@inproceedings{bb162600,
        AUTHOR = "Godfrey, C. and Kvinge, H. and Bishoff, E. and Mckay, M. and Brown, D. and Doster, T. and Byler, E.",
        TITLE = "How many dimensions are required to find an adversarial example?",
        BOOKTITLE = AML23,
        YEAR = "2023",
        PAGES = "2353-2360",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158453"}

@inproceedings{bb162601,
        AUTHOR = "Chen, Y.W. and Chu, S.Y.",
        TITLE = "Adversarial Defense in Aerial Detection",
        BOOKTITLE = AML23,
        YEAR = "2023",
        PAGES = "2306-2313",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158454"}

@inproceedings{bb162602,
        AUTHOR = "Zhou, Q.G. and Lei, M. and Zhi, P. and Zhao, R. and Shen, J. and Yong, B.B.",
        TITLE = "Towards Improving the Anti-Attack Capability of the Rangenet++",
        BOOKTITLE = "ACCVWS22",
        YEAR = "2022",
        PAGES = "60-70",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158455"}

@inproceedings{bb162603,
        AUTHOR = "Zhao, Z.Y. and Dang, N. and Larson, M.",
        TITLE = "The Importance of Image Interpretation: Patterns of Semantic
Misclassification in Real-world Adversarial Images",
        BOOKTITLE = MMMod23,
        YEAR = "2023",
        PAGES = "II: 718-725",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158456"}

@inproceedings{bb162604,
        AUTHOR = "Dargaud, L. and Ibsen, M. and Tapia, J. and Busch, C.",
        TITLE = "A Principal Component Analysis-Based Approach for Single Morphing
Attack Detection",
        BOOKTITLE = Explain-Bio23,
        YEAR = "2023",
        PAGES = "683-692",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158457"}

@inproceedings{bb162605,
        AUTHOR = "Drenkow, N. and Lennon, M. and Wang, I.J. and Burlina, P.",
        TITLE = "Do Adaptive Active Attacks Pose Greater Risk Than Static Attacks?",
        BOOKTITLE = WACV23,
        YEAR = "2023",
        PAGES = "1380-1389",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158458"}

@inproceedings{bb162606,
        AUTHOR = "Chen, Y.K. and Zhang, M. and Li, J. and Kuang, X.H.",
        TITLE = "Adversarial Attacks and Defenses in Image Classification:
A Practical Perspective",
        BOOKTITLE = ICIVC22,
        YEAR = "2022",
        PAGES = "424-430",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158459"}

@inproceedings{bb162607,
        AUTHOR = "Hwang, D. and Lee, E. and Rhee, W.",
        TITLE = "AID-Purifier: A Light Auxiliary Network for Boosting Adversarial
Defense",
        BOOKTITLE = "ICPR22",
        YEAR = "2022",
        PAGES = "2401-2407",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158460"}

@inproceedings{bb162608,
        AUTHOR = "Tasaki, H. and Kaneko, Y. and Chao, J.H.",
        TITLE = "Curse of co-Dimensionality: Explaining Adversarial Examples by
Embedding Geometry of Data Manifold",
        BOOKTITLE = "ICPR22",
        YEAR = "2022",
        PAGES = "2364-2370",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158461"}

@inproceedings{bb162609,
        AUTHOR = "Khalsi, R. and Smati, I. and Sallami, M.M. and Ghorbel, F.",
        TITLE = "A Novel System for Deep Contour Classifiers Certification Under
Filtering Attacks",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "3561-3565",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158462"}

@inproceedings{bb162610,
        AUTHOR = "Zhang, Y.X. and Dong, B. and Heide, F.",
        TITLE = "All You Need Is RAW: Defending Against Adversarial Attacks with Camera
Image Pipelines",
        BOOKTITLE = ECCV22,
        YEAR = "2022",
        PAGES = "XIX:323-343",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158463"}

@inproceedings{bb162611,
        AUTHOR = "Lu, B. and Liu, J.Y. and Xiong, H.L.",
        TITLE = "Transformation-Based Adversarial Defense Via Sparse Representation",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "1726-1730",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158464"}

@inproceedings{bb162612,
        AUTHOR = "Subramanyam, A.V. and Raj, A.",
        TITLE = "Barycentric Defense",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "2276-2280",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158465"}

@inproceedings{bb162613,
        AUTHOR = "Kowalski, C. and Famili, A. and Lao, Y.J.",
        TITLE = "Towards Model Quantization on the Resilience Against Membership
Inference Attacks",
        BOOKTITLE = ICIP22,
        YEAR = "2022",
        PAGES = "3646-3650",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158466"}

@inproceedings{bb162614,
        AUTHOR = "Nayak, G.K. and Rawal, R. and Lal, R. and Patil, H. and Chakraborty, A.",
        TITLE = "Holistic Approach to Measure Sample-level Adversarial Vulnerability
and its Utility in Building Trustworthy Systems",
        BOOKTITLE = HCIS22,
        YEAR = "2022",
        PAGES = "4331-4340",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158467"}

@inproceedings{bb162615,
        AUTHOR = "Chen, Y.W.",
        TITLE = "Rethinking Adversarial Examples in Wargames",
        BOOKTITLE = ArtOfRobust22,
        YEAR = "2022",
        PAGES = "100-106",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158468"}

@inproceedings{bb162616,
        AUTHOR = "Haque, M. and Budnik, C.J. and Yang, W.",
        TITLE = "CorrGAN: Input Transformation Technique Against Natural Corruptions",
        BOOKTITLE = ArtOfRobust22,
        YEAR = "2022",
        PAGES = "193-196",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158469"}

@inproceedings{bb162617,
        AUTHOR = "Ren, S.C. and Gao, Z.Q. and Hua, T.Y. and Xue, Z.H. and Tian, Y.L. and He, S.F. and Zhao, H.",
        TITLE = "Co-advise: Cross Inductive Bias Distillation",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "16752-16761",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158470"}

@inproceedings{bb162618,
        AUTHOR = "Pang, T.Y. and Zhang, H. and He, D. and Dong, Y.P. and Su, H. and Chen, W. and Zhu, J. and Liu, T. .Y.",
        TITLE = "Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "15202-15212",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158471"}

@inproceedings{bb162619,
        AUTHOR = "Vellaichamy, S. and Hull, M. and Wang, Z.J.J. and Das, N. and Peng, S.Y. and Park, H. and Chau, D.H.P.",
        TITLE = "DetectorDetective:
Investigating the Effects of Adversarial Examples on Object Detectors",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "21452-21459",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158472"}

@inproceedings{bb162620,
        AUTHOR = "Dong, J.H. and Wang, Y. and Lai, J.H. and Xie, X.H.",
        TITLE = "Improving Adversarially Robust Few-shot Image Classification with
Generalizable Representations",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "9015-9024",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158473"}

@inproceedings{bb162621,
        AUTHOR = "Chen, T.L. and Zhang, Z.Y. and Zhang, Y.H. and Chang, S.Y. and Liu, S. and Wang, Z.Y.",
        TITLE = "Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free",
        BOOKTITLE = CVPR22,
        YEAR = "2022",
        PAGES = "588-599",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158474"}

@inproceedings{bb162622,
        AUTHOR = "Yin, M.J. and Li, S. and Cai, Z. and Song, C.Y. and Asif, M.S. and Roy Chowdhury, A.K. and Krishnamurthy, S.V.",
        TITLE = "Exploiting Multi-Object Relationships for Detecting Adversarial
Attacks in Complex Scenes",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7838-7847",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158475"}

@inproceedings{bb162623,
        AUTHOR = "Abusnaina, A. and Wu, Y.H. and Arora, S. and Wang, Y.Z. and Wang, F. and Yang, H. and Mohaisen, D.",
        TITLE = "Adversarial Example Detection Using Latent Neighborhood Graph",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "7667-7676",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158476"}

@inproceedings{bb162624,
        AUTHOR = "Mao, C.Z. and Chiquier, M. and Wang, H. and Yang, J.F. and Vondrick, C.",
        TITLE = "Adversarial Attacks are Reversible with Natural Supervision",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "641-651",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158477"}

@inproceedings{bb162625,
        AUTHOR = "Zhao, X.J. and Zhang, W.C. and Xiao, X.K. and Lim, B.",
        TITLE = "Exploiting Explanations for Model Inversion Attacks",
        BOOKTITLE = ICCV21,
        YEAR = "2021",
        PAGES = "662-672",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158478"}

@inproceedings{bb162626,
        AUTHOR = "Wang, Q. and Kurz, D.",
        TITLE = "Reconstructing Training Data from Diverse ML Models by Ensemble
Inversion",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "3870-3878",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158479"}

@inproceedings{bb162627,
        AUTHOR = "Tursynbek, N. and Petiushko, A. and Oseledets, I.",
        TITLE = "Geometry-Inspired Top-k Adversarial Perturbations",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "4059-4068",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158480"}

@inproceedings{bb162628,
        AUTHOR = "Nayak, G.K. and Rawal, R. and Chakraborty, A.",
        TITLE = "DAD: Data-free Adversarial Defense at Test Time",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "3788-3797",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158481"}

@inproceedings{bb162629,
        AUTHOR = "Scheliga, D. and Mader, P. and Seeland, M.",
        TITLE = "PRECODE - A Generic Model Extension to Prevent Deep Gradient Leakage",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "3605-3614",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158482"}

@inproceedings{bb162630,
        AUTHOR = "Drenkow, N. and Fendley, N. and Burlina, P.",
        TITLE = "Attack Agnostic Detection of Adversarial Examples via Random Subspace
Analysis",
        BOOKTITLE = WACV22,
        YEAR = "2022",
        PAGES = "2815-2825",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158483"}

@inproceedings{bb162631,
        AUTHOR = "Cheng, H. and Xu, K.D. and Li, Z.G. and Zhao, P. and Wang, C. and Lin, X. and Kailkhura, B. and Goldhahn, R.",
        TITLE = "More or Less (MoL): Defending against Multiple Perturbation Attacks
on Deep Neural Networks through Model Ensemble and Compression",
        BOOKTITLE = Hazards22,
        YEAR = "2022",
        PAGES = "645-655",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158484"}

@inproceedings{bb162632,
        AUTHOR = "Lang, I. and Kotlicki, U. and Avidan, S.",
        TITLE = "Geometric Adversarial Attacks and Defenses on 3D Point Clouds",
        BOOKTITLE = "3DV21",
        YEAR = "2021",
        PAGES = "1196-1205",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158485"}

@inproceedings{bb162633,
        AUTHOR = "Wang, Y.P. and Xie, L. and Liu, X.M. and Yin, J.L. and Zheng, T.J.",
        TITLE = "Model-Agnostic Adversarial Example Detection Through Logit
Distribution Learning",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3617-3621",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158486"}

@inproceedings{bb162634,
        AUTHOR = "Chai, W.H. and Lu, Y.T. and Velipasalar, S.",
        TITLE = "Weighted Average Precision: Adversarial Example Detection for Visual
Perception of Autonomous Vehicles",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "804-808",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158487"}

@inproceedings{bb162635,
        AUTHOR = "Kung, B.H. and Chen, P.C. and Liu, Y.C. and Chen, J.C.",
        TITLE = "Squeeze and Reconstruct: Improved Practical Adversarial Defense Using
Paired Image Compression and Reconstruction",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "849-853",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158488"}

@inproceedings{bb162636,
        AUTHOR = "Li, C.Y. and Sanchez Matilla, R. and Shamsabadi, A.S. and Mazzon, R. and Cavallaro, A.",
        TITLE = "On the Reversibility of Adversarial Attacks",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3073-3077",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158489"}

@inproceedings{bb162637,
        AUTHOR = "Bakiskan, C. and Cekic, M. and Sezer, A.D. and Madhow, U.",
        TITLE = "A Neuro-Inspired Autoencoding Defense Against Adversarial Attacks",
        BOOKTITLE = ICIP21,
        YEAR = "2021",
        PAGES = "3922-3926",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158490"}

@inproceedings{bb162638,
        AUTHOR = "Truong, J.B. and Maini, P. and Walls, R.J. and Papernot, N.",
        TITLE = "Data-Free Model Extraction",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "4769-4778",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158491"}

@inproceedings{bb162639,
        AUTHOR = "Deng, Z.J. and Yang, X. and Xu, S.Z. and Su, H. and Zhu, J.",
        TITLE = "LiBRe: A Practical Bayesian Approach to Adversarial Detection",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "972-982",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158492"}

@inproceedings{bb162640,
        AUTHOR = "Yang, K. and Lin, W.Y. and Barman, M. and Condessa, F. and Kolter, Z.",
        TITLE = "Defending Multimodal Fusion Models against Single-Source Adversaries",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3339-3348",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158493"}

@inproceedings{bb162641,
        AUTHOR = "Ong, D.S. and Chan, C.S. and Ng, K.W. and Fan, L.X. and Yang, Q.",
        TITLE = "Protecting Intellectual Property of Generative Adversarial Networks
from Ambiguity Attacks",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3629-3638",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158494"}

@inproceedings{bb162642,
        AUTHOR = "Pestana, C. and Liu, W. and Glance, D. and Mian, A.",
        TITLE = "Defense-friendly Images in Adversarial Attacks:
Dataset and Metrics for Perturbation Difficulty",
        BOOKTITLE = WACV21,
        YEAR = "2021",
        PAGES = "556-565",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158495"}

@inproceedings{bb162643,
        AUTHOR = "Kyatham, V. and Mishra, D. and Prathosh, A.P.",
        TITLE = "Variational Inference with Latent Space Quantization for Adversarial
Resilience",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "9593-9600",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158496"}

@inproceedings{bb162644,
        AUTHOR = "Li, H.L. and Fan, Y.F. and Ganz, F. and Yezzi, A.J. and Barnaghi, P.",
        TITLE = "Verifying the Causes of Adversarial Examples",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "6750-6757",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158497"}

@inproceedings{bb162645,
        AUTHOR = "Huang, Y.T. and Liao, W.H. and Huang, C.W.",
        TITLE = "Defense Mechanism Against Adversarial Attacks Using Density-based
Representation of Images",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "3499-3504",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158498"}

@inproceedings{bb162646,
        AUTHOR = "Chhabra, S. and Agarwal, A. and Singh, R. and Vatsa, M.",
        TITLE = "Attack Agnostic Adversarial Defense via Visual Imperceptible Bound",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "5302-5309",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158499"}

@inproceedings{bb162647,
        AUTHOR = "Watson, M. and Moubayed, N.A.",
        TITLE = "Attack-agnostic Adversarial Detection on Medical Data Using
Explainable Machine Learning",
        BOOKTITLE = ICPR21,
        YEAR = "2021",
        PAGES = "8180-8187",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158500"}

@inproceedings{bb162648,
        AUTHOR = "Carrara, F. and Caldelli, R. and Falchi, F. and Amato, G.",
        TITLE = "Defending Neural ODE Image Classifiers from Adversarial Attacks with
Tolerance Randomization",
        BOOKTITLE = MMForWild20,
        YEAR = "2020",
        PAGES = "425-438",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158501"}

@inproceedings{bb162649,
        AUTHOR = "Li, Y.W. and Bai, S. and Xie, C.H. and Liao, Z.Y. and Shen, X.H. and Yuille, A.L.",
        TITLE = "Regional Homogeneity: Towards Learning Transferable Universal
Adversarial Perturbations Against Defenses",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XI:795-813",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158502"}

@inproceedings{bb162650,
        AUTHOR = "Xu, J. and Li, Y. and Jiang, Y. and Xia, S.T.",
        TITLE = "Adversarial Defense Via Local Flatness Regularization",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "2196-2200",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158503"}

@inproceedings{bb162651,
        AUTHOR = "Maung, M. and Pyone, A. and Kiya, H.",
        TITLE = "Encryption Inspired Adversarial Defense For Visual Classification",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "1681-1685",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158504"}

@inproceedings{bb162652,
        AUTHOR = "Shah, S.A.A. and Bougre, M. and Akhtar, N. and Bennamoun, M. and Zhang, L.",
        TITLE = "Efficient Detection of Pixel-Level Adversarial Attacks",
        BOOKTITLE = ICIP20,
        YEAR = "2020",
        PAGES = "718-722",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158505"}

@inproceedings{bb162653,
        AUTHOR = "Mao, C.Z. and Cha, A. and Gupta, A. and Wang, H. and Yang, J.F. and Vondrick, C.",
        TITLE = "Generative Interventions for Causal Learning",
        BOOKTITLE = CVPR21,
        YEAR = "2021",
        PAGES = "3946-3955",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158506"}

@inproceedings{bb162654,
        AUTHOR = "Li, S.S. and Zhu, S.T. and Paul, S. and Roy Chowdhury, A.K. and Song, C.Y. and Krishnamurthy, S. and Swami, A. and Chan, K.S.",
        TITLE = "Connecting the Dots: Detecting Adversarial Perturbations Using Context
Inconsistency",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXIII:396-413",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158507"}

@inproceedings{bb162655,
        AUTHOR = "Li, Y. and Cheng, S.Y. and Su, H. and Zhu, J.",
        TITLE = "Defense Against Adversarial Attacks via Controlling Gradient Leaking on
Embedded Manifolds",
        BOOKTITLE = ECCV20,
        YEAR = "2020",
        PAGES = "XXVIII:753-769",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158508"}

@inproceedings{bb162656,
        AUTHOR = "Rounds, J. and Kingsland, A. and Henry, M.J. and Duskin, K.R.",
        TITLE = "Probing for Artifacts: Detecting Imagenet Model Evasions",
        BOOKTITLE = AML-CV20,
        YEAR = "2020",
        PAGES = "3432-3441",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158509"}

@inproceedings{bb162657,
        AUTHOR = "Kariyappa, S. and Qureshi, M.K.",
        TITLE = "Defending Against Model Stealing Attacks With Adaptive Misinformation",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "767-775",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158510"}

@inproceedings{bb162658,
        AUTHOR = "Cohen, G. and Sapiro, G. and Giryes, R.",
        TITLE = "Detecting Adversarial Samples Using Influence Functions and Nearest
Neighbors",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14441-14450",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158511"}

@inproceedings{bb162659,
        AUTHOR = "Yuan, J. and He, Z.",
        TITLE = "Ensemble Generative Cleaning With Feedback Loops for Defending
Adversarial Attacks",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "578-587",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158512"}

@inproceedings{bb162660,
        AUTHOR = "Xiao, C. and Zheng, C.",
        TITLE = "One Man's Trash Is Another Man's Treasure:
Resisting Adversarial Examples by Adversarial Examples",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "409-418",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158513"}

@inproceedings{bb162661,
        AUTHOR = "Zhao, Y. and Tian, Y. and Fowlkes, C. and Shen, W. and Yuille, A.L.",
        TITLE = "Resisting Large Data Variations via Introspective Transformation
Network",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "3069-3078",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158514"}

@inproceedings{bb162662,
        AUTHOR = "Folz, J. and Palacio, S. and Hees, J. and Dengel, A.",
        TITLE = "Adversarial Defense based on Structure-to-Signal Autoencoders",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "3568-3577",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158515"}

@inproceedings{bb162663,
        AUTHOR = "Zheng, S. and Zhu, Z. and Zhang, X. and Liu, Z. and Cheng, J. and Zhao, Y.",
        TITLE = "Distribution-Induced Bidirectional Generative Adversarial Network for
Graph Representation Learning",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "7222-7231",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158516"}

@inproceedings{bb162664,
        AUTHOR = "Benz, P. and Zhang, C.N. and Imtiaz, T. and Kweon, I.S.",
        TITLE = "Double Targeted Universal Adversarial Perturbations",
        BOOKTITLE = ACCV20,
        YEAR = "2020",
        PAGES = "IV:284-300",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158517"}

@inproceedings{bb162665,
        AUTHOR = "Zhang, C.N. and Benz, P. and Imtiaz, T. and Kweon, I.S.",
        TITLE = "Understanding Adversarial Examples From the Mutual Influence of
Images and Perturbations",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "14509-14518",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158518"}

@inproceedings{bb162666,
        AUTHOR = "Xie, C. and Tan, M. and Gong, B. and Wang, J. and Yuille, A.L. and Le, Q.V.",
        TITLE = "Adversarial Examples Improve Image Recognition",
        BOOKTITLE = CVPR20,
        YEAR = "2020",
        PAGES = "816-825",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158519"}

@inproceedings{bb162667,
        AUTHOR = "Dabouei, A. and Soleymani, S. and Taherkhani, F. and Dawson, J. and Nasrabadi, N.M.",
        TITLE = "SmoothFool: An Efficient Framework for Computing Smooth Adversarial
Perturbations",
        BOOKTITLE = WACV20,
        YEAR = "2020",
        PAGES = "2654-2663",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158520"}

@inproceedings{bb162668,
        AUTHOR = "Bai, Y. and Feng, Y. and Wang, Y. and Dai, T. and Xia, S. and Jiang, Y.",
        TITLE = "Hilbert-Based Generative Defense for Adversarial Examples",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "4783-4792",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158521"}

@inproceedings{bb162669,
        AUTHOR = "Jang, Y. and Zhao, T. and Hong, S. and Lee, H.",
        TITLE = "Adversarial Defense via Learning to Generate Diverse Attacks",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "2740-2749",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158522"}

@inproceedings{bb162670,
        AUTHOR = "Mustafa, A. and Khan, S. and Hayat, M. and Goecke, R. and Shen, J. and Shao, L.",
        TITLE = "Adversarial Defense by Restricting the Hidden Space of Deep Neural
Networks",
        BOOKTITLE = ICCV19,
        YEAR = "2019",
        PAGES = "3384-3393",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158523"}

@inproceedings{bb162671,
        AUTHOR = "Taran, O. and Rezaeifar, S. and Holotyak, T. and Voloshynovskiy, S.",
        TITLE = "Defending Against Adversarial Attacks by Randomized Diversification",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "11218-11225",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158524"}

@inproceedings{bb162672,
        AUTHOR = "Sun, B. and Tsai, N.H. and Liu, F.C. and Yu, R. and Su, H.",
        TITLE = "Adversarial Defense by Stratified Convolutional Sparse Coding",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "11439-11448",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158525"}

@inproceedings{bb162673,
        AUTHOR = "Ho, C.H. and Leung, B. and Sandstrom, E. and Chang, Y. and Vasconcelos, N.M.",
        TITLE = "Catastrophic Child's Play:
Easy to Perform, Hard to Defend Adversarial Attacks",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "9221-9229",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158526"}

@inproceedings{bb162674,
        AUTHOR = "Dubey, A. and van der Maaten, L. and Yalniz, Z. and Li, Y.X. and Mahajan, D.",
        TITLE = "Defense Against Adversarial Images Using Web-Scale Nearest-Neighbor
Search",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "8759-8768",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158527"}

@inproceedings{bb162675,
        AUTHOR = "Dong, Y.P. and Pang, T.Y. and Su, H. and Zhu, J.",
        TITLE = "Evading Defenses to Transferable Adversarial Examples by
Translation-Invariant Attacks",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4307-4316",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158528"}

@inproceedings{bb162676,
        AUTHOR = "Rony, J. and Hafemann, L.G. and Oliveira, L.S. and Ben Ayed, I. and Sabourin, R. and Granger, E.",
        TITLE = "Decoupling Direction and Norm for Efficient Gradient-Based L2
Adversarial Attacks and Defenses",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4317-4325",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158529"}

@inproceedings{bb162677,
        AUTHOR = "Qiu, Y.X. and Leng, J.W. and Guo, C. and Chen, Q. and Li, C. and Guo, M. and Zhu, Y.H.",
        TITLE = "Adversarial Defense Through Network Profiling Based Path Extraction",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "4772-4781",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158530"}

@inproceedings{bb162678,
        AUTHOR = "Jia, X.J. and Wei, X.X. and Cao, X.C. and Foroosh, H.",
        TITLE = "ComDefend: An Efficient Image Compression Model to Defend Adversarial
Examples",
        BOOKTITLE = CVPR19,
        YEAR = "2019",
        PAGES = "6077-6085",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158531"}

@inproceedings{bb162679,
        AUTHOR = "Ji, J. and Zhong, B. and Ma, K.",
        TITLE = "Multi-Scale Defense of Adversarial Images",
        BOOKTITLE = ICIP19,
        YEAR = "2019",
        PAGES = "4070-4074",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158532"}

@inproceedings{bb162680,
        AUTHOR = "Saha, S. and Kumar, A. and Sahay, P. and Jose, G. and Kruthiventi, S. and Muralidhara, H.",
        TITLE = "Attack Agnostic Statistical Method for Adversarial Detection",
        BOOKTITLE = SDL-CV19,
        YEAR = "2019",
        PAGES = "798-802",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158533"}

@inproceedings{bb162681,
        AUTHOR = "Taran, O. and Rezaeifar, S. and Voloshynovskiy, S.",
        TITLE = "Bridging Machine Learning and Cryptography in Defence Against
Adversarial Attacks",
        BOOKTITLE = Objectionable18,
        YEAR = "2018",
        PAGES = "II:267-279",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158534"}

@inproceedings{bb162682,
        AUTHOR = "Naseer, M. and Khan, S. and Porikli, F.M.",
        TITLE = "Local Gradients Smoothing: Defense Against Localized Adversarial
Attacks",
        BOOKTITLE = WACV19,
        YEAR = "2019",
        PAGES = "1300-1307",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158535"}

@inproceedings{bb162683,
        AUTHOR = "Akhtar, N. and Liu, J. and Mian, A.",
        TITLE = "Defense Against Universal Adversarial Perturbations",
        BOOKTITLE = CVPR18,
        YEAR = "2018",
        PAGES = "3389-3398",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158536"}

@inproceedings{bb162684,
        AUTHOR = "Moosavi Dezfooli, S.M. and Fawzi, A. and Fawzi, O. and Frossard, P.",
        TITLE = "Universal Adversarial Perturbations",
        BOOKTITLE = CVPR17,
        YEAR = "2017",
        PAGES = "86-94",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654defgan4.html#TT158537"}

@article{bb162685,
        AUTHOR = "Amini, S. and Ghaemmaghami, S.",
        TITLE = "Towards Improving Robustness of Deep Neural Networks to Adversarial
Perturbations",
        JOURNAL = MultMed,
        VOLUME = "22",
        YEAR = "2020",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "1889-1903",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158538"}

@article{bb162686,
        AUTHOR = "Shi, Y.C. and Han, Y.H. and Zhang, Q.X. and Kuang, X.H.",
        TITLE = "Adaptive iterative attack towards explainable adversarial robustness",
        JOURNAL = PR,
        VOLUME = "105",
        YEAR = "2020",
        PAGES = "107309",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158539"}

@article{bb162687,
        AUTHOR = "Wang, Y. and Su, H. and Zhang, B. and Hu, X.",
        TITLE = "Interpret Neural Networks by Extracting Critical Subnetworks",
        JOURNAL = IP,
        VOLUME = "29",
        YEAR = "2020",
        PAGES = "6707-6720",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158540"}

@article{bb162688,
        AUTHOR = "Ortiz Jimenez, G. and Modas, A. and Moosavi Dezfooli, S.M. and Frossard, P.",
        TITLE = "Optimism in the Face of Adversity: Understanding and Improving Deep
Learning Through Adversarial Robustness",
        JOURNAL = PIEEE,
        VOLUME = "109",
        YEAR = "2021",
        NUMBER = "5",
        MONTH = "May",
        PAGES = "635-659",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158541"}

@article{bb162689,
        AUTHOR = "Li, Z.R. and Feng, C. and Wu, M.H. and Yu, H.C. and Zheng, J.W. and Zhu, F.",
        TITLE = "Adversarial robustness via attention transfer",
        JOURNAL = PRL,
        VOLUME = "146",
        YEAR = "2021",
        PAGES = "172-178",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158542"}

@article{bb162690,
        AUTHOR = "Hu, W.Z. and Li, M.Y. and Wang, Z. and Wang, J.Q. and Zhang, C.S.",
        TITLE = "DiFNet: Densely High-Frequency Convolutional Neural Networks",
        JOURNAL = SPLetters,
        VOLUME = "28",
        YEAR = "2021",
        PAGES = "1340-1344",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158543"}

@article{bb162691,
        AUTHOR = "Mustafa, A. and Khan, S.H. and Hayat, M. and Goecke, R. and Shen, J.B. and Shao, L.",
        TITLE = "Deeply Supervised Discriminative Learning for Adversarial Defense",
        JOURNAL = PAMI,
        VOLUME = "43",
        YEAR = "2021",
        NUMBER = "9",
        MONTH = "September",
        PAGES = "3154-3166",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158544"}

@article{bb162692,
        AUTHOR = "Yu, H. and Liu, A.S. and Li, G.C. and Yang, J.C. and Zhang, C.Z.",
        TITLE = "Progressive Diversified Augmentation for General Robustness of DNNs:
A Unified Approach",
        JOURNAL = IP,
        VOLUME = "30",
        YEAR = "2021",
        PAGES = "8955-8967",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158545"}

@article{bb162693,
        AUTHOR = "Lo, S.Y. and Patel, V.M.",
        TITLE = "Defending Against Multiple and Unforeseen Adversarial Videos",
        JOURNAL = IP,
        VOLUME = "31",
        YEAR = "2022",
        PAGES = "962-973",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158546"}

@article{bb162694,
        AUTHOR = "Mygdalis, V. and Pitas, I.",
        TITLE = "Hyperspherical class prototypes for adversarial robustness",
        JOURNAL = PR,
        VOLUME = "125",
        YEAR = "2022",
        PAGES = "108527",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158547"}

@article{bb162695,
        AUTHOR = "Khong, T.T.T. and Nakada, T. and Nakashima, Y.",
        TITLE = "A Hybrid Bayesian-Convolutional Neural Network for Adversarial
Robustness",
        JOURNAL = IEICE,
        VOLUME = "E105-D",
        YEAR = "2022",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "1308-1319",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158548"}

@article{bb162696,
        AUTHOR = "Wang, K. and Li, F.J. and Chen, C.M. and Hassan, M.M. and Long, J.Y. and Kumar, N.",
        TITLE = "Interpreting Adversarial Examples and Robustness for Deep
Learning-Based Auto-Driving Systems",
        JOURNAL = ITS,
        VOLUME = "23",
        YEAR = "2022",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "9755-9764",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158549"}

@article{bb162697,
        AUTHOR = "Wang, J. and Su, W.Q. and Luo, C.W. and Chen, J. and Song, H.B. and Li, J.Q.",
        TITLE = "CSG: Classifier-Aware Defense Strategy Based on Compressive Sensing
and Generative Networks for Visual Recognition in Autonomous Vehicle
Systems",
        JOURNAL = ITS,
        VOLUME = "23",
        YEAR = "2022",
        NUMBER = "7",
        MONTH = "July",
        PAGES = "9543-9553",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158550"}

@article{bb162698,
        AUTHOR = "Shi, X.S. and Peng, Y.F. and Chen, Q.Y. and Keenan, T. and Thavikulwat, A.T. and Lee, S. and Tang, Y.X. and Chew, E.Y. and Summers, R.M. and Lu, Z.Y.",
        TITLE = "Robust convolutional neural networks against adversarial attacks on
medical images",
        JOURNAL = PR,
        VOLUME = "132",
        YEAR = "2022",
        PAGES = "108923",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158551"}

@article{bb162699,
        AUTHOR = "Yu, X. and Smedemark Margulies, N. and Aeron, S. and Koike Akino, T. and Moulin, P. and Brand, M. and Parsons, K. and Wang, Y.",
        TITLE = "Improving adversarial robustness by learning shared information",
        JOURNAL = PR,
        VOLUME = "134",
        YEAR = "2023",
        PAGES = "109054",
        BIBSOURCE = "http://www.visionbib.com/bibliography/pattern654advrobu9.html#TT158552"}