@inproceedings{bb161500,
        AUTHOR = "Wang, Y.P. and Xie, L. and Liu, X.M. and Yin, J.L. and Zheng, T.J.",
        TITLE = "Model-Agnostic Adversarial Example Detection Through Logit
Distribution Learning",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3617-3621",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157353"}

@inproceedings{bb161501,
        AUTHOR = "Chai, W.H. and Lu, Y.T. and Velipasalar, S.",
        TITLE = "Weighted Average Precision: Adversarial Example Detection for Visual
Perception of Autonomous Vehicles",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "804-808",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157354"}

@inproceedings{bb161502,
        AUTHOR = "Kung, B.H. and Chen, P.C. and Liu, Y.C. and Chen, J.C.",
        TITLE = "Squeeze and Reconstruct: Improved Practical Adversarial Defense Using
Paired Image Compression and Reconstruction",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "849-853",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157355"}

@inproceedings{bb161503,
        AUTHOR = "Li, C.Y. and Sanchez Matilla, R. and Shamsabadi, A.S. and Mazzon, R. and Cavallaro, A.",
        TITLE = "On the Reversibility of Adversarial Attacks",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3073-3077",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157356"}

@inproceedings{bb161504,
        AUTHOR = "Bakiskan, C. and Cekic, M. and Sezer, A.D. and Madhow, U.",
        TITLE = "A Neuro-Inspired Autoencoding Defense Against Adversarial Attacks",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3922-3926",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157357"}

@inproceedings{bb161505,
        AUTHOR = "Truong, J.B. and Maini, P. and Walls, R.J. and Papernot, N.",
        TITLE = "Data-Free Model Extraction",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "4769-4778",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157358"}

@inproceedings{bb161506,
        AUTHOR = "Deng, Z.J. and Yang, X. and Xu, S.Z. and Su, H. and Zhu, J.",
        TITLE = "LiBRe: A Practical Bayesian Approach to Adversarial Detection",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "972-982",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157359"}

@inproceedings{bb161507,
        AUTHOR = "Yang, K. and Lin, W.Y. and Barman, M. and Condessa, F. and Kolter, Z.",
        TITLE = "Defending Multimodal Fusion Models against Single-Source Adversaries",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3339-3348",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157360"}

@inproceedings{bb161508,
        AUTHOR = "Ong, D.S. and Chan, C.S. and Ng, K.W. and Fan, L.X. and Yang, Q.",
        TITLE = "Protecting Intellectual Property of Generative Adversarial Networks
from Ambiguity Attacks",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3629-3638",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157361"}

@inproceedings{bb161509,
        AUTHOR = "Pestana, C. and Liu, W. and Glance, D. and Mian, A.",
        TITLE = "Defense-friendly Images in Adversarial Attacks:
Dataset and Metrics for Perturbation Difficulty",
        BOOKTITLE = WACV21,
        YEAR = "2021",
        PAGES = "556-565",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157362"}

@inproceedings{bb161510,
        AUTHOR = "Kyatham, V. and Mishra, D. and Prathosh, A.P.",
        TITLE = "Variational Inference with Latent Space Quantization for Adversarial
Resilience",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "9593-9600",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157363"}

@inproceedings{bb161511,
        AUTHOR = "Li, H.L. and Fan, Y.F. and Ganz, F. and Yezzi, A.J. and Barnaghi, P.",
        TITLE = "Verifying the Causes of Adversarial Examples",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "6750-6757",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157364"}

@inproceedings{bb161512,
        AUTHOR = "Huang, Y.T. and Liao, W.H. and Huang, C.W.",
        TITLE = "Defense Mechanism Against Adversarial Attacks Using Density-based
Representation of Images",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "3499-3504",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157365"}

@inproceedings{bb161513,
        AUTHOR = "Chhabra, S. and Agarwal, A. and Singh, R. and Vatsa, M.",
        TITLE = "Attack Agnostic Adversarial Defense via Visual Imperceptible Bound",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "5302-5309",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157366"}

@inproceedings{bb161514,
        AUTHOR = "Watson, M. and Moubayed, N.A.",
        TITLE = "Attack-agnostic Adversarial Detection on Medical Data Using
Explainable Machine Learning",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "8180-8187",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157367"}

@inproceedings{bb161515,
        AUTHOR = "Carrara, F. and Caldelli, R. and Falchi, F. and Amato, G.",
        TITLE = "Defending Neural ODE Image Classifiers from Adversarial Attacks with
Tolerance Randomization",
        BOOKTITLE = MMForWild20,
        YEAR = "2020",
        PAGES = "425-438",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157368"}

@inproceedings{bb161516,
        AUTHOR = "Li, Y.W. and Bai, S. and Xie, C.H. and Liao, Z.Y. and Shen, X.H. and Yuille, A.L.",
        TITLE = "Regional Homogeneity: Towards Learning Transferable Universal
Adversarial Perturbations Against Defenses",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XI:795-813",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157369"}

@inproceedings{bb161517,
        AUTHOR = "Xu, J. and Li, Y. and Jiang, Y. and Xia, S.T.",
        TITLE = "Adversarial Defense Via Local Flatness Regularization",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "2196-2200",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157370"}

@inproceedings{bb161518,
        AUTHOR = "Maung, M. and Pyone, A. and Kiya, H.",
        TITLE = "Encryption Inspired Adversarial Defense For Visual Classification",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "1681-1685",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157371"}

@inproceedings{bb161519,
        AUTHOR = "Shah, S.A.A. and Bougre, M. and Akhtar, N. and Bennamoun, M. and Zhang, L.",
        TITLE = "Efficient Detection of Pixel-Level Adversarial Attacks",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "718-722",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157372"}

@inproceedings{bb161520,
        AUTHOR = "Mao, C.Z. and Cha, A. and Gupta, A. and Wang, H. and Yang, J.F. and Vondrick, C.",
        TITLE = "Generative Interventions for Causal Learning",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3946-3955",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157373"}

@inproceedings{bb161521,
        AUTHOR = "Li, S.S. and Zhu, S.T. and Paul, S. and Roy Chowdhury, A.K. and Song, C.Y. and Krishnamurthy, S. and Swami, A. and Chan, K.S.",
        TITLE = "Connecting the Dots: Detecting Adversarial Perturbations Using Context
Inconsistency",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXIII:396-413",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157374"}

@inproceedings{bb161522,
        AUTHOR = "Li, Y. and Cheng, S.Y. and Su, H. and Zhu, J.",
        TITLE = "Defense Against Adversarial Attacks via Controlling Gradient Leaking on
Embedded Manifolds",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXVIII:753-769",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157375"}

@inproceedings{bb161523,
        AUTHOR = "Rounds, J. and Kingsland, A. and Henry, M.J. and Duskin, K.R.",
        TITLE = "Probing for Artifacts: Detecting Imagenet Model Evasions",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3432-3441",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157376"}

@inproceedings{bb161524,
        AUTHOR = "Kariyappa, S. and Qureshi, M.K.",
        TITLE = "Defending Against Model Stealing Attacks With Adaptive Misinformation",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "767-775",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157377"}

@inproceedings{bb161525,
        AUTHOR = "Cohen, G. and Sapiro, G. and Giryes, R.",
        TITLE = "Detecting Adversarial Samples Using Influence Functions and Nearest
Neighbors",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14441-14450",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157378"}

@inproceedings{bb161526,
        AUTHOR = "Yuan, J. and He, Z.",
        TITLE = "Ensemble Generative Cleaning With Feedback Loops for Defending
Adversarial Attacks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "578-587",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157379"}

@inproceedings{bb161527,
        AUTHOR = "Xiao, C. and Zheng, C.",
        TITLE = "One Man's Trash Is Another Man's Treasure:
Resisting Adversarial Examples by Adversarial Examples",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "409-418",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157380"}

@inproceedings{bb161528,
        AUTHOR = "Zhao, Y. and Tian, Y. and Fowlkes, C. and Shen, W. and Yuille, A.L.",
        TITLE = "Resisting Large Data Variations via Introspective Transformation
Network",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "3069-3078",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157381"}

@inproceedings{bb161529,
        AUTHOR = "Folz, J. and Palacio, S. and Hees, J. and Dengel, A.",
        TITLE = "Adversarial Defense based on Structure-to-Signal Autoencoders",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "3568-3577",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157382"}

@inproceedings{bb161530,
        AUTHOR = "Zheng, S. and Zhu, Z. and Zhang, X. and Liu, Z. and Cheng, J. and Zhao, Y.",
        TITLE = "Distribution-Induced Bidirectional Generative Adversarial Network for
Graph Representation Learning",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "7222-7231",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157383"}

@inproceedings{bb161531,
        AUTHOR = "Benz, P. and Zhang, C.N. and Imtiaz, T. and Kweon, I.S.",
        TITLE = "Double Targeted Universal Adversarial Perturbations",
        BOOKTITLE = ACCV20,
        YEAR = "2020",
        PAGES = "IV:284-300",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157384"}

@inproceedings{bb161532,
        AUTHOR = "Zhang, C.N. and Benz, P. and Imtiaz, T. and Kweon, I.S.",
        TITLE = "Understanding Adversarial Examples From the Mutual Influence of
Images and Perturbations",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14509-14518",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157385"}

@inproceedings{bb161533,
        AUTHOR = "Xie, C. and Tan, M. and Gong, B. and Wang, J. and Yuille, A.L. and Le, Q.V.",
        TITLE = "Adversarial Examples Improve Image Recognition",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "816-825",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157386"}

@inproceedings{bb161534,
        AUTHOR = "Dabouei, A. and Soleymani, S. and Taherkhani, F. and Dawson, J. and Nasrabadi, N.M.",
        TITLE = "SmoothFool: An Efficient Framework for Computing Smooth Adversarial
Perturbations",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "2654-2663",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157387"}

@inproceedings{bb161535,
        AUTHOR = "Bai, Y. and Feng, Y. and Wang, Y. and Dai, T. and Xia, S. and Jiang, Y.",
        TITLE = "Hilbert-Based Generative Defense for Adversarial Examples",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "4783-4792",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157388"}

@inproceedings{bb161536,
        AUTHOR = "Jang, Y. and Zhao, T. and Hong, S. and Lee, H.",
        TITLE = "Adversarial Defense via Learning to Generate Diverse Attacks",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "2740-2749",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157389"}

@inproceedings{bb161537,
        AUTHOR = "Mustafa, A. and Khan, S. and Hayat, M. and Goecke, R. and Shen, J. and Shao, L.",
        TITLE = "Adversarial Defense by Restricting the Hidden Space of Deep Neural
Networks",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "3384-3393",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157390"}

@inproceedings{bb161538,
        AUTHOR = "Taran, O. and Rezaeifar, S. and Holotyak, T. and Voloshynovskiy, S.",
        TITLE = "Defending Against Adversarial Attacks by Randomized Diversification",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "11218-11225",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157391"}

@inproceedings{bb161539,
        AUTHOR = "Sun, B. and Tsai, N.H. and Liu, F.C. and Yu, R. and Su, H.",
        TITLE = "Adversarial Defense by Stratified Convolutional Sparse Coding",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "11439-11448",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157392"}

@inproceedings{bb161540,
        AUTHOR = "Ho, C.H. and Leung, B. and Sandstrom, E. and Chang, Y. and Vasconcelos, N.M.",
        TITLE = "Catastrophic Child's Play:
Easy to Perform, Hard to Defend Adversarial Attacks",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "9221-9229",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157393"}

@inproceedings{bb161541,
        AUTHOR = "Dubey, A. and van der Maaten, L. and Yalniz, Z. and Li, Y.X. and Mahajan, D.",
        TITLE = "Defense Against Adversarial Images Using Web-Scale Nearest-Neighbor
Search",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "8759-8768",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157394"}

@inproceedings{bb161542,
        AUTHOR = "Dong, Y.P. and Pang, T.Y. and Su, H. and Zhu, J.",
        TITLE = "Evading Defenses to Transferable Adversarial Examples by
Translation-Invariant Attacks",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4307-4316",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157395"}

@inproceedings{bb161543,
        AUTHOR = "Rony, J. and Hafemann, L.G. and Oliveira, L.S. and Ben Ayed, I. and Sabourin, R. and Granger, E.",
        TITLE = "Decoupling Direction and Norm for Efficient Gradient-Based L2
Adversarial Attacks and Defenses",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4317-4325",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157396"}

@inproceedings{bb161544,
        AUTHOR = "Qiu, Y.X. and Leng, J.W. and Guo, C. and Chen, Q. and Li, C. and Guo, M. and Zhu, Y.H.",
        TITLE = "Adversarial Defense Through Network Profiling Based Path Extraction",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4772-4781",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157397"}

@inproceedings{bb161545,
        AUTHOR = "Jia, X.J. and Wei, X.X. and Cao, X.C. and Foroosh, H.",
        TITLE = "ComDefend: An Efficient Image Compression Model to Defend Adversarial
Examples",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "6077-6085",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157398"}

@inproceedings{bb161546,
        AUTHOR = "Ji, J. and Zhong, B. and Ma, K.",
        TITLE = "Multi-Scale Defense of Adversarial Images",
        BOOKTITLE = ICIP19,
        YEAR = "2019",
        PAGES = "4070-4074",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157399"}

@inproceedings{bb161547,
        AUTHOR = "Saha, S. and Kumar, A. and Sahay, P. and Jose, G. and Kruthiventi, S. and Muralidhara, H.",
        TITLE = "Attack Agnostic Statistical Method for Adversarial Detection",
        BOOKTITLE = SDL-CV19,
        YEAR = "2019",
        PAGES = "798-802",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157400"}

@inproceedings{bb161548,
        AUTHOR = "Taran, O. and Rezaeifar, S. and Voloshynovskiy, S.",
        TITLE = "Bridging Machine Learning and Cryptography in Defence Against
Adversarial Attacks",
        BOOKTITLE = Objectionable18,
        YEAR = "2018",
        PAGES = "II:267-279",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157401"}

@inproceedings{bb161549,
        AUTHOR = "Naseer, M. and Khan, S. and Porikli, F.M.",
        TITLE = "Local Gradients Smoothing: Defense Against Localized Adversarial
Attacks",
        BOOKTITLE = WACV19,
        YEAR = "2019",
        PAGES = "1300-1307",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157402"}

@inproceedings{bb161550,
        AUTHOR = "Akhtar, N. and Liu, J. and Mian, A.",
        TITLE = "Defense Against Universal Adversarial Perturbations",
        BOOKTITLE = CVPR18,
        YEAR = "2018",
        PAGES = "3389-3398",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157403"}

@inproceedings{bb161551,
        AUTHOR = "Moosavi Dezfooli, S.M. and Fawzi, A. and Fawzi, O. and Frossard, P.",
        TITLE = "Universal Adversarial Perturbations",
        BOOKTITLE = CVPR17,
        YEAR = "2017",
        PAGES = "86-94",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT157404"}

@article{bb161552,
        AUTHOR = "Amini, S. and Ghaemmaghami, S.",
        TITLE = "Towards Improving Robustness of Deep Neural Networks to Adversarial
Perturbations",
        JOURNAL = MultMed,
        VOLUME = "22",
        YEAR = "2020",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "1889-1903",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157405"}

@article{bb161553,
        AUTHOR = "Shi, Y.C. and Han, Y.H. and Zhang, Q.X. and Kuang, X.H.",
        TITLE = "Adaptive iterative attack towards explainable adversarial robustness",
        JOURNAL = PR,
        VOLUME = "105",
        YEAR = "2020",
        PAGES = "107309",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157406"}

@article{bb161554,
        AUTHOR = "Wang, Y. and Su, H. and Zhang, B. and Hu, X.",
        TITLE = "Interpret Neural Networks by Extracting Critical Subnetworks",
        JOURNAL = IP,
        VOLUME = "29",
        YEAR = "2020",
        PAGES = "6707-6720",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157407"}

@article{bb161555,
        AUTHOR = "Ortiz Jimenez, G. and Modas, A. and Moosavi Dezfooli, S.M. and Frossard, P.",
        TITLE = "Optimism in the Face of Adversity: Understanding and Improving Deep
Learning Through Adversarial Robustness",
        JOURNAL = PIEEE,
        VOLUME = "109",
        YEAR = "2021",
        NUMBER = "5",
        MONTH = "May",
        PAGES = "635-659",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157408"}

@article{bb161556,
        AUTHOR = "Li, Z.R. and Feng, C. and Wu, M.H. and Yu, H.C. and Zheng, J.W. and Zhu, F.",
        TITLE = "Adversarial robustness via attention transfer",
        JOURNAL = PRL,
        VOLUME = "146",
        YEAR = "2021",
        PAGES = "172-178",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157409"}

@article{bb161557,
        AUTHOR = "Hu, W.Z. and Li, M.Y. and Wang, Z. and Wang, J.Q. and Zhang, C.S.",
        TITLE = "DiFNet: Densely High-Frequency Convolutional Neural Networks",
        JOURNAL = SPLetters,
        VOLUME = "28",
        YEAR = "2021",
        PAGES = "1340-1344",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157410"}

@article{bb161558,
        AUTHOR = "Mustafa, A. and Khan, S.H. and Hayat, M. and Goecke, R. and Shen, J.B. and Shao, L.",
        TITLE = "Deeply Supervised Discriminative Learning for Adversarial Defense",
        JOURNAL = PAMI,
        VOLUME = "43",
        YEAR = "2021",
        NUMBER = "9",
        MONTH = "September",
        PAGES = "3154-3166",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157411"}

@article{bb161559,
        AUTHOR = "Yu, H. and Liu, A.S. and Li, G.C. and Yang, J.C. and Zhang, C.Z.",
        TITLE = "Progressive Diversified Augmentation for General Robustness of DNNs:
A Unified Approach",
        JOURNAL = IP,
        VOLUME = "30",
        YEAR = "2021",
        PAGES = "8955-8967",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157412"}

@article{bb161560,
        AUTHOR = "Lo, S.Y. and Patel, V.M.",
        TITLE = "Defending Against Multiple and Unforeseen Adversarial Videos",
        JOURNAL = IP,
        VOLUME = "31",
        YEAR = "2022",
        PAGES = "962-973",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157413"}

@article{bb161561,
        AUTHOR = "Mygdalis, V. and Pitas, I.",
        TITLE = "Hyperspherical class prototypes for adversarial robustness",
        JOURNAL = PR,
        VOLUME = "125",
        YEAR = "2022",
        PAGES = "108527",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157414"}

@article{bb161562,
        AUTHOR = "Khong, T.T.T. and Nakada, T. and Nakashima, Y.",
        TITLE = "A Hybrid Bayesian-Convolutional Neural Network for Adversarial
Robustness",
        JOURNAL = IEICE,
        VOLUME = "E105-D",
        YEAR = "2022",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "1308-1319",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157415"}

@article{bb161563,
        AUTHOR = "Wang, K. and Li, F.J. and Chen, C.M. and Hassan, M.M. and Long, J.Y. and Kumar, N.",
        TITLE = "Interpreting Adversarial Examples and Robustness for Deep
Learning-Based Auto-Driving Systems",
        JOURNAL = ITS,
        VOLUME = "23",
        YEAR = "2022",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "9755-9764",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157416"}

@article{bb161564,
        AUTHOR = "Wang, J. and Su, W.Q. and Luo, C.W. and Chen, J. and Song, H.B. and Li, J.Q.",
        TITLE = "CSG: Classifier-Aware Defense Strategy Based on Compressive Sensing
and Generative Networks for Visual Recognition in Autonomous Vehicle
Systems",
        JOURNAL = ITS,
        VOLUME = "23",
        YEAR = "2022",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "9543-9553",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157417"}

@article{bb161565,
        AUTHOR = "Shi, X.S. and Peng, Y.F. and Chen, Q.Y. and Keenan, T. and Thavikulwat, A.T. and Lee, S. and Tang, Y.X. and Chew, E.Y. and Summers, R.M. and Lu, Z.Y.",
        TITLE = "Robust convolutional neural networks against adversarial attacks on
medical images",
        JOURNAL = PR,
        VOLUME = "132",
        YEAR = "2022",
        PAGES = "108923",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157418"}

@article{bb161566,
        AUTHOR = "Yu, X. and Smedemark Margulies, N. and Aeron, S. and Koike Akino, T. and Moulin, P. and Brand, M. and Parsons, K. and Wang, Y.",
        TITLE = "Improving adversarial robustness by learning shared information",
        JOURNAL = PR,
        VOLUME = "134",
        YEAR = "2023",
        PAGES = "109054",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157419"}

@article{bb161567,
        AUTHOR = "Lee, S. and Kim, H. and Lee, J.W.",
        TITLE = "GradDiv: Adversarial Robustness of Randomized Neural Networks via
Gradient Diversity Regularization",
        JOURNAL = PAMI,
        VOLUME = "45",
        YEAR = "2023",
        NUMBER = "2",
        MONTH = "February",
        PAGES = "2645-2651",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157420"}

@article{bb161568,
        AUTHOR = "Picot, M. and Messina, F. and Boudiaf, M. and Labeau, F. and Ben Ayed, I. and Piantanida, P.",
        TITLE = "Adversarial Robustness Via Fisher-Rao Regularization",
        JOURNAL = PAMI,
        VOLUME = "45",
        YEAR = "2023",
        NUMBER = "3",
        MONTH = "March",
        PAGES = "2698-2710",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157421"}

@article{bb161569,
        AUTHOR = "Stutz, D. and Chandramoorthy, N. and Hein, M. and Schiele, B.",
        TITLE = "Random and Adversarial Bit Error Robustness:
Energy-Efficient and Secure DNN Accelerators",
        JOURNAL = PAMI,
        VOLUME = "45",
        YEAR = "2023",
        NUMBER = "3",
        MONTH = "March",
        PAGES = "3632-3647",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157422"}

@inproceedings{bb161570,
        AUTHOR = "Stutz, D. and Hein, M. and Schiele, B.",
        TITLE = "Disentangling Adversarial Robustness and Generalization",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "6969-6980",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157423"}

@inproceedings{bb161571,
        AUTHOR = "Guo, Y. and Stutz, D. and Schiele, B.",
        TITLE = "Improving Robustness by Enhancing Weak Subnets",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "XXIV:320-338",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157424"}

@article{bb161572,
        AUTHOR = "Zhang, J.J. and Chao, H.Q. and Yan, P.K.",
        TITLE = "Toward Adversarial Robustness in Unlabeled Target Domains",
        JOURNAL = IP,
        VOLUME = "32",
        YEAR = "2023",
        PAGES = "1272-1284",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157425"}

@article{bb161573,
        AUTHOR = "Li, W. and Wang, H.Y. and Huo, L.Z. and He, Q. and Zhang, C.L.",
        TITLE = "Robust attention ranking architecture with frequency-domain transform
to defend against adversarial samples",
        JOURNAL = CVIU,
        VOLUME = "233",
        YEAR = "2023",
        PAGES = "103717",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157426"}

@article{bb161574,
        AUTHOR = "Dong, J.H. and Yang, L.X. and Wang, Y. and Xie, X.H. and Lai, J.H.",
        TITLE = "Toward Intrinsic Adversarial Robustness Through Probabilistic
Training",
        JOURNAL = IP,
        VOLUME = "32",
        YEAR = "2023",
        PAGES = "3862-3872",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157427"}

@article{bb161575,
        AUTHOR = "Saini, N. and Chattopadhyay, C. and Das, D.",
        TITLE = "SOLARNet: A single stage regression based framework for efficient and
robust object recognition in aerial images",
        JOURNAL = PRL,
        VOLUME = "172",
        YEAR = "2023",
        PAGES = "37-43",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157428"}

@article{bb161576,
        AUTHOR = "Heo, J. and Seo, S. and Kang, P.",
        TITLE = "Exploring the differences in adversarial robustness between ViT- and
CNN-based models using novel metrics",
        JOURNAL = CVIU,
        VOLUME = "235",
        YEAR = "2023",
        PAGES = "103800",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157429"}

@article{bb161577,
        AUTHOR = "Wang, K. and Chen, Z.C. and Dang, X.L. and Fan, X. and Han, X.M. and Chen, C.M. and Ding, W.P. and Yiu, S.M. and Weng, J.",
        TITLE = "Uncovering Hidden Vulnerabilities in Convolutional Neural Networks
through Graph-based Adversarial Robustness Evaluation",
        JOURNAL = PR,
        VOLUME = "143",
        YEAR = "2023",
        PAGES = "109745",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157430"}

@article{bb161578,
        AUTHOR = "Chu, T.S. and Fang, K. and Yang, J. and Huang, X.L.",
        TITLE = "Improving the adversarial robustness of quantized neural networks via
exploiting the feature diversity",
        JOURNAL = PRL,
        VOLUME = "176",
        YEAR = "2023",
        PAGES = "117-122",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157431"}

@article{bb161579,
        AUTHOR = "Fang, K. and Tao, Q.H. and Wu, Y.W. and Li, T. and Cai, J. and Cai, F.P. and Huang, X.L. and Yang, J.",
        TITLE = "Towards robust neural networks via orthogonal diversity",
        JOURNAL = PR,
        VOLUME = "149",
        YEAR = "2024",
        PAGES = "110281",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157432"}

@inproceedings{bb161580,
        AUTHOR = "Chu, T.S. and Yang, Z.P. and Yang, J. and Huang, X.L.",
        TITLE = "Improving the Robustness of Convolutional Neural Networks Via Sketch
Attention",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "869-873",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157433"}

@article{bb161581,
        AUTHOR = "Xu, S.W. and Qiao, T. and Xu, M. and Wang, W. and Zheng, N.",
        TITLE = "Robust Adversarial Watermark Defending Against GAN Synthesization
Attack",
        JOURNAL = SPLetters,
        VOLUME = "31",
        YEAR = "2024",
        PAGES = "351-355",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157434"}

@article{bb161582,
        AUTHOR = "Zhuang, W. and Huang, L.F. and Gao, C.Y. and Liu, N.",
        TITLE = "LAFED: Towards robust ensemble models via Latent Feature
Diversification",
        JOURNAL = PR,
        VOLUME = "150",
        YEAR = "2024",
        PAGES = "110225",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157435"}

@article{bb161583,
        AUTHOR = "Zhang, L. and Zhou, Y.H. and Yang, Y. and Gao, X.B.",
        TITLE = "Meta Invariance Defense Towards Generalizable Robustness to Unknown
Adversarial Attacks",
        JOURNAL = PAMI,
        VOLUME = "46",
        YEAR = "2024",
        NUMBER = "10",
        MONTH = "October",
        PAGES = "6669-6687",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157436"}

@article{bb161584,
        AUTHOR = "Li, Z.R. and Wu, M.H. and Jin, C. and Yu, D. and Yu, H.",
        TITLE = "Adversarial self-training for robustness and generalization",
        JOURNAL = PRL,
        VOLUME = "185",
        YEAR = "2024",
        PAGES = "117-123",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157437"}

@article{bb161585,
        AUTHOR = "Li, Z.Y. and Hu, C. and Wang, Y. and Yang, Y.J. and Li, S.B.E.",
        TITLE = "Safe Reinforcement Learning With Dual Robustness",
        JOURNAL = PAMI,
        VOLUME = "46",
        YEAR = "2024",
        NUMBER = "12",
        MONTH = "December",
        PAGES = "10876-10890",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157438"}

@article{bb161586,
        AUTHOR = "Li, J.W. and Fang, K. and Huang, X.L. and Yang, J.",
        TITLE = "Boosting certified robustness via an expectation-based similarity
regularization",
        JOURNAL = IVC,
        VOLUME = "151",
        YEAR = "2024",
        PAGES = "105272",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157439"}

@article{bb161587,
        AUTHOR = "Xiao, J.C. and Yang, L. and Fan, Y.B. and Wang, J. and Luo, Z.Q.",
        TITLE = "Understanding adversarial robustness against on-manifold adversarial
examples",
        JOURNAL = PR,
        VOLUME = "159",
        YEAR = "2025",
        PAGES = "111071",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157440"}

@article{bb161588,
        AUTHOR = "Li, L. and Qiu, J.N. and Spratling, M.W.",
        TITLE = "AROID: Improving Adversarial Robustness Through Online Instance-Wise
Data Augmentation",
        JOURNAL = IJCV,
        VOLUME = "133",
        YEAR = "2025",
        NUMBER = "2",
        MONTH = "February",
        PAGES = "929-950",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157441"}

@article{bb161589,
        AUTHOR = "Fu, X.W. and Ma, L. and Zhang, L.",
        TITLE = "Remove to Regenerate: Boosting Adversarial Generalization with Attack
Invariance",
        JOURNAL = CirSysVideo,
        VOLUME = "35",
        YEAR = "2025",
        NUMBER = "3",
        MONTH = "March",
        PAGES = "1999-2012",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157442"}

@article{bb161590,
        AUTHOR = "Dardour, O. and Aguilar, E. and Radeva, P. and Zaied, M.",
        TITLE = "Inter-separability and intra-concentration to enhance stochastic
neural network adversarial robustness",
        JOURNAL = PRL,
        VOLUME = "191",
        YEAR = "2025",
        PAGES = "1-7",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157443"}

@article{bb161591,
        AUTHOR = "Peng, H.Q. and Chen, M.X. and Wang, Y.H. and Guo, Y.F.",
        TITLE = "HFA2RE: Enhancing adversarial robustness via Hyperspherical Feature
Aggregation",
        JOURNAL = PR,
        VOLUME = "169",
        YEAR = "2026",
        PAGES = "111857",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157444"}

@article{bb161592,
        AUTHOR = "Jeary, L. and Kuipers, T. and Hosseini, M. and Paoletti, N.",
        TITLE = "Verifiably robust conformal prediction for probabilistic guarantees
under adversarial attacks",
        JOURNAL = PR,
        VOLUME = "170",
        YEAR = "2026",
        PAGES = "112051",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157445"}

@article{bb161593,
        AUTHOR = "Wang, Z. and Xu, X. and Zhu, L. and Bin, Y. and Wang, G.Q. and Yang, Y. and Shen, H.T.",
        TITLE = "Evidence-Based Multi-Feature Fusion for Adversarial Robustness",
        JOURNAL = PAMI,
        VOLUME = "47",
        YEAR = "2025",
        NUMBER = "10",
        MONTH = "October",
        PAGES = "8923-8937",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157446"}

@article{bb161594,
        AUTHOR = "Yang, X. and Wu, L.X. and Wang, L.Z. and Ying, C.Y. and Su, H. and Zhu, J.",
        TITLE = "Reinforced Embodied Active Defense: Exploiting Adaptive Interaction
for Robust Visual Perception in Adversarial 3D Environments",
        JOURNAL = PAMI,
        VOLUME = "47",
        YEAR = "2025",
        NUMBER = "10",
        MONTH = "October",
        PAGES = "9078-9094",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157447"}

@article{bb161595,
        AUTHOR = "Won, S. and Kim, H.B. and Ahn, Y.H. and Lee, H.J. and Kim, S.T.",
        TITLE = "Understanding adversarial robustness of deep neural networks via
decision reliance",
        JOURNAL = IVC,
        VOLUME = "163",
        YEAR = "2025",
        PAGES = "105743",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157448"}

@article{bb161596,
        AUTHOR = "Yagoda, M. and Abu Hussein, S. and Giryes, R.",
        TITLE = "Diffusion Models are Robust Pretrainers",
        JOURNAL = SPLetters,
        VOLUME = "32",
        YEAR = "2025",
        PAGES = "4219-4223",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157449"}

@article{bb161597,
        AUTHOR = "Zhu, J. and Tan, L.P. and Li, Y.C. and Tian, S.J. and Li, J.Q. and Wang, Y.N.",
        TITLE = "Guided Adversarial Attack in the Low-Frequency Space",
        JOURNAL = MultMed,
        VOLUME = "27",
        YEAR = "2025",
        PAGES = "8029-8044",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157450"}

@article{bb161598,
        AUTHOR = "Ledda, E. and Scodeller, G. and Angioni, D. and Piras, G. and Cina, A.E. and Fumera, G. and Biggio, B. and Roli, F.",
        TITLE = "On the robustness of adversarial training against uncertainty attacks",
        JOURNAL = PR,
        VOLUME = "172",
        YEAR = "2026",
        PAGES = "112519",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157451"}

@article{bb161599,
        AUTHOR = "Liang, Z.Y. and Wang, L.P. and Diao, Y.F. and Wang, Y.Y. and Mu, H. and Zuo, L. and Gao, H.Q. and Fan, Z.X. and Yang, X.",
        TITLE = "Understanding the adversarial robustness of deep learning-based
single-pixel imaging",
        JOURNAL = PR,
        VOLUME = "172",
        YEAR = "2026",
        PAGES = "112555",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT157452"}