{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,10]],"date-time":"2026-09-10T11:08:26Z","timestamp":1789038506427,"version":"build-2803163510"},"publisher-location":"Cham","reference-count":35,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032373618","type":"print"},{"value":"9783032373625","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-37362-5_15","type":"book-chapter","created":{"date-parts":[[2026,9,10]],"date-time":"2026-09-10T10:17:30Z","timestamp":1789035450000},"page":"277-293","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Rethinking Adversary in\u00a0Semantic Segmentation: An Out-of-Distribution Perspective"],"prefix":"10.1007","author":[{"given":"Yuxuan","family":"Zhang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shuchang","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaoman","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhenbo","family":"Shi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhidong","family":"Yu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Song","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,9,11]]},"reference":[{"issue":"11","key":"15_CR1","doi-asserted-by":"publisher","first-page":"2274","DOI":"10.1109\/TPAMI.2012.120","volume":"34","author":"R Achanta","year":"2012","unstructured":"Achanta, R., Shaji, A., Smith, K., Lucchi, A., Fua, P., S\u00fcsstrunk, S.: Slic superpixels compared to state-of-the-art superpixel methods. IEEE Trans. Pattern Anal. Mach. Intell. 34(11), 2274\u20132282 (2012)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"15_CR2","unstructured":"Agnihotri, S., Keuper, M.: CosPGD: a unified white-box adversarial attack for pixel-wise prediction tasks. In: ICML (2024)"},{"key":"15_CR3","doi-asserted-by":"crossref","unstructured":"Bai, T., Cao, Y., Xu, Y., Wen, B.: Stealthy adversarial examples for semantic segmentation in remote sensing. IEEE Trans. Geosci. Remote Sens. (2024)","DOI":"10.1109\/TGRS.2024.3377009"},{"key":"15_CR4","doi-asserted-by":"crossref","unstructured":"Bar, A., Klingner, M., Varghese, S., Huger, F., Schlicht, P., Fingscheidt, T.: Robust semantic segmentation by redundant networks with a layer-specific loss contribution and majority vote. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition Workshops, pp. 332\u2013333 (2020)","DOI":"10.1109\/CVPRW50498.2020.00174"},{"key":"15_CR5","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: 2017 IEEE Symposium on Security and Privacy (SP), pp. 39\u201357. IEEE (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"15_CR6","unstructured":"Chen, L.C., Papandreou, G., Schroff, F., Adam, H.: Rethinking atrous convolution for semantic image segmentation. arXiv preprint arXiv:1706.05587 (2017)"},{"key":"15_CR7","doi-asserted-by":"crossref","unstructured":"Cho, S., Jun, T.J., Oh, B., Kim, D.: DAPAS: denoising autoencoder to prevent adversarial attack in semantic segmentation. In: 2020 International Joint Conference on Neural Networks (IJCNN), pp. 1\u20138. IEEE (2020)","DOI":"10.1109\/IJCNN48605.2020.9207291"},{"key":"15_CR8","doi-asserted-by":"crossref","unstructured":"Cordts, M., et al.: The cityscapes dataset for semantic urban scene understanding. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 3213\u20133223 (2016)","DOI":"10.1109\/CVPR.2016.350"},{"key":"15_CR9","unstructured":"Cuturi, M.: Sinkhorn distances: lightspeed computation of optimal transport. Adv. Neural. Inf. Process. Syst. 26 (2013)"},{"key":"15_CR10","unstructured":"Dong, N., Xing, E.P.: Few-shot semantic segmentation with prototype learning. In: BMVC, vol. 3 (2018)"},{"key":"15_CR11","doi-asserted-by":"publisher","first-page":"303","DOI":"10.1007\/s11263-009-0275-4","volume":"88","author":"M Everingham","year":"2010","unstructured":"Everingham, M., Van Gool, L., Williams, C.K., Winn, J., Zisserman, A.: The pascal visual object classes (VOC) challenge. Int. J. Comput. Vision 88, 303\u2013338 (2010)","journal-title":"Int. J. Comput. Vision"},{"key":"15_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"308","DOI":"10.1007\/978-3-031-19818-2_18","volume-title":"Computer Vision \u2013 ECCV 2022","author":"J Gu","year":"2022","unstructured":"Gu, J., Zhao, H., Tresp, V., Torr, P.H.: SegPGD: an effective and efficient adversarial attack for evaluating and boosting segmentation robustness. In: Avidan, S., Brostow, G., Ciss\u00e9, M., Farinella, G.M., Hassner, T. (eds.) ECCV 2022. LNCS, vol. 13689, pp. 308\u2013325. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-19818-2_18"},{"key":"15_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-031-72986-7_1","volume-title":"Computer Vision \u2013 ECCV 2024","author":"L Halmosi","year":"2024","unstructured":"Halmosi, L., Mohos, B., Jelasity, M.: Evaluating the adversarial robustness of semantic segmentation: Trying harder pays off. In: Leonardis, A., Ricci, E., Roth, S., Russakovsky, O., Sattler, T., Varol, G. (eds.) ECCV 2024. LNCS, vol. 15137, pp. 1\u201318. Springer, Cham (2024). https:\/\/doi.org\/10.1007\/978-3-031-72986-7_1"},{"key":"15_CR14","doi-asserted-by":"crossref","unstructured":"Hariharan, B., Arbel\u00e1ez, P., Girshick, R., Malik, J.: Hypercolumns for object segmentation and fine-grained localization. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 447\u2013456 (2015)","DOI":"10.1109\/CVPR.2015.7298642"},{"key":"15_CR15","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 770\u2013778 (2016)","DOI":"10.1109\/CVPR.2016.90"},{"key":"15_CR16","doi-asserted-by":"crossref","unstructured":"Hendrik Metzen, J., Chaithanya Kumar, M., Brox, T., Fischer, V.: Universal adversarial perturbations against semantic image segmentation. In: Proceedings of the IEEE International Conference on Computer Vision, pp. 2755\u20132764 (2017)","DOI":"10.1109\/ICCV.2017.300"},{"key":"15_CR17","unstructured":"Jia, X., et al.: TranSegPGD: improving transferability of adversarial examples on semantic segmentation. arXiv preprint arXiv:2312.02207 (2023)"},{"key":"15_CR18","first-page":"21464","volume":"33","author":"W Liu","year":"2020","unstructured":"Liu, W., Wang, X., Owens, J., Li, Y.: Energy-based out-of-distribution detection. Adv. Neural. Inf. Process. Syst. 33, 21464\u201321475 (2020)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"15_CR19","unstructured":"Van\u00a0der Maaten, L., Hinton, G.: Visualizing data using t-SNE. J. Mach. Learn. Res. 9(11) (2008)"},{"key":"15_CR20","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017)"},{"key":"15_CR21","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., Frossard, P.: DeepFool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 2574\u20132582 (2016)","DOI":"10.1109\/CVPR.2016.282"},{"key":"15_CR22","doi-asserted-by":"crossref","unstructured":"Nesti, F., Rossolini, G., Nair, S., Biondi, A., Buttazzo, G.: Evaluating the robustness of semantic segmentation for autonomous driving against real-world adversarial patch attacks. In: Proceedings of the IEEE\/CVF Winter Conference on Applications of Computer Vision, pp. 2280\u20132289 (2022)","DOI":"10.1109\/WACV51458.2022.00288"},{"key":"15_CR23","doi-asserted-by":"crossref","unstructured":"Park, E.S., Park, M., Park, S., Shin, Y.G.: FSPGD: rethinking black-box attacks on semantic segmentation. arXiv preprint arXiv:2502.01262 (2025)","DOI":"10.1007\/s00138-026-01919-5"},{"key":"15_CR24","doi-asserted-by":"crossref","unstructured":"Rossolini, G., Nesti, F., D\u2019Amico, G., Nair, S., Biondi, A., Buttazzo, G.: On the real-world adversarial robustness of real-time semantic segmentation models for autonomous driving. IEEE Trans. Neural Netw. Learn. Syst. (2023)","DOI":"10.1109\/TNNLS.2023.3314512"},{"key":"15_CR25","unstructured":"Wong, E., Schmidt, F., Kolter, Z.: Wasserstein adversarial examples via projected sinkhorn iterations. In: International Conference on Machine Learning, pp. 6808\u20136817. PMLR (2019)"},{"key":"15_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"220","DOI":"10.1007\/978-3-030-01249-6_14","volume-title":"Computer Vision \u2013 ECCV 2018","author":"C Xiao","year":"2018","unstructured":"Xiao, C., Deng, R., Li, B., Yu, F., Liu, M., Song, D.: Characterizing adversarial examples based on spatial consistency information for semantic segmentation. In: Ferrari, V., Hebert, M., Sminchisescu, C., Weiss, Y. (eds.) ECCV 2018. LNCS, vol. 11214, pp. 220\u2013237. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-01249-6_14"},{"key":"15_CR27","doi-asserted-by":"crossref","unstructured":"Xie, C., Wang, J., Zhang, Z., Zhou, Y., Xie, L., Yuille, A.: Adversarial examples for semantic segmentation and object detection. In: Proceedings of the IEEE International Conference on Computer Vision, pp. 1369\u20131378 (2017)","DOI":"10.1109\/ICCV.2017.153"},{"key":"15_CR28","doi-asserted-by":"crossref","unstructured":"Xu, X., Zhao, H., Jia, J.: Dynamic divide-and-conquer adversarial training for robust semantic segmentation. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 7486\u20137495 (2021)","DOI":"10.1109\/ICCV48922.2021.00739"},{"key":"15_CR29","doi-asserted-by":"crossref","unstructured":"Ye, S., et al.: Adversarial robustness vs. model compression, or both? In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 111\u2013120 (2019)","DOI":"10.1109\/ICCV.2019.00020"},{"key":"15_CR30","doi-asserted-by":"crossref","unstructured":"Zhang, Y., Shi, Z., Wang, S., Yang, W., Wang, S., Xue, Y.: RP-PGD: boosting segmentation robustness with a region-and-prototype based adversarial attack. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol.\u00a039, pp. 10338\u201310347 (2025)","DOI":"10.1609\/aaai.v39i10.33122"},{"key":"15_CR31","first-page":"120578","volume":"38","author":"Y Zhang","year":"2026","unstructured":"Zhang, Y., et al.: Leaving no OOD instance behind: Instance-level OOD fine-tuning for anomaly segmentation. Adv. Neural. Inf. Process. Syst. 38, 120578\u2013120611 (2026)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"15_CR32","unstructured":"Zhang, Y., Shi, Z., Yang, W., Wang, S., Wang, S., Xue, Y.: GenSeg: on generating unified adversary for segmentation. In: Proceedings of the Thirty-Third International Joint Conference on Artificial Intelligence, pp. 1733\u20131742 (2024)"},{"key":"15_CR33","doi-asserted-by":"crossref","unstructured":"Zhao, H., Shi, J., Qi, X., Wang, X., Jia, J.: Pyramid scene parsing network. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 2881\u20132890 (2017)","DOI":"10.1109\/CVPR.2017.660"},{"key":"15_CR34","doi-asserted-by":"crossref","unstructured":"Zhou, T., Wang, W., Konukoglu, E., Van Gool, L.: Rethinking semantic segmentation: a prototype view. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 2582\u20132593 (2022)","DOI":"10.1109\/CVPR52688.2022.00261"},{"key":"15_CR35","unstructured":"Zhu, M., Gupta, S.: To prune, or not to prune: exploring the efficacy of pruning for model compression. arXiv preprint arXiv:1710.01878 (2017)"}],"container-title":["Lecture Notes in Computer Science","Computer Vision \u2013 ECCV 2026"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-37362-5_15","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,10]],"date-time":"2026-09-10T10:17:41Z","timestamp":1789035461000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-37362-5_15"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032373618","9783032373625"],"references-count":35,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-37362-5_15","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"11 September 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ECCV","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Conference on Computer Vision","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Malm\u00f6","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Sweden","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 September 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12 September 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"eccv2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/eccv.ecva.net\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}