@inproceedings{bb121700,
        AUTHOR = "Taran, O. and Rezaeifar, S. and Voloshynovskiy, S.",
        TITLE = "Bridging Machine Learning and Cryptography in Defence Against
Adversarial Attacks",
        BOOKTITLE = Objectionable18,
        YEAR = "2018",
        PAGES = "II:267-279",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT117924"}

@inproceedings{bb121701,
        AUTHOR = "Naseer, M. and Khan, S. and Porikli, F.M.",
        TITLE = "Local Gradients Smoothing: Defense Against Localized Adversarial
Attacks",
        BOOKTITLE = WACV19,
        YEAR = "2019",
        PAGES = "1300-1307",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT117925"}

@inproceedings{bb121702,
        AUTHOR = "Akhtar, N. and Liu, J. and Mian, A.",
        TITLE = "Defense Against Universal Adversarial Perturbations",
        BOOKTITLE = CVPR18,
        YEAR = "2018",
        PAGES = "3389-3398",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT117926"}

@inproceedings{bb121703,
        AUTHOR = "Liao, F. and Liang, M. and Dong, Y. and Pang, T. and Hu, X. and Zhu, J.",
        TITLE = "Defense Against Adversarial Attacks Using High-Level Representation
Guided Denoiser",
        BOOKTITLE = CVPR18,
        YEAR = "2018",
        PAGES = "1778-1787",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT117927"}

@inproceedings{bb121704,
        AUTHOR = "Behpour, S. and Xing, W. and Ziebart, B.D.",
        TITLE = "ARC: Adversarial Robust Cuts for Semi-Supervised and Multi-label
Classification",
        BOOKTITLE = WiCV18,
        YEAR = "2018",
        PAGES = "1986-19862",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT117928"}

@inproceedings{bb121705,
        AUTHOR = "Karim, R. and Islam, M.A. and Mohammed, N. and Bruce, N.D.B.",
        TITLE = "On the Robustness of Deep Learning Models to Universal Adversarial
Attack",
        BOOKTITLE = CRV18,
        YEAR = "2018",
        PAGES = "55-62",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT117929"}

@inproceedings{bb121706,
        AUTHOR = "Jakubovitz, D. and Giryes, R.",
        TITLE = "Improving DNN Robustness to Adversarial Attacks Using Jacobian
Regularization",
        BOOKTITLE = ECCV18,
        YEAR = "2018",
        PAGES = "XII: 525-541",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT117930"}

@inproceedings{bb121707,
        AUTHOR = "Rozsa, A. and Gunther, M. and Boult, T.E.",
        TITLE = "Towards Robust Deep Neural Networks with BANG",
        BOOKTITLE = WACV18,
        YEAR = "2018",
        PAGES = "803-811",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT117931"}

@inproceedings{bb121708,
        AUTHOR = "Lu, J. and Issaranon, T. and Forsyth, D.A.",
        TITLE = "SafetyNet: Detecting and Rejecting Adversarial Examples Robustly",
        BOOKTITLE = ICCV17,
        YEAR = "2017",
        PAGES = "446-454",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT117932"}

@inproceedings{bb121709,
        AUTHOR = "Mukuta, Y. and Ushiku, Y. and Harada, T.",
        TITLE = "Spatial-Temporal Weighted Pyramid Using Spatial Orthogonal Pooling",
        BOOKTITLE = CEFR-LCV17,
        YEAR = "2017",
        PAGES = "1041-1049",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT117933"}

@inproceedings{bb121710,
        AUTHOR = "Moosavi Dezfooli, S.M. and Fawzi, A. and Fawzi, O. and Frossard, P.",
        TITLE = "Universal Adversarial Perturbations",
        BOOKTITLE = CVPR17,
        YEAR = "2017",
        PAGES = "86-94",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT117934"}

@article{bb121711,
        AUTHOR = "Biggio, B. and Roli, F.",
        TITLE = "Wild Patterns: Ten Years After the Rise of Adversarial Machine
Learning",
        JOURNAL = PR,
        VOLUME = "84",
        YEAR = "2018",
        PAGES = "317-331",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117935"}

@article{bb121712,
        AUTHOR = "Hang, J. and Han, K. and Chen, H. and Li, Y.",
        TITLE = "Ensemble adversarial black-box attacks against deep learning systems",
        JOURNAL = PR,
        VOLUME = "101",
        YEAR = "2020",
        PAGES = "107184",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117936"}

@article{bb121713,
        AUTHOR = "Croce, F. and Rauber, J. and Hein, M.",
        TITLE = "Scaling up the Randomized Gradient-Free Adversarial Attack Reveals
Overestimation of Robustness Using Established Attacks",
        JOURNAL = IJCV,
        VOLUME = "128",
        YEAR = "2020",
        NUMBER = "4",
        MONTH = "April",
        PAGES = "1028-1046",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117937"}

@inproceedings{bb121714,
        AUTHOR = "Croce, F. and Hein, M.",
        TITLE = "A Randomized Gradient-Free Attack on ReLU Networks",
        BOOKTITLE = GCPR18,
        YEAR = "2018",
        PAGES = "215-227",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117938"}

@article{bb121715,
        AUTHOR = "Romano, Y. and Aberdam, A. and Sulam, J. and Elad, M.",
        TITLE = "Adversarial Noise Attacks of Deep Learning Architectures:
Stability Analysis via Sparse-Modeled Signals",
        JOURNAL = JMIV,
        VOLUME = "62",
        YEAR = "2020",
        NUMBER = "3",
        MONTH = "April",
        PAGES = "313-327",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117939"}

@article{bb121716,
        AUTHOR = "Ozbulak, U. and Gasparyan, M. and de Neve, W. and van Messem, A.",
        TITLE = "Perturbation analysis of gradient-based adversarial attacks",
        JOURNAL = PRL,
        VOLUME = "135",
        YEAR = "2020",
        PAGES = "313-320",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117940"}

@article{bb121717,
        AUTHOR = "Wan, S. and Wu, T.Y. and Hsu, H.W. and Wong, W.H. and Lee, C.Y.",
        TITLE = "Feature Consistency Training With JPEG Compressed Images",
        JOURNAL = CirSysVideo,
        VOLUME = "30",
        YEAR = "2020",
        NUMBER = "12",
        MONTH = "December",
        PAGES = "4769-4780",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117941"}

@article{bb121718,
        AUTHOR = "Che, Z. and Borji, A. and Zhai, G. and Ling, S. and Li, J. and Tian, Y. and Guo, G. and Le Callet, P.",
        TITLE = "Adversarial Attack Against Deep Saliency Models Powered by
Non-Redundant Priors",
        JOURNAL = IP,
        VOLUME = "30",
        YEAR = "2021",
        PAGES = "1973-1988",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117942"}

@article{bb121719,
        AUTHOR = "Xu, Y. and Du, B. and Zhang, L.",
        TITLE = "Assessing the Threat of Adversarial Examples on Deep Neural Networks
for Remote Sensing Scene Classification: Attacks and Defenses",
        JOURNAL = GeoRS,
        VOLUME = "59",
        YEAR = "2021",
        NUMBER = "2",
        MONTH = "February",
        PAGES = "1604-1617",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117943"}

@article{bb121720,
        AUTHOR = "Correia Silva, J.R. and Berriel, R.F. and Badue, C. and de Souza, A.F. and Oliveira Santos, T.",
        TITLE = "Copycat CNN: Are random non-Labeled data enough to steal knowledge
from black-box models?",
        JOURNAL = PR,
        VOLUME = "113",
        YEAR = "2021",
        PAGES = "107830",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117944"}

@article{bb121721,
        AUTHOR = "Xiao, Y. and Pun, C.M. and Liu, B.",
        TITLE = "Fooling deep neural detection networks with adaptive object-oriented
adversarial perturbation",
        JOURNAL = PR,
        VOLUME = "115",
        YEAR = "2021",
        PAGES = "107903",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117945"}

@article{bb121722,
        AUTHOR = "Yamanaka, K. and Takahashi, K. and Fujii, T. and Matsumoto, R.",
        TITLE = "Simultaneous Attack on CNN-Based Monocular Depth Estimation and Optical
Flow Estimation",
        JOURNAL = IEICE,
        VOLUME = "E104-D",
        YEAR = "2021",
        NUMBER = "5",
        MONTH = "May",
        PAGES = "785-788",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117946"}

@article{bb121723,
        AUTHOR = "Lin, H.Y. and Biggio, B.",
        TITLE = "Adversarial Machine Learning: Attacks From Laboratories to the Real
World",
        JOURNAL = Computer,
        VOLUME = "54",
        YEAR = "2021",
        NUMBER = "5",
        MONTH = "May",
        PAGES = "56-60",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117947"}

@article{bb121724,
        AUTHOR = "Wang, B. and Zhao, M. and Wang, W. and Wei, F. and Qin, Z. and Ren, K.",
        TITLE = "Are You Confident That You Have Successfully Generated Adversarial
Examples?",
        JOURNAL = CirSysVideo,
        VOLUME = "31",
        YEAR = "2021",
        NUMBER = "6",
        MONTH = "June",
        PAGES = "2089-2099",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117948"}

@article{bb121725,
        AUTHOR = "Gragnaniello, D. and Marra, F. and Verdoliva, L. and Poggi, G.",
        TITLE = "Perceptual quality-preserving black-box attack against deep learning
image classifiers",
        JOURNAL = PRL,
        VOLUME = "147",
        YEAR = "2021",
        PAGES = "142-149",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117949"}

@article{bb121726,
        AUTHOR = "Tang, S.L. and Huang, X.L. and Chen, M.J. and Sun, C.J. and Yang, J.",
        TITLE = "Adversarial Attack Type I: Cheat Classifiers by Significant Changes",
        JOURNAL = PAMI,
        VOLUME = "43",
        YEAR = "2021",
        NUMBER = "3",
        MONTH = "March",
        PAGES = "1100-1109",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117950"}

@article{bb121727,
        AUTHOR = "Upadhyay, U. and Mukherjee, P.",
        TITLE = "Generating Out of Distribution Adversarial Attack Using Latent Space
Poisoning",
        JOURNAL = SPLetters,
        VOLUME = "28",
        YEAR = "2021",
        PAGES = "523-527",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117951"}

@article{bb121728,
        AUTHOR = "Wang, L. and Yoon, K.J.",
        TITLE = "PSAT-GAN: Efficient Adversarial Attacks Against Holistic Scene
Understanding",
        JOURNAL = IP,
        VOLUME = "30",
        YEAR = "2021",
        PAGES = "7541-7553",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117952"}

@inproceedings{bb121729,
        AUTHOR = "Chen, Z.K. and Xie, L.X. and Pang, S.M. and He, Y. and Tian, Q.",
        TITLE = "Appending Adversarial Frames for Universal Video Attack",
        BOOKTITLE = WACV21,
        YEAR = "2021",
        PAGES = "3198-3207",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117953"}

@inproceedings{bb121730,
        AUTHOR = "Tan, Y.X.M. and Elovici, Y. and Binder, A.",
        TITLE = "Adaptive Noise Injection for Training Stochastic Student Networks
from Deterministic Teachers",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "7587-7594",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117954"}

@inproceedings{bb121731,
        AUTHOR = "Hu, S.N. and Zhang, Y. and Laha, S. and Sharma, A. and Foroosh, H.",
        TITLE = "CCA: Exploring the Possibility of Contextual Camouflage Attack on
Object Detection",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "7647-7654",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117955"}

@inproceedings{bb121732,
        AUTHOR = "Cancela, B. and Bolon Canedo, V. and Alonso Betanzos, A.",
        TITLE = "A delayed Elastic-Net approach for performing adversarial attacks",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "378-384",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117956"}

@inproceedings{bb121733,
        AUTHOR = "Li, X.C. and Zhang, X.Y. and Yin, F. and Liu, C.L.",
        TITLE = "F-mixup: Attack CNNs From Fourier Perspective",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "541-548",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117957"}

@inproceedings{bb121734,
        AUTHOR = "Grosse, K. and Smith, M.T. and Backes, M.",
        TITLE = "Killing Four Birds with one Gaussian Process:
The Relation between different Test-Time Attacks",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "4696-4703",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117958"}

@inproceedings{bb121735,
        AUTHOR = "Barati, R. and Safabakhsh, R. and Rahmati, M.",
        TITLE = "Towards Explaining Adversarial Examples Phenomenon in Artificial
Neural Networks",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "7036-7042",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117959"}

@inproceedings{bb121736,
        AUTHOR = "Li, W.J. and Tondi, B. and Ni, R.R. and Barni, M.",
        TITLE = "Increased-confidence Adversarial Examples for Deep Learning
Counter-forensics",
        BOOKTITLE = MMForWild20,
        YEAR = "2020",
        PAGES = "411-424",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117960"}

@inproceedings{bb121737,
        AUTHOR = "Dong, X.S. and Liu, H. and Ji, R.R. and Cao, L.J. and Ye, Q.X. and Liu, J.Z. and Tian, Q.",
        TITLE = "API-net: Robust Generative Classifier via a Single Discriminator",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XIII:379-394",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117961"}

@inproceedings{bb121738,
        AUTHOR = "Liu, A.S. and Huang, T.R. and Liu, X.L. and Xu, Y.T. and Ma, Y.Q. and Chen, X. and Maybank, S.J. and Tao, D.C.",
        TITLE = "Spatiotemporal Attacks for Embodied Agents",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XVII:122-138",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117962"}

@inproceedings{bb121739,
        AUTHOR = "Fan, Y. and Wu, B.Y. and Li, T.H. and Zhang, Y. and Li, M.Y. and Li, Z.F. and Yang, Y.",
        TITLE = "Sparse Adversarial Attack via Perturbation Factorization",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXII:35-50",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117963"}

@inproceedings{bb121740,
        AUTHOR = "Guo, J.F. and Liu, C.",
        TITLE = "Practical Poisoning Attacks on Neural Networks",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXVII:142-158",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117964"}

@inproceedings{bb121741,
        AUTHOR = "Liu, Y.F. and Ma, X.J. and Bailey, J. and Lu, F.",
        TITLE = "Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "X:182-199",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117965"}

@inproceedings{bb121742,
        AUTHOR = "Feng, X.J. and Yao, H.X. and Che, W.B. and Zhang, S.P.",
        TITLE = "An Effective Way to Boost Black-box Adversarial Attack",
        BOOKTITLE = MMMod20,
        YEAR = "2020",
        PAGES = "I:393-404",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117966"}

@inproceedings{bb121743,
        AUTHOR = "Costales, R. and Mao, C. and Norwitz, R. and Kim, B. and Yang, J.",
        TITLE = "Live Trojan Attacks on Deep Neural Networks",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3460-3469",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117967"}

@inproceedings{bb121744,
        AUTHOR = "Haque, M. and Chauhan, A. and Liu, C. and Yang, W.",
        TITLE = "ILFO: Adversarial Attack on Adaptive Neural Networks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14252-14261",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117968"}

@inproceedings{bb121745,
        AUTHOR = "Zhou, M. and Wu, J. and Liu, Y. and Liu, S. and Zhu, C.",
        TITLE = "DaST: Data-Free Substitute Training for Adversarial Attacks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "231-240",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117969"}

@inproceedings{bb121746,
        AUTHOR = "Ganeshan, A. and Vivek, B.S. and Radhakrishnan, V.B.",
        TITLE = "FDA: Feature Disruptive Attack",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "8068-8078",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117970"}

@inproceedings{bb121747,
        AUTHOR = "Han, J. and Dong, X. and Zhang, R. and Chen, D. and Zhang, W. and Yu, N. and Luo, P. and Wang, X.",
        TITLE = "Once a MAN: Towards Multi-Target Attack via Learning Multi-Target
Adversarial Network Once",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "5157-5166",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117971"}

@inproceedings{bb121748,
        AUTHOR = "Deng, Y. and Karam, L.J.",
        TITLE = "Universal Adversarial Attack Via Enhanced Projected Gradient Descent",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "1241-1245",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117972"}

@inproceedings{bb121749,
        AUTHOR = "Sun, C. and Chen, S. and Cai, J. and Huang, X.",
        TITLE = "Type I Attack For Generative Models",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "593-597",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117973"}

@inproceedings{bb121750,
        AUTHOR = "Yang, C.L. and Kortylewski, A. and Xie, C. and Cao, Y.Z. and Yuille, A.L.",
        TITLE = "Patchattack: A Black-box Texture-based Attack with Reinforcement
Learning",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXVI:681-698",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117974"}

@inproceedings{bb121751,
        AUTHOR = "Braunegg, A. and Chakraborty, A. and Krumdick, M. and Lape, N. and Leary, S. and Manville, K. and Merkhofer, E. and Strickhart, L. and Walmer, M.",
        TITLE = "Apricot: A Dataset of Physical Adversarial Attacks on Object Detection",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXI:35-50",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117975"}

@inproceedings{bb121752,
        AUTHOR = "Zhang, H. and Zhu, L.C. and Zhu, Y. and Yang, Y.",
        TITLE = "Motion-Excited Sampler: Video Adversarial Attack with Sparked Prior",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XX:240-256",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117976"}

@inproceedings{bb121753,
        AUTHOR = "Gao, L.L. and Zhang, Q.L. and Song, J.K. and Liu, X.L. and Shen, H.T.",
        TITLE = "Patch-wise Attack for Fooling Deep Neural Network",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXVIII:307-322",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117977"}

@inproceedings{bb121754,
        AUTHOR = "Andriushchenko, M. and Croce, F. and Flammarion, N. and Hein, M.",
        TITLE = "Square Attack: A Query-efficient Black-box Adversarial Attack via
Random Search",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXIII:484-501",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117978"}

@inproceedings{bb121755,
        AUTHOR = "Bai, J.W. and Chen, B. and Li, Y.M. and Wu, D.X. and Guo, W.W. and Xia, S.T. and Yang, E.H.",
        TITLE = "Targeted Attack for Deep Hashing Based Retrieval",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "I:618-634",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117979"}

@inproceedings{bb121756,
        AUTHOR = "Nakka, K.K. and Salzmann, M.",
        TITLE = "Indirect Local Attacks for Context-aware Semantic Segmentation Networks",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "V:611-628",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117980"}

@inproceedings{bb121757,
        AUTHOR = "Wu, Z.X. and Lim, S.N. and Davis, L.S. and Goldstein, T.",
        TITLE = "Making an Invisibility Cloak: Real World Adversarial Attacks on Object
Detectors",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "IV:1-17",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117981"}

@inproceedings{bb121758,
        AUTHOR = "Li, Q.Z. and Guo, Y.W. and Chen, H.",
        TITLE = "Yet Another Intermediate-level Attack",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XVI: 241-257",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117982"}

@inproceedings{bb121759,
        AUTHOR = "Zhao, S. and Ma, X. and Zheng, X. and Bailey, J. and Chen, J. and Jiang, Y.",
        TITLE = "Clean-Label Backdoor Attacks on Video Recognition Models",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14431-14440",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117983"}

@inproceedings{bb121760,
        AUTHOR = "Kolouri, S. and Saha, A. and Pirsiavash, H. and Hoffmann, H.",
        TITLE = "Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "298-307",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117984"}

@inproceedings{bb121761,
        AUTHOR = "Li, J. and Ji, R. and Liu, H. and Liu, J. and Zhong, B. and Deng, C. and Tian, Q.",
        TITLE = "Projection Probability-Driven Black-Box Attack",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "359-368",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117985"}

@inproceedings{bb121762,
        AUTHOR = "Huang, L. and Gao, C. and Zhou, Y. and Xie, C. and Yuille, A.L. and Zou, C. and Liu, N.",
        TITLE = "Universal Physical Camouflage Attacks on Object Detectors",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "717-726",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117986"}

@inproceedings{bb121763,
        AUTHOR = "Yan, B. and Wang, D. and Lu, H. and Yang, X.",
        TITLE = "Cooling-Shrinking Attack:
Blinding the Tracker With Imperceptible Noises",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "987-996",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117987"}

@inproceedings{bb121764,
        AUTHOR = "Li, H. and Xu, X. and Zhang, X. and Yang, S. and Li, B.",
        TITLE = "QEBA: Query-Efficient Boundary-Based Blackbox Attack",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "1218-1227",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117988"}

@inproceedings{bb121765,
        AUTHOR = "Li, M. and Deng, C. and Li, T. and Yan, J. and Gao, X. and Huang, H.",
        TITLE = "Towards Transferable Targeted Attack",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "638-646",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117989"}

@inproceedings{bb121766,
        AUTHOR = "Truong, L. and Jones, C. and Hutchinson, B. and August, A. and Praggastis, B. and Jasper, R. and Nichols, N. and Tuor, A.",
        TITLE = "Systematic Evaluation of Backdoor Data Poisoning Attacks on Image
Classifiers",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3422-3431",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117990"}

@inproceedings{bb121767,
        AUTHOR = "Gupta, S. and Dube, P. and Verma, A.",
        TITLE = "Improving the affordability of robustness training for DNNs",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3383-3392",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117991"}

@inproceedings{bb121768,
        AUTHOR = "Zhang, Z. and Wu, T.",
        TITLE = "Learning Ordered Top-k Adversarial Attacks via Adversarial
Distillation",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3364-3373",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117992"}

@inproceedings{bb121769,
        AUTHOR = "Chen, X. and Yan, X. and Zheng, F. and Jiang, Y. and Xia, S. and Zhao, Y. and Ji, R.",
        TITLE = "One-Shot Adversarial Attacks on Visual Tracking With Dual Attention",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "10173-10182",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117993"}

@inproceedings{bb121770,
        AUTHOR = "Zhou, H. and Chen, D. and Liao, J. and Chen, K. and Dong, X. and Liu, K. and Zhang, W. and Hua, G. and Yu, N.",
        TITLE = "LG-GAN: Label Guided Adversarial Network for Flexible Targeted Attack
of Point Cloud Based Deep Networks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "10353-10362",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117994"}

@inproceedings{bb121771,
        AUTHOR = "Rahmati, A. and Moosavi Dezfooli, S. and Frossard, P. and Dai, H.",
        TITLE = "GeoDA: A Geometric Framework for Black-Box Adversarial Attacks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "8443-8452",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117995"}

@inproceedings{bb121772,
        AUTHOR = "Duan, R. and Ma, X. and Wang, Y. and Bailey, J. and Qin, A.K. and Yang, Y.",
        TITLE = "Adversarial Camouflage: Hiding Physical-World Attacks With Natural
Styles",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "997-1005",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117996"}

@inproceedings{bb121773,
        AUTHOR = "Machiraju, H. and Balasubramanian, V.N.",
        TITLE = "A Little Fog for a Large Turn",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "2891-2900",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117997"}

@inproceedings{bb121774,
        AUTHOR = "Yang, C.H. and Liu, Y. and Chen, P. and Ma, X. and Tsai, Y.J.",
        TITLE = "When Causal Intervention Meets Adversarial Examples and Image Masking
for Deep Neural Networks",
        BOOKTITLE = ICIP19,
        YEAR = "2019",
        PAGES = "3811-3815",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117998"}

@inproceedings{bb121775,
        AUTHOR = "Yao, H. and Regan, M. and Yang, Y. and Ren, Y.",
        TITLE = "Image Decomposition and Classification Through a Generative Model",
        BOOKTITLE = ICIP19,
        YEAR = "2019",
        PAGES = "400-404",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT117999"}

@inproceedings{bb121776,
        AUTHOR = "Brunner, T. and Diehl, F. and Le, M.T. and Knoll, A.",
        TITLE = "Guessing Smart:
Biased Sampling for Efficient Black-Box Adversarial Attacks",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "4957-4965",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118000"}

@inproceedings{bb121777,
        AUTHOR = "Liu, Y.J. and Moosavi Dezfooli, S.M. and Frossard, P.",
        TITLE = "A Geometry-Inspired Decision-Based Attack",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "4889-4897",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118001"}

@inproceedings{bb121778,
        AUTHOR = "Li, J. and Ji, R. and Liu, H. and Hong, X. and Gao, Y. and Tian, Q.",
        TITLE = "Universal Perturbation Attack Against Image Retrieval",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "4898-4907",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118002"}

@inproceedings{bb121779,
        AUTHOR = "Finlay, C. and Pooladian, A. and Oberman, A.",
        TITLE = "The LogBarrier Adversarial Attack:
Making Effective Use of Decision Boundary Information",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "4861-4869",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118003"}

@inproceedings{bb121780,
        AUTHOR = "Huang, Q. and Katsman, I. and Gu, Z. and He, H. and Belongie, S. and Lim, S.",
        TITLE = "Enhancing Adversarial Example Transferability With an Intermediate
Level Attack",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "4732-4741",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118004"}

@inproceedings{bb121781,
        AUTHOR = "Jandial, S. and Mangla, P. and Varshney, S. and Balasubramanian, V.",
        TITLE = "AdvGAN++: Harnessing Latent Layers for Adversary Generation",
        BOOKTITLE = NeruArch19,
        YEAR = "2019",
        PAGES = "2045-2048",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118005"}

@inproceedings{bb121782,
        AUTHOR = "Wang, C.L. and Bunel, R. and Dvijotham, K. and Huang, P.S. and Grefenstette, E. and Kohli, P.",
        TITLE = "Knowing When to Stop: Evaluation and Verification of Conformity to
Output-Size Specifications",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "12252-12261",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118006"}

@inproceedings{bb121783,
        AUTHOR = "Modas, A. and Moosavi Dezfooli, S.M. and Frossard, P.",
        TITLE = "SparseFool: A Few Pixels Make a Big Difference",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "9079-9088",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118007"}

@inproceedings{bb121784,
        AUTHOR = "Yao, Z. and Gholami, A. and Xu, P. and Keutzer, K. and Mahoney, M.W.",
        TITLE = "Trust Region Based Adversarial Attack on Neural Networks",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "11342-11351",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118008"}

@inproceedings{bb121785,
        AUTHOR = "Zeng, X.H. and Liu, C.X. and Wang, Y.S. and Qiu, W. and Xie, L.X. and Tai, Y.W. and Tang, C.K. and Yuille, A.L.",
        TITLE = "Adversarial Attacks Beyond the Image Space",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4297-4306",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118009"}

@inproceedings{bb121786,
        AUTHOR = "Corneanu, C.A. and Madadi, M. and Escalera, S. and Martinez, A.M.",
        TITLE = "What Does It Mean to Learn in Deep Networks? And, How Does One Detect
Adversarial Attacks?",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4752-4761",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118010"}

@inproceedings{bb121787,
        AUTHOR = "Shi, Y.C. and Wang, S. and Han, Y.H.",
        TITLE = "Curls and Whey: Boosting Black-Box Adversarial Attacks",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "6512-6520",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118011"}

@inproceedings{bb121788,
        AUTHOR = "Liu, X.Q. and Hsieh, C.J.",
        TITLE = "Rob-GAN: Generator, Discriminator, and Adversarial Attacker",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "11226-11235",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118012"}

@inproceedings{bb121789,
        AUTHOR = "Gupta, P. and Rahtu, E.",
        TITLE = "MLAttack: Fooling Semantic Segmentation Networks by Multi-layer Attacks",
        BOOKTITLE = GCPR19,
        YEAR = "2019",
        PAGES = "401-413",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118013"}

@inproceedings{bb121790,
        AUTHOR = "Barni, M. and Kallas, K. and Tondi, B.",
        TITLE = "A New Backdoor Attack in CNNS by Training Set Corruption Without
Label Poisoning",
        BOOKTITLE = ICIP19,
        YEAR = "2019",
        PAGES = "101-105",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118014"}

@inproceedings{bb121791,
        AUTHOR = "Zhao, W. and Yang, P.P. and Ni, R.R. and Zhao, Y. and Li, W.J.",
        TITLE = "Cycle GAN-Based Attack on Recaptured Images to Fool both Human and
Machine",
        BOOKTITLE = IWDW18,
        YEAR = "2018",
        PAGES = "83-92",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118015"}

@inproceedings{bb121792,
        AUTHOR = "Wang, S. and Shi, Y. and Han, Y.",
        TITLE = "Universal Perturbation Generation for Black-box Attack Using
Evolutionary Algorithms",
        BOOKTITLE = ICPR18,
        YEAR = "2018",
        PAGES = "1277-1282",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118016"}

@inproceedings{bb121793,
        AUTHOR = "Xu, X.J. and Chen, X.Y. and Liu, C. and Rohrbach, A. and Darrell, T.J. and Song, D.",
        TITLE = "Fooling Vision and Language Models Despite Localization and Attention
Mechanism",
        BOOKTITLE = CVPR18,
        YEAR = "2018",
        PAGES = "4951-4961",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118017"}

@inproceedings{bb121794,
        AUTHOR = "Dong, Y. and Liao, F. and Pang, T. and Su, H. and Zhu, J. and Hu, X. and Li, J.",
        TITLE = "Boosting Adversarial Attacks with Momentum",
        BOOKTITLE = CVPR18,
        YEAR = "2018",
        PAGES = "9185-9193",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118018"}

@inproceedings{bb121795,
        AUTHOR = "Eykholt, K. and Evtimov, I. and Fernandes, E. and Li, B. and Rahmati, A. and Xiao, C. and Prakash, A. and Kohno, T. and Song, D.",
        TITLE = "Robust Physical-World Attacks on Deep Learning Visual Classification",
        BOOKTITLE = CVPR18,
        YEAR = "2018",
        PAGES = "1625-1634",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118019"}

@inproceedings{bb121796,
        AUTHOR = "Narodytska, N. and Kasiviswanathan, S.",
        TITLE = "Simple Black-Box Adversarial Attacks on Deep Neural Networks",
        BOOKTITLE = PRIV17,
        YEAR = "2017",
        PAGES = "1310-1318",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defatk5.html#TT118020"}

@article{bb121797,
        AUTHOR = "Zakharov, N. and Su, H. and Zhu, J. and Glascher, J.",
        TITLE = "Towards controllable image descriptions with semi-supervised VAE",
        JOURNAL = JVCIR,
        VOLUME = "63",
        YEAR = "2019",
        PAGES = "102574",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654vae2.html#TT118021"}

@article{bb121798,
        AUTHOR = "Duan, X.T. and Liu, J.J. and Zhang, E.",
        TITLE = "Efficient image encryption and compression based on a VAE generative
model",
        JOURNAL = RealTimeIP,
        VOLUME = "16",
        YEAR = "2019",
        NUMBER = "3",
        MONTH = "June",
        PAGES = "765-773",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654vae2.html#TT118022"}

@article{bb121799,
        AUTHOR = "Su, Y. and Li, J. and Plaza, A. and Marinoni, A. and Gamba, P. and Chakravortty, S.",
        TITLE = "DAEN: Deep Autoencoder Networks for Hyperspectral Unmixing",
        JOURNAL = GeoRS,
        VOLUME = "57",
        YEAR = "2019",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "4309-4321",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654vae2.html#TT118023"}