{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T14:20:15Z","timestamp":1783520415909,"version":"3.55.0"},"publisher-location":"Cham","reference-count":25,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032107589","type":"print"},{"value":"9783032107596","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T00:00:00Z","timestamp":1763942400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T00:00:00Z","timestamp":1763942400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-10759-6_7","type":"book-chapter","created":{"date-parts":[[2025,11,23]],"date-time":"2025-11-23T19:22:19Z","timestamp":1763925739000},"page":"104-121","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["From Adversity to\u00a0Advantage: Diffusion Models for\u00a0Improved Detection Under Attack"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-2539-1487","authenticated-orcid":false,"given":"Roie","family":"Kazoom","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7827-6742","authenticated-orcid":false,"given":"Raz","family":"Birman","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6089-8401","authenticated-orcid":false,"given":"Ofer","family":"Hadar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,11,24]]},"reference":[{"key":"7_CR1","doi-asserted-by":"crossref","unstructured":"Braunegg, A., et al.: Apricot: a dataset of physical adversarial attacks on object detection. arXiv preprint arXiv:1912.08166 (2020)","DOI":"10.1007\/978-3-030-58589-1_3"},{"key":"7_CR2","doi-asserted-by":"crossref","unstructured":"Chua, T.J., Yu, W., Liu, C., Zhao, J.: Detection of uncertainty in exceedance of threshold (duet): an adversarial patch localizer. In: IEEE\/ACM International Conference on Big Data Computing, Applications and Technologies (BDCAT) (2022)","DOI":"10.1109\/BDCAT56447.2022.00010"},{"key":"7_CR3","doi-asserted-by":"crossref","unstructured":"Deng, B., Zhang, D., Dong, F., Zhang, J., Shafiq, M., Gu, Z.: Rust-style patch: a physical and naturalistic camouflage attacks on object detector for remote sensing images. Remote Sens. 2023 (2023)","DOI":"10.3390\/rs15040885"},{"key":"7_CR4","unstructured":"Dhariwal, P., Nichol, A.: Diffusion models beat GANs on image synthesis. In: Advances in Neural Information Processing Systems, vol.\u00a034, pp. 8780\u20138794 (2021)"},{"key":"7_CR5","unstructured":"Doersch, C.: Tutorial on variational autoencoders. arXiv preprint arXiv:1606.05908 (2021)"},{"key":"7_CR6","unstructured":"Dziugaite, G.K., Ghahramani, Z., Roy, D.M.: A study of the effect of jpg compression on adversarial images. CoRR abs\/1608.00853 (2016). https:\/\/arxiv.org\/abs\/1608.00853"},{"key":"7_CR7","doi-asserted-by":"crossref","unstructured":"Hwang, R.H., Lin, J.Y., Hsieh, S.Y., Lin, H.Y., Lin, C.L.: Adversarial patch attacks on deep-learning-based face recognition systems using generative adversarial networks. Sensors 2023 (2023)","DOI":"10.3390\/s23020853"},{"key":"7_CR8","doi-asserted-by":"crossref","unstructured":"Kang, C., Dong, Y., Wang, Z., Ruan, S., Su, H., Wei, X.: Diffender: diffusion-based adversarial defense against patch attacks. arXiv preprint arXiv:2306.09124 (2024)","DOI":"10.1007\/978-3-031-72943-0_8"},{"key":"7_CR9","unstructured":"Kazoom, R., Birman, R., Hadar, O.: Improving the robustness of object detection and classification AI models against adversarial patch attacks. arXiv preprint arXiv:2403.12988 (2024)"},{"key":"7_CR10","doi-asserted-by":"publisher","unstructured":"Kazoom, R., Lapid, R., Sipper, M., Hadar, O.: Don\u2019t lag, RAG: training-free adversarial detection using RAG (2025). https:\/\/doi.org\/10.48550\/arXiv.2504.04858. https:\/\/arxiv.org\/abs\/2504.04858","DOI":"10.48550\/arXiv.2504.04858"},{"key":"7_CR11","doi-asserted-by":"crossref","unstructured":"Kim, T., Yu, Y., Ro, Y.M.: Defending physical adversarial attack on object detection via adversarial patch-feature energy. In: Proceedings of the 30th ACM International Conference on Multimedia (2022)","DOI":"10.1145\/3503161.3548362"},{"key":"7_CR12","unstructured":"Lapid, R., Mizrahi, E., Sipper, M.: Patch of invisibility: naturalistic physical black-box adversarial attacks on object detectors. arXiv preprint arXiv:2303.04238 (2023)"},{"key":"7_CR13","doi-asserted-by":"crossref","unstructured":"Liang, J., Yi, R., Chen, J., Nie, Y., Zhang, H.: Securing autonomous vehicles visual perception: adversarial patch attack and defense schemes with experimental validations. IEEE Trans. Intell. Veh. 2024 (2024)","DOI":"10.1109\/TIV.2024.3403667"},{"key":"7_CR14","unstructured":"Lin, S.Y., Chu, E., Lin, C.H., Chen, J.C., Wang, J.C.: Diffusion to confusion: naturalistic adversarial patch generation based on diffusion model for object detector. arXiv preprint arXiv:2307.08076 (2023)"},{"key":"7_CR15","doi-asserted-by":"crossref","unstructured":"Lin, T.Y., et al.: Microsoft COCO: common objects in context. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR), pp. 740\u2013755 (2015)","DOI":"10.1007\/978-3-319-10602-1_48"},{"key":"7_CR16","doi-asserted-by":"crossref","unstructured":"Lin, Z., Zhao, Y., Chen, K., He, J.: I don\u2019t know you, but I can catch you: Real-time defense against diverse adversarial patches for object detectors. arXiv preprint arXiv:2406.10285 (2024)","DOI":"10.1145\/3658644.3670317"},{"key":"7_CR17","doi-asserted-by":"crossref","unstructured":"Liu, J., Levine, A., Lau, C.H.L., Chellappa, R., Feizi, S.: Segment and complete: defending object detectors against adversarial patch attacks with robust patch detection. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 14973\u201314982 (2022)","DOI":"10.1109\/CVPR52688.2022.01455"},{"key":"7_CR18","doi-asserted-by":"crossref","unstructured":"Liu, T., Yang, C., Liu, X., Han, R., Ma, J.: Rpau: fooling the eyes of UAVs via physical adversarial patches. IEEE Trans. Intell. Transp. Syst. 2024 (2024)","DOI":"10.1109\/TITS.2023.3317054"},{"key":"7_CR19","doi-asserted-by":"crossref","unstructured":"Muhammad, M.B., Yeasin, M.: Eigen-cam: class activation map using principal components. In: 2020 International Joint Conference on Neural Networks (IJCNN). IEEE (2020)","DOI":"10.1109\/IJCNN48605.2020.9206626"},{"key":"7_CR20","doi-asserted-by":"crossref","unstructured":"Schuhmann, C., et\u00a0al.: Laion-5b: an open large-scale dataset for training next generation image-text models. In: Advances in Neural Information Processing Systems, vol.\u00a035, pp. 25278\u201325294 (2022)","DOI":"10.52202\/068431-1833"},{"key":"7_CR21","unstructured":"Wei, H., et al.: Physical adversarial attack meets computer vision: a decade survey. arXiv preprint arXiv:2209.15179 (2022)"},{"key":"7_CR22","unstructured":"Xu, W., Evans, D., Qi, Y.: Feature squeezing: detecting adversarial examples in deep neural networks. CoRR abs\/1704.01155 (2017). https:\/\/arxiv.org\/abs\/1704.01155"},{"key":"7_CR23","first-page":"1","volume":"2024","author":"Y Xue","year":"2024","unstructured":"Xue, Y., Wen, M., He, W., Li, W.: DPG: a model to build feature subspace against adversarial patch attack. Mach. Learn. 2024, 1\u201322 (2024)","journal-title":"Mach. Learn."},{"key":"7_CR24","doi-asserted-by":"crossref","unstructured":"Yang, D., et al.: Architecture-agnostic iterative black-box certified defense against adversarial patches. arXiv preprint arXiv:2305.10929 (2023)","DOI":"10.1109\/ICASSP48485.2024.10448145"},{"key":"7_CR25","unstructured":"Zhou, Z., et al.: Mvpatch: more vivid patch for adversarial camouflaged attacks on object detectors in the physical world. arXiv preprint arXiv:2312.17431 (2024)"}],"container-title":["Lecture Notes in Computer Science","Cyber Security, Cryptology, and Machine Learning"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-10759-6_7","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T13:43:40Z","timestamp":1783518220000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-10759-6_7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,24]]},"ISBN":["9783032107589","9783032107596"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-10759-6_7","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11,24]]},"assertion":[{"value":"24 November 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CSCML","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Cyber Security, Cryptology, and Machine Learning","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Be'er Sheva","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Israel","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 December 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 December 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"cscml2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.cscml.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}