@article{bb167400,
        AUTHOR = "Zhong, X.Y. and Liu, C.",
        TITLE = "Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations
Generation",
        JOURNAL = PAMI,
        VOLUME = "48",
        YEAR = "2026",
        NUMBER = "3",
        MONTH = "March",
        PAGES = "3056-3069",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163233"}

@article{bb167401,
        AUTHOR = "Asnani, V. and Yin, X. and Liu, X.M.",
        TITLE = "Proactive Schemes: A Survey of Adversarial Attacks for Social Good",
        JOURNAL = IJCV,
        VOLUME = "134",
        YEAR = "2026",
        NUMBER = "4",
        MONTH = "April",
        PAGES = "186",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163234"}

@article{bb167402,
        AUTHOR = "Wei, X.X. and Pu, B.Z. and Zhao, S. and Lu, J.F. and Wu, B.Y.",
        TITLE = "Visual Adversarial Attacks and Defenses in the Physical World: A Survey",
        JOURNAL = Surveys,
        VOLUME = "58",
        YEAR = "2026",
        NUMBER = "10",
        MONTH = "April",
        PAGES = "xx-yy",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163235"}

@article{bb167403,
        AUTHOR = "Jiang, C.Z. and Wang, Z.Z. and Dong, M.J. and Gui, J. and Dong, L. and Tang, Y.Y. and Kwok, J.T.Y.",
        TITLE = "Gradient Perturbation Guidance for Boosting Sparse Adversarial Attack
Transferability",
        JOURNAL = CirSysVideo,
        VOLUME = "36",
        YEAR = "2026",
        NUMBER = "5",
        MONTH = "May",
        PAGES = "6361-6373",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163236"}

@article{bb167404,
        AUTHOR = "Xiao, Y. and Pun, C.M. and Peng, F. and Chen, K.Y. and Guan, Q.X.",
        TITLE = "Towards structural transformation-based attack for boosting
transferability of adversarial examples",
        JOURNAL = PR,
        VOLUME = "178",
        YEAR = "2026",
        PAGES = "113360",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163237"}

@article{bb167405,
        AUTHOR = "Zhang, Y.J. and Liu, Y.W. and Li, J.N. and Liu, E. and Zhu, Y. and Argyriou, A.",
        TITLE = "Sparse adversarial attack via robust attack points selection",
        JOURNAL = PR,
        VOLUME = "179",
        YEAR = "2026",
        PAGES = "113490",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163238"}

@article{bb167406,
        AUTHOR = "Dvoracek, P. and Hurtik, P. and Stevuliakova, P.",
        TITLE = "Resolution-invariant no-box attack",
        JOURNAL = CVIU,
        VOLUME = "269",
        YEAR = "2026",
        PAGES = "104767",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163239"}

@article{bb167407,
        AUTHOR = "Zhang, Q.L. and Sun, Y. and Zhang, C.N. and Li, C.Q. and Wang, X. and Song, J.K. and Gao, L.",
        TITLE = "Practical No-Box Adversarial Attacks With Training-Free Hybrid Image
Transformation",
        JOURNAL = MultMed,
        VOLUME = "28",
        YEAR = "2026",
        PAGES = "4497-4508",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163240"}

@article{bb167408,
        AUTHOR = "Wu, Y.H. and Lin, S.W. and Ping, S. and Zhai, X.C. and Fang, Z.Y. and Chen, M.J. and Liu, W.Q.",
        TITLE = "SAGE: Saliency and Geometry Enhanced Transferable Attacks for LiDAR
Point Cloud Perception in Remote Sensing",
        JOURNAL = RS,
        VOLUME = "18",
        YEAR = "2026",
        NUMBER = "13",
        PAGES = "2209",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163241"}

@article{bb167409,
        AUTHOR = "Liu, Y.X. and Peng, B. and Liu, L. and Li, X.",
        TITLE = "S4ST: A Strong, Self-Transferable, faSt, and Simple Scale
Transformation for Data-Free Transferable Targeted Attack",
        JOURNAL = PAMI,
        VOLUME = "48",
        YEAR = "2026",
        NUMBER = "8",
        MONTH = "August",
        PAGES = "9730-9747",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163242"}

@article{bb167410,
        AUTHOR = "Atia, G.",
        TITLE = "Riemannian Adversarial Attacks on Subspace Detectors via the
Grassmann Manifold",
        JOURNAL = SPLetters,
        VOLUME = "33",
        YEAR = "2026",
        PAGES = "3117-3121",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163243"}

@inproceedings{bb167411,
        AUTHOR = "Ramakrishnan, A. and Levin, D.I.W. and Jacobson, A.",
        TITLE = "Rigid Body Adversarial Attacks",
        BOOKTITLE = "3DV25",
        YEAR = "2025",
        PAGES = "1360-1371",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163244"}

@inproceedings{bb167412,
        AUTHOR = "Guo, P. and Gong, C. and Lin, X. and Liu, F. and Lu, Z.C. and Zhang, Q.F. and Wang, Z.K.",
        TITLE = "MOS-Attack: A Scalable Multi-Objective Adversarial Attack Framework",
        BOOKTITLE = CVPR25,
        YEAR = "2025",
        PAGES = "5041-5051",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163245"}

@inproceedings{bb167413,
        AUTHOR = "Lin, T. and Yu, L. and Jin, G. and Li, R. and Wu, P. and Zhang, L.J.",
        TITLE = "Out-of-bounding-box Triggers: A Stealthy Approach to Cheat Object
Detectors",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "LXVI: 269-287",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163246"}

@inproceedings{bb167414,
        AUTHOR = "Sun, Y.H. and Yuan, S.M. and Wang, X. and Gao, L. and Song, J.K.",
        TITLE = "Any Target Can be Offense: Adversarial Example Generation via
Generalized Latent Infection",
        BOOKTITLE = ECCV24,
        YEAR = "2024",
        PAGES = "XX: 383-398",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163247"}

@inproceedings{bb167415,
        AUTHOR = "Zhu, X.P. and Liu, Y.Q. and Hu, Z. and Li, J.M. and Hu, X.L.",
        TITLE = "Infrared Adversarial Car Stickers",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24284-24293",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163248"}

@inproceedings{bb167416,
        AUTHOR = "Chen, D. and Li, S. and Zhang, Y. and Li, C.H. and Kundu, S. and Beerel, P.A.",
        TITLE = "DIA: Diffusion based Inverse Network Attack on Collaborative
Inference",
        BOOKTITLE = FaDE-TCV24,
        YEAR = "2024",
        PAGES = "124-130",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163249"}

@inproceedings{bb167417,
        AUTHOR = "Ahmed, S. and Zhou, R. and Angizi, S. and Rakin, A.S.",
        TITLE = "Deep-TROJ: An Inference Stage Trojan Insertion Algorithm Through
Efficient Weight Replacement Attack",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24810-24819",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163250"}

@inproceedings{bb167418,
        AUTHOR = "Ming, D. and Ren, P. and Wang, Y.L. and Feng, X.",
        TITLE = "Transferable Structural Sparse Adversarial Attack Via Exact Group
Sparsity Training",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24696-24705",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163251"}

@inproceedings{bb167419,
        AUTHOR = "Guesmi, A. and Ding, R. and Hanif, M.A. and Alouani, I. and Shafique, M.",
        TITLE = "DAP: A Dynamic Adversarial Patch for Evading Person Detectors",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24595-24604",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163252"}

@inproceedings{bb167420,
        AUTHOR = "Xu, J.Y. and Lu, Y.T. and Li, Y.D. and Lu, S.Y. and Wang, D.D. and Wei, X.",
        TITLE = "Perturbing Attention Gives You More Bang for the Buck: Subtle Imaging
Perturbations That Efficiently Fool Customized Diffusion Models",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24534-24543",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163253"}

@inproceedings{bb167421,
        AUTHOR = "Mahmood, H. and Elhamifar, E.",
        TITLE = "Semantic-Aware Multi-Label Adversarial Attacks",
        BOOKTITLE = CVPR24,
        YEAR = "2024",
        PAGES = "24251-24262",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163254"}

@inproceedings{bb167422,
        AUTHOR = "Zhang, M.X. and Yu, N. and Wen, R. and Backes, M. and Zhang, Y.",
        TITLE = "Generated Distributions Are All You Need for Membership Inference
Attacks Against Generative Models",
        BOOKTITLE = WACV24,
        YEAR = "2024",
        PAGES = "4827-4837",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163255"}

@inproceedings{bb167423,
        AUTHOR = "Cohen, G. and Giryes, R.",
        TITLE = "Membership Inference Attack Using Self Influence Functions",
        BOOKTITLE = WACV24,
        YEAR = "2024",
        PAGES = "4880-4889",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163256"}

@inproceedings{bb167424,
        AUTHOR = "Ledda, E. and Angioni, D. and Piras, G. and Fumera, G. and Biggio, B. and Roli, F.",
        TITLE = "Adversarial Attacks Against Uncertainty Quantification",
        BOOKTITLE = Uncertainty23,
        YEAR = "2023",
        PAGES = "4601-4610",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163257"}

@inproceedings{bb167425,
        AUTHOR = "Tal, O.B. and Haviv, A. and Bermano, A.H.",
        TITLE = "OMG-Attack: Self-Supervised On-Manifold Generation of Transferable
Evasion Attacks",
        BOOKTITLE = AROW23,
        YEAR = "2023",
        PAGES = "3698-3708",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163258"}

@inproceedings{bb167426,
        AUTHOR = "Ambati, R. and Akhtar, N. and Mian, A. and Rawat, Y.S.",
        TITLE = "PRAT: PRofiling Adversarial aTtacks",
        BOOKTITLE = AROW23,
        YEAR = "2023",
        PAGES = "3669-3678",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163259"}

@inproceedings{bb167427,
        AUTHOR = "Ko, M. and Jin, M. and Wang, C.G. and Jia, R.X.",
        TITLE = "Practical Membership Inference Attacks Against Large-Scale
Multi-Modal Models: A Pilot Study",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4848-4858",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163260"}

@inproceedings{bb167428,
        AUTHOR = "Dong, J.S. and Qiu, H. and Li, Y.M. and Zhang, T.W. and Li, Y.J. and Lai, Z. and Zhang, C. and Xia, S.T.",
        TITLE = "One-bit Flip is All You Need: When Bit-flip Attack Meets Model
Training",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4665-4675",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163261"}

@inproceedings{bb167429,
        AUTHOR = "Chen, X.Q. and Gao, X.T. and Zhao, J.J. and Ye, K.J. and Xu, C.Z.",
        TITLE = "AdvDiffuser: Natural Adversarial Example Synthesis with Diffusion
Models",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4539-4549",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163262"}

@inproceedings{bb167430,
        AUTHOR = "Zhou, T. and Ye, Q. and Luo, W.H. and Zhang, K. and Shi, Z.G. and Chen, J.M.",
        TITLE = "F&F Attack: Adversarial Attack against Multiple Object Trackers
by Inducing False Negatives and False Positives",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4550-4560",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163263"}

@inproceedings{bb167431,
        AUTHOR = "Qian, Y.G. and He, S. and Zhao, C.Y. and Sha, J.Q. and Wang, W. and Wang, B.",
        TITLE = "LEA2: A Lightweight Ensemble Adversarial Attack via Non-overlapping
Vulnerable Frequency Regions",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4487-4498",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163264"}

@inproceedings{bb167432,
        AUTHOR = "Maho, T. and Moosavi Dezfooli, S.M. and Furon, T.",
        TITLE = "How to choose your best allies for a transferable attack?",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4519-4528",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163265"}

@inproceedings{bb167433,
        AUTHOR = "Wang, D.H. and Yao, W. and Jiang, T.S. and Li, C. and Chen, X.Q.",
        TITLE = "RFLA:
A Stealthy Reflected Light Adversarial Attack in the Physical World",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4432-4442",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163266"}

@inproceedings{bb167434,
        AUTHOR = "Zhou, Z.Q. and Hu, S.S. and Zhao, R.Z. and Wang, Q. and Zhang, L.Y. and Hou, J.H. and Jin, H.",
        TITLE = "Downstream-agnostic Adversarial Examples",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4322-4332",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163267"}

@inproceedings{bb167435,
        AUTHOR = "Kim, H.S. and Son, M.J. and Kim, M. and Kwon, M.J. and Kim, C.",
        TITLE = "Breaking Temporal Consistency: Generating Video Universal Adversarial
Perturbations Using Image Models",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4302-4311",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163268"}

@inproceedings{bb167436,
        AUTHOR = "Stolik, T. and Lang, I. and Avidan, S.",
        TITLE = "SAGA: Spectral Adversarial Geometric Attack on 3D Meshes",
        BOOKTITLE = ICCV23,
        YEAR = "2023",
        PAGES = "4261-4271",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163269"}

@inproceedings{bb167437,
        AUTHOR = "Zeng, H. and Zhang, T. and Chen, B.W. and Peng, A.J.",
        TITLE = "Enhancing Targeted Transferability Via Suppressing High-Confidence
Labels",
        BOOKTITLE = ICIP23,
        YEAR = "2023",
        PAGES = "3309-3313",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163270"}

@inproceedings{bb167438,
        AUTHOR = "Kim, Y. and Cho, S.J. and Byun, J. and Kwon, M.J. and Kim, C.",
        TITLE = "Improving Adversarial Transferability Via Feature Translation",
        BOOKTITLE = ICIP23,
        YEAR = "2023",
        PAGES = "3359-3363",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163271"}

@inproceedings{bb167439,
        AUTHOR = "Coscia, P. and Genovese, A. and Scotti, F. and Piuri, V.",
        TITLE = "Adversarial Defect Synthesis for Industrial Products in Low Data
Regime",
        BOOKTITLE = ICIP23,
        YEAR = "2023",
        PAGES = "1360-1364",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163272"}

@inproceedings{bb167440,
        AUTHOR = "Lin, Z. and Peng, A.J. and Zeng, H. and Wu, K.J. and Yu, W.X.",
        TITLE = "An Enhanced Neuron Attribution-Based Attack Via Pixel Dropping",
        BOOKTITLE = ICIP23,
        YEAR = "2023",
        PAGES = "3439-3443",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163273"}

@inproceedings{bb167441,
        AUTHOR = "Ma, M.Z. and Zheng, W.J. and Lv, W.L. and Ren, L. and Su, H. and Yin, Z.X.",
        TITLE = "Multi-Label Adversarial Attack Based on Label Correlation",
        BOOKTITLE = ICIP23,
        YEAR = "2023",
        PAGES = "2050-2054",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163274"}

@inproceedings{bb167442,
        AUTHOR = "Sha, Z.Y. and He, X.L. and Yu, N. and Backes, M. and Zhang, Y.",
        TITLE = "Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image
Encoders",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "16373-16383",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163275"}

@inproceedings{bb167443,
        AUTHOR = "Feng, W.W. and Xu, N.Q. and Zhang, T.Z. and Zhang, Y.D.",
        TITLE = "Dynamic Generative Targeted Attacks with Pattern Injection",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "16404-16414",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163276"}

@inproceedings{bb167444,
        AUTHOR = "Takahashi, H. and Liu, J.J. and Liu, Y.",
        TITLE = "Breaching FedMD: Image Recovery via Paired-Logits Inversion Attack",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12198-12207",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163277"}

@inproceedings{bb167445,
        AUTHOR = "Wei, Z.P. and Chen, J.J. and Wu, Z.X. and Jiang, Y.G.",
        TITLE = "Enhancing the Self-Universality for Transferable Targeted Attacks",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "12281-12290",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163278"}

@inproceedings{bb167446,
        AUTHOR = "Chen, W.X. and Song, D. and Li, B.",
        TITLE = "TrojDiff: Trojan Attacks on Diffusion Models with Diverse Targets",
        BOOKTITLE = CVPR23,
        YEAR = "2023",
        PAGES = "4035-4044",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163279"}

@inproceedings{bb167447,
        AUTHOR = "Zhuang, H.M. and Zhang, Y.H. and Liu, S.",
        TITLE = "A Pilot Study of Query-Free Adversarial Attack against Stable
Diffusion",
        BOOKTITLE = AML23,
        YEAR = "2023",
        PAGES = "2385-2392",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163280"}

@inproceedings{bb167448,
        AUTHOR = "Brown, D. and Kvinge, H.",
        TITLE = "Making Corgis Important for Honeycomb Classification:
Adversarial Attacks on Concept-based Explainability Tools",
        BOOKTITLE = TAG-PRA23,
        YEAR = "2023",
        PAGES = "620-627",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163281"}

@inproceedings{bb167449,
        AUTHOR = "Shukla, N. and Banerjee, S.",
        TITLE = "Generating Adversarial Attacks in the Latent Space",
        BOOKTITLE = GCV23,
        YEAR = "2023",
        PAGES = "730-739",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163282"}

@inproceedings{bb167450,
        AUTHOR = "Zhang, L. and Wang, X.D.",
        TITLE = "Advfilter: Adversarial Example Generated by Perturbing Optical Path",
        BOOKTITLE = "ACCVWS22",
        YEAR = "2022",
        PAGES = "33-44",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163283"}

@inproceedings{bb167451,
        AUTHOR = "Koren, T. and Talker, L. and Dinerstein, M. and Vitek, R.",
        TITLE = "Consistent Semantic Attacks on Optical Flow",
        BOOKTITLE = ACCV22,
        YEAR = "2022",
        PAGES = "VII:501-517",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163284"}

@inproceedings{bb167452,
        AUTHOR = "Wu, H. and Wang, J. and Zhang, J.W. and Luo, X.Y. and Ma, B.",
        TITLE = "Improving the Transferability of Adversarial Attacks Through Both Front
and Rear Vector Method",
        BOOKTITLE = IWDW22,
        YEAR = "2022",
        PAGES = "83-97",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163285"}

@inproceedings{bb167453,
        AUTHOR = "Waseda, F. and Nishikawa, S. and Le, T.N. and Nguyen, H.H. and Echizen, I.",
        TITLE = "Closer Look at the Transferability of Adversarial Examples:
How They Fool Different Models Differently",
        BOOKTITLE = WACV23,
        YEAR = "2023",
        PAGES = "1360-1368",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163286"}

@inproceedings{bb167454,
        AUTHOR = "Shapira, A. and Zolfi, A. and Demetrio, L. and Biggio, B. and Shabtai, A.",
        TITLE = "Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep
Object Detectors",
        BOOKTITLE = WACV23,
        YEAR = "2023",
        PAGES = "4560-4569",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163287"}

@inproceedings{bb167455,
        AUTHOR = "Tan, H.X. and Kotthaus, H.",
        TITLE = "Explainability-Aware One Point Attack for Point Cloud Neural Networks",
        BOOKTITLE = WACV23,
        YEAR = "2023",
        PAGES = "4570-4579",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163288"}

@inproceedings{bb167456,
        AUTHOR = "Chen, C.C. and Zhu, W.J. and Peng, B. and Lu, H.J.",
        TITLE = "Towards Robust Community Detection via Extreme Adversarial Attacks",
        BOOKTITLE = "ICPR22",
        YEAR = "2022",
        PAGES = "2231-2237",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163289"}

@inproceedings{bb167457,
        AUTHOR = "Tavallali, P. and Behzadan, V. and Alizadeh, A. and Ranganath, A. and Singhal, M.",
        TITLE = "Adversarial Label-Poisoning Attacks and Defense for General
Multi-Class Models Based on Synthetic Reduced Nearest Neighbor",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "3717-3722",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163290"}

@inproceedings{bb167458,
        AUTHOR = "Ran, Y. and Wang, Y.G.",
        TITLE = "Sign-OPT+: An Improved Sign Optimization Adversarial Attack",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "461-465",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163291"}

@inproceedings{bb167459,
        AUTHOR = "Wang, D. and Lin, J.Y. and Wang, Y.G.",
        TITLE = "Query-Efficient Adversarial Attack Based On Latin Hypercube Sampling",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "546-550",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163292"}

@inproceedings{bb167460,
        AUTHOR = "Aneja, S. and Markhasin, L. and Nießner, M.",
        TITLE = "TAFIM: Targeted Adversarial Attacks Against Facial Image Manipulations",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "XIV:58-75",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163293"}

@inproceedings{bb167461,
        AUTHOR = "Long, Y.Y. and Zhang, Q.L. and Zeng, B. and Gao, L.L. and Liu, X.L. and Zhang, J. and Song, J.K.",
        TITLE = "Frequency Domain Model Augmentation for Adversarial Attack",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "IV:549-566",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163294"}

@inproceedings{bb167462,
        AUTHOR = "Yuan, Z. and Zhang, J. and Shan, S.G.",
        TITLE = "Adaptive Image Transformations for Transfer-Based Adversarial Attack",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "V:1-17",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163295"}

@inproceedings{bb167463,
        AUTHOR = "Cao, Y.L. and Xiao, C.W. and Anandkumar, A. and Xu, D. and Pavone, M.",
        TITLE = "AdvDO: Realistic Adversarial Attacks for Trajectory Prediction",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "V:36-52",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163296"}

@inproceedings{bb167464,
        AUTHOR = "Bai, J.W. and Gao, K.F. and Gong, D.H. and Xia, S.T. and Li, Z.F. and Liu, W.",
        TITLE = "Hardly Perceptible Trojan Attack Against Neural Networks with Bit Flips",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "V:104-121",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163297"}

@inproceedings{bb167465,
        AUTHOR = "Liu, G. and Huang, X.W. and Yi, X.P.",
        TITLE = "Adversarial Label Poisoning Attack on Graph Neural Networks via Label
Propagation",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "V:227-243",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163298"}

@inproceedings{bb167466,
        AUTHOR = "Byun, J. and Shim, K. and Go, H. and Kim, C.",
        TITLE = "Hidden Conditional Adversarial Attacks",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "1306-1310",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163299"}

@inproceedings{bb167467,
        AUTHOR = "Cao, X.Y. and Gong, N.Z.Q.",
        TITLE = "MPAF: Model Poisoning Attacks to Federated Learning based on Fake
Clients",
        BOOKTITLE = FedVision22,
        YEAR = "2022",
        PAGES = "3395-3403",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163300"}

@inproceedings{bb167468,
        AUTHOR = "Xu, Q.L. and Tao, G.H. and Zhang, X.Y.",
        TITLE = "Bounded Adversarial Attack on Deep Content Features",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15182-15191",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163301"}

@inproceedings{bb167469,
        AUTHOR = "Luo, C. and Lin, Q.L. and Xie, W.C. and Wu, B.Z. and Xie, J.H. and Shen, L.L.",
        TITLE = "Frequency-driven Imperceptible Adversarial Attack on Semantic
Similarity",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15294-15303",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163302"}

@inproceedings{bb167470,
        AUTHOR = "Suryanto, N. and Kim, Y. and Kang, H. and Larasati, H.T. and Yun, Y.Y. and Le, T.T.H. and Yang, H. and Oh, S.Y. and Kim, H.",
        TITLE = "DTA: Physical Camouflage Attacks using Differentiable Transformation
Network",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15284-15293",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163303"}

@inproceedings{bb167471,
        AUTHOR = "Zhong, Y.Q. and Liu, X.M. and Zhai, D. and Jiang, J.J. and Ji, X.Y.",
        TITLE = "Shadows can be Dangerous: Stealthy and Effective Physical-world
Adversarial Attack by Natural Phenomenon",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15324-15333",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163304"}

@inproceedings{bb167472,
        AUTHOR = "Tong, A.C.H.",
        TITLE = "Symmetric adversarial poisoning against deep learning",
        BOOKTITLE = IPTA20,
        YEAR = "2020",
        PAGES = "1-5",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163305"}

@inproceedings{bb167473,
        AUTHOR = "Li, Y.M. and Wen, C.C. and Juefei Xu, F. and Feng, C.",
        TITLE = "Fooling LiDAR Perception via Adversarial Trajectory Perturbation",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7878-7887",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163306"}

@inproceedings{bb167474,
        AUTHOR = "Wang, X.S. and He, X.R. and Wang, J.D. and He, K.",
        TITLE = "Admix: Enhancing the Transferability of Adversarial Attacks",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "16138-16147",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163307"}

@inproceedings{bb167475,
        AUTHOR = "Chen, S. and Kahla, M. and Jia, R.X. and Qi, G.J.",
        TITLE = "Knowledge-Enriched Distributional Model Inversion Attacks",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "16158-16167",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163308"}

@inproceedings{bb167476,
        AUTHOR = "Zhou, M. and Wang, L. and Niu, Z.X. and Zhang, Q.L. and Xu, Y.H. and Zheng, N.N. and Hua, G.",
        TITLE = "Practical Relative Order Attack in Deep Ranking",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "16393-16402",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163309"}

@inproceedings{bb167477,
        AUTHOR = "Shafran, A. and Peleg, S. and Hoshen, Y.",
        TITLE = "Membership Inference Attacks are Easier on Difficult Problems",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "14800-14809",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163310"}

@inproceedings{bb167478,
        AUTHOR = "Naseer, M. and Khan, S. and Hayat, M. and Khan, F.S. and Porikli, F.M.",
        TITLE = "On Generating Transferable Targeted Perturbations",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7688-7697",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163311"}

@inproceedings{bb167479,
        AUTHOR = "Chen, H. and Fu, C. and Zhao, J. and Koushanfar, F.",
        TITLE = "ProFlip: Targeted Trojan Attack with Progressive Bit Flips",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7698-7707",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163312"}

@inproceedings{bb167480,
        AUTHOR = "Rony, J. and Granger, E. and Pedersoli, M. and Ayed, I.B.",
        TITLE = "Augmented Lagrangian Adversarial Attacks",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7718-7727",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163313"}

@inproceedings{bb167481,
        AUTHOR = "Yuan, Z. and Zhang, J. and Jia, Y. and Tan, C.Q. and Xue, T. and Shan, S.G.",
        TITLE = "Meta Gradient Adversarial Attack",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7728-7737",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163314"}

@inproceedings{bb167482,
        AUTHOR = "Park, G.Y. and Lee, S.W.",
        TITLE = "Reliably fast adversarial training via latent adversarial
perturbation",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7738-7747",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163315"}

@inproceedings{bb167483,
        AUTHOR = "Tu, J. and Wang, T. and Wang, J.K. and Manivasagam, S. and Ren, M. and Urtasun, R.",
        TITLE = "Adversarial Attacks On Multi-Agent Communication",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7748-7757",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163316"}

@inproceedings{bb167484,
        AUTHOR = "Feng, W.W. and Wu, B.Y. and Zhang, T.Z. and Zhang, Y. and Zhang, Y.D.",
        TITLE = "Meta-Attack: Class-agnostic and Model-agnostic Physical Adversarial
Attack",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7767-7776",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163317"}

@inproceedings{bb167485,
        AUTHOR = "Kim, J.Y. and Hua, B.S. and Nguyen, D.T. and Yeung, S.K.",
        TITLE = "Minimal Adversarial Examples for Deep Learning on 3D Point Clouds",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7777-7786",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163318"}

@inproceedings{bb167486,
        AUTHOR = "Stutz, D. and Hein, M. and Schiele, B.",
        TITLE = "Relating Adversarially Robust Generalization to Flat Minima",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7787-7797",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163319"}

@inproceedings{bb167487,
        AUTHOR = "Li, C. and Gao, S.Q. and Deng, C. and Liu, W. and Huang, H.",
        TITLE = "Adversarial Attack on Deep Cross-Modal Hamming Retrieval",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "2198-2207",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163320"}

@inproceedings{bb167488,
        AUTHOR = "Duan, R.J. and Chen, Y.F. and Niu, D. and Yang, Y. and Qin, A.K. and He, Y.",
        TITLE = "AdvDrop: Adversarial Attack to DNNs by Dropping Information",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7486-7495",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163321"}

@inproceedings{bb167489,
        AUTHOR = "Hwang, J. and Kim, J.H. and Choi, J.H. and Lee, J.S.",
        TITLE = "Just One Moment: Structural Vulnerability of Deep Action Recognition
against One Frame Attack",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7648-7656",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163322"}

@inproceedings{bb167490,
        AUTHOR = "Moayeri, M. and Feizi, S.",
        TITLE = "Sample Efficient Detection and Classification of Adversarial Attacks
via Self-Supervised Embeddings",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7657-7666",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163323"}

@inproceedings{bb167491,
        AUTHOR = "Wang, X. and Lin, S.Y. and Zhang, H. and Zhu, Y.F. and Zhang, Q.S.",
        TITLE = "Interpreting Attributions and Interactions of Adversarial Attacks",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "1075-1084",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163324"}

@inproceedings{bb167492,
        AUTHOR = "Kumar, C. and Kumar, D. and Shao, M.",
        TITLE = "Generative Adversarial Attack on Ensemble Clustering",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "3839-3848",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163325"}

@inproceedings{bb167493,
        AUTHOR = "Du, A. and Chen, B. and Chin, T.J. and Law, Y.W. and Sasdelli, M. and Rajasegaran, R. and Campbell, D.",
        TITLE = "Physical Adversarial Attacks on an Aerial Imagery Object Detector",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "3798-3808",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163326"}

@inproceedings{bb167494,
        AUTHOR = "Zhao, B.Y. and Lao, Y.J.",
        TITLE = "Towards Class-Oriented Poisoning Attacks Against Neural Networks",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "2244-2253",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163327"}

@inproceedings{bb167495,
        AUTHOR = "Chen, Z.H. and Wang, C.H. and Crandall, D.",
        TITLE = "Semantically Stealthy Adversarial Attacks against Segmentation Models",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "2846-2855",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163328"}

@inproceedings{bb167496,
        AUTHOR = "Yin, M.J. and Li, S. and Song, C.Y. and Asif, M.S. and Roy Chowdhury, A.K. and Krishnamurthy, S.V.",
        TITLE = "ADC: Adversarial attacks against object Detection that evade Context
consistency checks",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "2836-2845",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163329"}

@inproceedings{bb167497,
        AUTHOR = "Li, X.R. and Cui, W.Y. and Huang, J.W. and Wang, W.Y. and Chen, J.W.",
        TITLE = "Regularized Intermediate Layers Attack:
Adversarial Examples With High Transferability",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "1904-1908",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163330"}

@inproceedings{bb167498,
        AUTHOR = "Bai, T. and Zhao, J. and Zhu, J.L. and Han, S.D. and Chen, J.F. and Li, B. and Kot, A.",
        TITLE = "AI-GAN: Attack-Inspired Generation of Adversarial Examples",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "2543-2547",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163331"}

@inproceedings{bb167499,
        AUTHOR = "Abdelfattah, M. and Yuan, K.W. and Wang, Z.J. and Ward, R.",
        TITLE = "Towards Universal Physical Attacks on Cascaded Camera-Lidar 3d Object
Detection Models",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3592-3596",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT163332"}

Last update: