOKTITLE = WACV23,
        YEAR = "2023",
        PAGES = "1380-1389",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162355"}

@inproceedings{bb166521,
        AUTHOR = "Chen, Y.K. and Zhang, M. and Li, J. and Kuang, X.H.",
        TITLE = "Adversarial Attacks and Defenses in Image Classification:
A Practical Perspective",
        BOOKTITLE = ICIVC22,
        YEAR = "2022",
        PAGES = "424-430",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162356"}

@inproceedings{bb166522,
        AUTHOR = "Hwang, D. and Lee, E. and Rhee, W.",
        TITLE = "AID-Purifier: A Light Auxiliary Network for Boosting Adversarial
Defense",
        BOOKTITLE = "ICPR22",
        YEAR = "2022",
        PAGES = "2401-2407",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162357"}

@inproceedings{bb166523,
        AUTHOR = "Tasaki, H. and Kaneko, Y. and Chao, J.H.",
        TITLE = "Curse of co-Dimensionality: Explaining Adversarial Examples by
Embedding Geometry of Data Manifold",
        BOOKTITLE = "ICPR22",
        YEAR = "2022",
        PAGES = "2364-2370",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162358"}

@inproceedings{bb166524,
        AUTHOR = "Khalsi, R. and Smati, I. and Sallami, M.M. and Ghorbel, F.",
        TITLE = "A Novel System for Deep Contour Classifiers Certification Under
Filtering Attacks",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "3561-3565",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162359"}

@inproceedings{bb166525,
        AUTHOR = "Zhang, Y.X. and Dong, B. and Heide, F.",
        TITLE = "All You Need Is RAW: Defending Against Adversarial Attacks with Camera
Image Pipelines",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "XIX:323-343",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162360"}

@inproceedings{bb166526,
        AUTHOR = "Lu, B. and Liu, J.Y. and Xiong, H.L.",
        TITLE = "Transformation-Based Adversarial Defense Via Sparse Representation",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "1726-1730",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162361"}

@inproceedings{bb166527,
        AUTHOR = "Subramanyam, A.V. and Raj, A.",
        TITLE = "Barycentric Defense",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "2276-2280",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162362"}

@inproceedings{bb166528,
        AUTHOR = "Kowalski, C. and Famili, A. and Lao, Y.J.",
        TITLE = "Towards Model Quantization on the Resilience Against Membership
Inference Attacks",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "3646-3650",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162363"}

@inproceedings{bb166529,
        AUTHOR = "Nayak, G.K. and Rawal, R. and Lal, R. and Patil, H. and Chakraborty, A.",
        TITLE = "Holistic Approach to Measure Sample-level Adversarial Vulnerability
and its Utility in Building Trustworthy Systems",
        BOOKTITLE = HCIS22,
        YEAR = "2022",
        PAGES = "4331-4340",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162364"}

@inproceedings{bb166530,
        AUTHOR = "Chen, Y.W.",
        TITLE = "Rethinking Adversarial Examples in Wargames",
        BOOKTITLE = ArtOfRobust22,
        YEAR = "2022",
        PAGES = "100-106",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162365"}

@inproceedings{bb166531,
        AUTHOR = "Haque, M. and Budnik, C.J. and Yang, W.",
        TITLE = "CorrGAN: Input Transformation Technique Against Natural Corruptions",
        BOOKTITLE = ArtOfRobust22,
        YEAR = "2022",
        PAGES = "193-196",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162366"}

@inproceedings{bb166532,
        AUTHOR = "Ren, S.C. and Gao, Z.Q. and Hua, T.Y. and Xue, Z.H. and Tian, Y.L. and He, S.F. and Zhao, H.",
        TITLE = "Co-advise: Cross Inductive Bias Distillation",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "16752-16761",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162367"}

@inproceedings{bb166533,
        AUTHOR = "Pang, T.Y. and Zhang, H. and He, D. and Dong, Y.P. and Su, H. and Chen, W. and Zhu, J. and Liu, T. .Y.",
        TITLE = "Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15202-15212",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162368"}

@inproceedings{bb166534,
        AUTHOR = "Vellaichamy, S. and Hull, M. and Wang, Z.J.J. and Das, N. and Peng, S.Y. and Park, H. and Chau, D.H.P.",
        TITLE = "DetectorDetective:
Investigating the Effects of Adversarial Examples on Object Detectors",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "21452-21459",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162369"}

@inproceedings{bb166535,
        AUTHOR = "Dong, J.H. and Wang, Y. and Lai, J.H. and Xie, X.H.",
        TITLE = "Improving Adversarially Robust Few-shot Image Classification with
Generalizable Representations",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "9015-9024",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162370"}

@inproceedings{bb166536,
        AUTHOR = "Chen, T.L. and Zhang, Z.Y. and Zhang, Y.H. and Chang, S.Y. and Liu, S. and Wang, Z.Y.",
        TITLE = "Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "588-599",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162371"}

@inproceedings{bb166537,
        AUTHOR = "Yin, M.J. and Li, S. and Cai, Z. and Song, C.Y. and Asif, M.S. and Roy Chowdhury, A.K. and Krishnamurthy, S.V.",
        TITLE = "Exploiting Multi-Object Relationships for Detecting Adversarial
Attacks in Complex Scenes",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7838-7847",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162372"}

@inproceedings{bb166538,
        AUTHOR = "Abusnaina, A. and Wu, Y.H. and Arora, S. and Wang, Y.Z. and Wang, F. and Yang, H. and Mohaisen, D.",
        TITLE = "Adversarial Example Detection Using Latent Neighborhood Graph",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7667-7676",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162373"}

@inproceedings{bb166539,
        AUTHOR = "Mao, C.Z. and Chiquier, M. and Wang, H. and Yang, J.F. and Vondrick, C.",
        TITLE = "Adversarial Attacks are Reversible with Natural Supervision",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "641-651",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162374"}

@inproceedings{bb166540,
        AUTHOR = "Zhao, X.J. and Zhang, W.C. and Xiao, X.K. and Lim, B.",
        TITLE = "Exploiting Explanations for Model Inversion Attacks",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "662-672",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162375"}

@inproceedings{bb166541,
        AUTHOR = "Wang, Q. and Kurz, D.",
        TITLE = "Reconstructing Training Data from Diverse ML Models by Ensemble
Inversion",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "3870-3878",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162376"}

@inproceedings{bb166542,
        AUTHOR = "Tursynbek, N. and Petiushko, A. and Oseledets, I.",
        TITLE = "Geometry-Inspired Top-k Adversarial Perturbations",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "4059-4068",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162377"}

@inproceedings{bb166543,
        AUTHOR = "Nayak, G.K. and Rawal, R. and Chakraborty, A.",
        TITLE = "DAD: Data-free Adversarial Defense at Test Time",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "3788-3797",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162378"}

@inproceedings{bb166544,
        AUTHOR = "Scheliga, D. and Mader, P. and Seeland, M.",
        TITLE = "PRECODE - A Generic Model Extension to Prevent Deep Gradient Leakage",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "3605-3614",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162379"}

@inproceedings{bb166545,
        AUTHOR = "Drenkow, N. and Fendley, N. and Burlina, P.",
        TITLE = "Attack Agnostic Detection of Adversarial Examples via Random Subspace
Analysis",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "2815-2825",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162380"}

@inproceedings{bb166546,
        AUTHOR = "Cheng, H. and Xu, K.D. and Li, Z.G. and Zhao, P. and Wang, C. and Lin, X. and Kailkhura, B. and Goldhahn, R.",
        TITLE = "More or Less (MoL): Defending against Multiple Perturbation Attacks
on Deep Neural Networks through Model Ensemble and Compression",
        BOOKTITLE = Hazards22,
        YEAR = "2022",
        PAGES = "645-655",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162381"}

@inproceedings{bb166547,
        AUTHOR = "Lang, I. and Kotlicki, U. and Avidan, S.",
        TITLE = "Geometric Adversarial Attacks and Defenses on 3D Point Clouds",
        BOOKTITLE = "3DV21",
        YEAR = "2021",
        PAGES = "1196-1205",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162382"}

@inproceedings{bb166548,
        AUTHOR = "Wang, Y.P. and Xie, L. and Liu, X.M. and Yin, J.L. and Zheng, T.J.",
        TITLE = "Model-Agnostic Adversarial Example Detection Through Logit
Distribution Learning",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3617-3621",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162383"}

@inproceedings{bb166549,
        AUTHOR = "Chai, W.H. and Lu, Y.T. and Velipasalar, S.",
        TITLE = "Weighted Average Precision: Adversarial Example Detection for Visual
Perception of Autonomous Vehicles",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "804-808",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162384"}

@inproceedings{bb166550,
        AUTHOR = "Kung, B.H. and Chen, P.C. and Liu, Y.C. and Chen, J.C.",
        TITLE = "Squeeze and Reconstruct: Improved Practical Adversarial Defense Using
Paired Image Compression and Reconstruction",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "849-853",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162385"}

@inproceedings{bb166551,
        AUTHOR = "Li, C.Y. and Sanchez Matilla, R. and Shamsabadi, A.S. and Mazzon, R. and Cavallaro, A.",
        TITLE = "On the Reversibility of Adversarial Attacks",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3073-3077",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162386"}

@inproceedings{bb166552,
        AUTHOR = "Bakiskan, C. and Cekic, M. and Sezer, A.D. and Madhow, U.",
        TITLE = "A Neuro-Inspired Autoencoding Defense Against Adversarial Attacks",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3922-3926",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162387"}

@inproceedings{bb166553,
        AUTHOR = "Truong, J.B. and Maini, P. and Walls, R.J. and Papernot, N.",
        TITLE = "Data-Free Model Extraction",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "4769-4778",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162388"}

@inproceedings{bb166554,
        AUTHOR = "Deng, Z.J. and Yang, X. and Xu, S.Z. and Su, H. and Zhu, J.",
        TITLE = "LiBRe: A Practical Bayesian Approach to Adversarial Detection",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "972-982",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162389"}

@inproceedings{bb166555,
        AUTHOR = "Yang, K. and Lin, W.Y. and Barman, M. and Condessa, F. and Kolter, Z.",
        TITLE = "Defending Multimodal Fusion Models against Single-Source Adversaries",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3339-3348",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162390"}

@inproceedings{bb166556,
        AUTHOR = "Ong, D.S. and Chan, C.S. and Ng, K.W. and Fan, L.X. and Yang, Q.",
        TITLE = "Protecting Intellectual Property of Generative Adversarial Networks
from Ambiguity Attacks",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3629-3638",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162391"}

@inproceedings{bb166557,
        AUTHOR = "Pestana, C. and Liu, W. and Glance, D. and Mian, A.",
        TITLE = "Defense-friendly Images in Adversarial Attacks:
Dataset and Metrics for Perturbation Difficulty",
        BOOKTITLE = WACV21,
        YEAR = "2021",
        PAGES = "556-565",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162392"}

@inproceedings{bb166558,
        AUTHOR = "Kyatham, V. and Mishra, D. and Prathosh, A.P.",
        TITLE = "Variational Inference with Latent Space Quantization for Adversarial
Resilience",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "9593-9600",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162393"}

@inproceedings{bb166559,
        AUTHOR = "Li, H.L. and Fan, Y.F. and Ganz, F. and Yezzi, A.J. and Barnaghi, P.",
        TITLE = "Verifying the Causes of Adversarial Examples",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "6750-6757",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162394"}

@inproceedings{bb166560,
        AUTHOR = "Huang, Y.T. and Liao, W.H. and Huang, C.W.",
        TITLE = "Defense Mechanism Against Adversarial Attacks Using Density-based
Representation of Images",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "3499-3504",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162395"}

@inproceedings{bb166561,
        AUTHOR = "Chhabra, S. and Agarwal, A. and Singh, R. and Vatsa, M.",
        TITLE = "Attack Agnostic Adversarial Defense via Visual Imperceptible Bound",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "5302-5309",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162396"}

@inproceedings{bb166562,
        AUTHOR = "Watson, M. and Moubayed, N.A.",
        TITLE = "Attack-agnostic Adversarial Detection on Medical Data Using
Explainable Machine Learning",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "8180-8187",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162397"}

@inproceedings{bb166563,
        AUTHOR = "Carrara, F. and Caldelli, R. and Falchi, F. and Amato, G.",
        TITLE = "Defending Neural ODE Image Classifiers from Adversarial Attacks with
Tolerance Randomization",
        BOOKTITLE = MMForWild20,
        YEAR = "2020",
        PAGES = "425-438",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162398"}

@inproceedings{bb166564,
        AUTHOR = "Li, Y.W. and Bai, S. and Xie, C.H. and Liao, Z.Y. and Shen, X.H. and Yuille, A.L.",
        TITLE = "Regional Homogeneity: Towards Learning Transferable Universal
Adversarial Perturbations Against Defenses",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XI:795-813",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162399"}

@inproceedings{bb166565,
        AUTHOR = "Xu, J. and Li, Y. and Jiang, Y. and Xia, S.T.",
        TITLE = "Adversarial Defense Via Local Flatness Regularization",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "2196-2200",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162400"}

@inproceedings{bb166566,
        AUTHOR = "Maung, M. and Pyone, A. and Kiya, H.",
        TITLE = "Encryption Inspired Adversarial Defense For Visual Classification",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "1681-1685",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162401"}

@inproceedings{bb166567,
        AUTHOR = "Shah, S.A.A. and Bougre, M. and Akhtar, N. and Bennamoun, M. and Zhang, L.",
        TITLE = "Efficient Detection of Pixel-Level Adversarial Attacks",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "718-722",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162402"}

@inproceedings{bb166568,
        AUTHOR = "Mao, C.Z. and Cha, A. and Gupta, A. and Wang, H. and Yang, J.F. and Vondrick, C.",
        TITLE = "Generative Interventions for Causal Learning",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3946-3955",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162403"}

@inproceedings{bb166569,
        AUTHOR = "Li, S.S. and Zhu, S.T. and Paul, S. and Roy Chowdhury, A.K. and Song, C.Y. and Krishnamurthy, S. and Swami, A. and Chan, K.S.",
        TITLE = "Connecting the Dots: Detecting Adversarial Perturbations Using Context
Inconsistency",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXIII:396-413",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162404"}

@inproceedings{bb166570,
        AUTHOR = "Li, Y. and Cheng, S.Y. and Su, H. and Zhu, J.",
        TITLE = "Defense Against Adversarial Attacks via Controlling Gradient Leaking on
Embedded Manifolds",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXVIII:753-769",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162405"}

@inproceedings{bb166571,
        AUTHOR = "Rounds, J. and Kingsland, A. and Henry, M.J. and Duskin, K.R.",
        TITLE = "Probing for Artifacts: Detecting Imagenet Model Evasions",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3432-3441",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162406"}

@inproceedings{bb166572,
        AUTHOR = "Kariyappa, S. and Qureshi, M.K.",
        TITLE = "Defending Against Model Stealing Attacks With Adaptive Misinformation",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "767-775",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162407"}

@inproceedings{bb166573,
        AUTHOR = "Cohen, G. and Sapiro, G. and Giryes, R.",
        TITLE = "Detecting Adversarial Samples Using Influence Functions and Nearest
Neighbors",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14441-14450",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162408"}

@inproceedings{bb166574,
        AUTHOR = "Yuan, J. and He, Z.",
        TITLE = "Ensemble Generative Cleaning With Feedback Loops for Defending
Adversarial Attacks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "578-587",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162409"}

@inproceedings{bb166575,
        AUTHOR = "Xiao, C. and Zheng, C.",
        TITLE = "One Man's Trash Is Another Man's Treasure:
Resisting Adversarial Examples by Adversarial Examples",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "409-418",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162410"}

@inproceedings{bb166576,
        AUTHOR = "Zhao, Y. and Tian, Y. and Fowlkes, C. and Shen, W. and Yuille, A.L.",
        TITLE = "Resisting Large Data Variations via Introspective Transformation
Network",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "3069-3078",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162411"}

@inproceedings{bb166577,
        AUTHOR = "Folz, J. and Palacio, S. and Hees, J. and Dengel, A.",
        TITLE = "Adversarial Defense based on Structure-to-Signal Autoencoders",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "3568-3577",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162412"}

@inproceedings{bb166578,
        AUTHOR = "Zheng, S. and Zhu, Z. and Zhang, X. and Liu, Z. and Cheng, J. and Zhao, Y.",
        TITLE = "Distribution-Induced Bidirectional Generative Adversarial Network for
Graph Representation Learning",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "7222-7231",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162413"}

@inproceedings{bb166579,
        AUTHOR = "Benz, P. and Zhang, C.N. and Imtiaz, T. and Kweon, I.S.",
        TITLE = "Double Targeted Universal Adversarial Perturbations",
        BOOKTITLE = ACCV20,
        YEAR = "2020",
        PAGES = "IV:284-300",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162414"}

@inproceedings{bb166580,
        AUTHOR = "Zhang, C.N. and Benz, P. and Imtiaz, T. and Kweon, I.S.",
        TITLE = "Understanding Adversarial Examples From the Mutual Influence of
Images and Perturbations",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14509-14518",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162415"}

@inproceedings{bb166581,
        AUTHOR = "Xie, C. and Tan, M. and Gong, B. and Wang, J. and Yuille, A.L. and Le, Q.V.",
        TITLE = "Adversarial Examples Improve Image Recognition",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "816-825",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162416"}

@inproceedings{bb166582,
        AUTHOR = "Dabouei, A. and Soleymani, S. and Taherkhani, F. and Dawson, J. and Nasrabadi, N.M.",
        TITLE = "SmoothFool: An Efficient Framework for Computing Smooth Adversarial
Perturbations",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "2654-2663",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162417"}

@inproceedings{bb166583,
        AUTHOR = "Bai, Y. and Feng, Y. and Wang, Y. and Dai, T. and Xia, S. and Jiang, Y.",
        TITLE = "Hilbert-Based Generative Defense for Adversarial Examples",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "4783-4792",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162418"}

@inproceedings{bb166584,
        AUTHOR = "Jang, Y. and Zhao, T. and Hong, S. and Lee, H.",
        TITLE = "Adversarial Defense via Learning to Generate Diverse Attacks",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "2740-2749",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162419"}

@inproceedings{bb166585,
        AUTHOR = "Mustafa, A. and Khan, S. and Hayat, M. and Goecke, R. and Shen, J. and Shao, L.",
        TITLE = "Adversarial Defense by Restricting the Hidden Space of Deep Neural
Networks",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "3384-3393",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162420"}

@inproceedings{bb166586,
        AUTHOR = "Taran, O. and Rezaeifar, S. and Holotyak, T. and Voloshynovskiy, S.",
        TITLE = "Defending Against Adversarial Attacks by Randomized Diversification",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "11218-11225",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162421"}

@inproceedings{bb166587,
        AUTHOR = "Sun, B. and Tsai, N.H. and Liu, F.C. and Yu, R. and Su, H.",
        TITLE = "Adversarial Defense by Stratified Convolutional Sparse Coding",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "11439-11448",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162422"}

@inproceedings{bb166588,
        AUTHOR = "Ho, C.H. and Leung, B. and Sandstrom, E. and Chang, Y. and Vasconcelos, N.M.",
        TITLE = "Catastrophic Child's Play:
Easy to Perform, Hard to Defend Adversarial Attacks",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "9221-9229",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162423"}

@inproceedings{bb166589,
        AUTHOR = "Dubey, A. and van der Maaten, L. and Yalniz, Z. and Li, Y.X. and Mahajan, D.",
        TITLE = "Defense Against Adversarial Images Using Web-Scale Nearest-Neighbor
Search",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "8759-8768",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162424"}

@inproceedings{bb166590,
        AUTHOR = "Rony, J. and Hafemann, L.G. and Oliveira, L.S. and Ben Ayed, I. and Sabourin, R. and Granger, E.",
        TITLE = "Decoupling Direction and Norm for Efficient Gradient-Based L2
Adversarial Attacks and Defenses",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4317-4325",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162425"}

@inproceedings{bb166591,
        AUTHOR = "Qiu, Y.X. and Leng, J.W. and Guo, C. and Chen, Q. and Li, C. and Guo, M. and Zhu, Y.H.",
        TITLE = "Adversarial Defense Through Network Profiling Based Path Extraction",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4772-4781",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162426"}

@inproceedings{bb166592,
        AUTHOR = "Jia, X.J. and Wei, X.X. and Cao, X.C. and Foroosh, H.",
        TITLE = "ComDefend: An Efficient Image Compression Model to Defend Adversarial
Examples",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "6077-6085",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162427"}

@inproceedings{bb166593,
        AUTHOR = "Ji, J. and Zhong, B. and Ma, K.",
        TITLE = "Multi-Scale Defense of Adversarial Images",
        BOOKTITLE = ICIP19,
        YEAR = "2019",
        PAGES = "4070-4074",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162428"}

@inproceedings{bb166594,
        AUTHOR = "Saha, S. and Kumar, A. and Sahay, P. and Jose, G. and Kruthiventi, S. and Muralidhara, H.",
        TITLE = "Attack Agnostic Statistical Method for Adversarial Detection",
        BOOKTITLE = SDL-CV19,
        YEAR = "2019",
        PAGES = "798-802",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162429"}

@inproceedings{bb166595,
        AUTHOR = "Taran, O. and Rezaeifar, S. and Voloshynovskiy, S.",
        TITLE = "Bridging Machine Learning and Cryptography in Defence Against
Adversarial Attacks",
        BOOKTITLE = Objectionable18,
        YEAR = "2018",
        PAGES = "II:267-279",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162430"}

@inproceedings{bb166596,
        AUTHOR = "Naseer, M. and Khan, S. and Porikli, F.M.",
        TITLE = "Local Gradients Smoothing: Defense Against Localized Adversarial
Attacks",
        BOOKTITLE = WACV19,
        YEAR = "2019",
        PAGES = "1300-1307",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162431"}

@inproceedings{bb166597,
        AUTHOR = "Akhtar, N. and Liu, J. and Mian, A.",
        TITLE = "Defense Against Universal Adversarial Perturbations",
        BOOKTITLE = CVPR18,
        YEAR = "2018",
        PAGES = "3389-3398",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162432"}

@inproceedings{bb166598,
        AUTHOR = "Moosavi Dezfooli, S.M. and Fawzi, A. and Fawzi, O. and Frossard, P.",
        TITLE = "Universal Adversarial Perturbations",
        BOOKTITLE = CVPR17,
        YEAR = "2017",
        PAGES = "86-94",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT162433"}

@article{bb166599,
        AUTHOR = "Amini, S. and Ghaemmaghami, S.",
        TITLE = "Towards Improving Robustness of Deep Neural Networks to Adversarial
Perturbations",
        JOURNAL = MultMed,
        VOLUME = "22",
        YEAR = "2020",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "1889-1903",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT162434"}