{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T12:14:15Z","timestamp":1781525655723,"version":"3.54.1"},"reference-count":44,"publisher":"Springer Science and Business Media LLC","issue":"13","license":[{"start":{"date-parts":[[2025,7,21]],"date-time":"2025-07-21T00:00:00Z","timestamp":1753056000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,7,21]],"date-time":"2025-07-21T00:00:00Z","timestamp":1753056000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100001809","name":"China National Natural Science Foundation","doi-asserted-by":"crossref","award":["62072126"],"award-info":[{"award-number":["62072126"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Fundamental Research Projects Jointly Funded by Guangzhou Council and Municipal Universities","award":["2024A03J0394"],"award-info":[{"award-number":["2024A03J0394"]}]},{"name":"Fundamental Research Projects funded by Liwan Institute","award":["LWYJ202418"],"award-info":[{"award-number":["LWYJ202418"]}]},{"name":"Key Laboratory of Philosophy and Social Sciences in Guangdong Province of the Maritime Silk Road of Guangzhou University","award":["GD22TWCXGC15"],"award-info":[{"award-number":["GD22TWCXGC15"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Vis Comput"],"published-print":{"date-parts":[[2025,10]]},"DOI":"10.1007\/s00371-025-04102-5","type":"journal-article","created":{"date-parts":[[2025,7,21]],"date-time":"2025-07-21T12:24:01Z","timestamp":1753100641000},"page":"11479-11489","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Adversarial relighting attacks: physically interpretable manipulation of incident light for vision model vulnerability exploration"],"prefix":"10.1007","volume":"41","author":[{"given":"Chengzhi","family":"Zhong","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mengda","family":"Xie","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yiling","family":"He","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ping","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Meie","family":"Fang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,7,21]]},"reference":[{"key":"4102_CR1","doi-asserted-by":"crossref","unstructured":"Alcorn, M.A., Li, Q., Gong, Z., Wang, C., Mai, L., Ku, W.S., Nguyen, A.: Strike (with) a Pose: Neural Networks Are Easily Fooled by Strange Poses of Familiar Objects. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (CVPR), pp. 4845\u20134854 (2019)","DOI":"10.1109\/CVPR.2019.00498"},{"key":"4102_CR2","unstructured":"Athalye, A., Carlini, N., Wagner, D.: Obfuscated Gradients Give A False Sense of Security: Circumventing Defenses to Adversarial Examples. In: International conference on machine learning (ICML), pp. 274\u2013283. PMLR (2018)"},{"key":"4102_CR3","doi-asserted-by":"crossref","unstructured":"Bhattad, A., Soole, J., Forsyth, D.: StyLitGAN: Image-Based Relighting via Latent Control. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 4231\u20134240 (2024)","DOI":"10.1109\/CVPR52733.2024.00405"},{"key":"4102_CR4","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards Evaluating the Robustness of Neural Networks. In: 2017 IEEE Symposium on Security and Privacy (SP), pp. 39\u201357. IEEE Computer Society (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"4102_CR5","doi-asserted-by":"publisher","first-page":"71","DOI":"10.1016\/j.cag.2019.08.017","volume":"86","author":"Y Chai","year":"2020","unstructured":"Chai, Y., Xu, Y., Xu, M., Wang, L.: Two-layer microfacet model with diffraction. Comput Graphics 86, 71\u201380 (2020). https:\/\/doi.org\/10.1016\/j.cag.2019.08.017","journal-title":"Comput Graphics"},{"key":"4102_CR6","unstructured":"Chan, E., Durand, F.: Rendering Fake Soft Shadows with Smoothies. In: Rendering Techniques, pp. 208\u2013218 (2003)"},{"key":"4102_CR7","doi-asserted-by":"crossref","unstructured":"Chen, X., Gao, X., Zhao, J., Ye, K., Xu, C.Z.: AdvDiffuser: Natural Adversarial Example Synthesis with Diffusion Models. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV), pp. 4562\u20134572 (2023)","DOI":"10.1109\/ICCV51070.2023.00421"},{"key":"4102_CR8","doi-asserted-by":"crossref","unstructured":"Chen, X., Peng, S., Yang, D., Liu, Y., Pan, B., Lv, C., Zhou, X.: IntrinsicAnything: Learning Diffusion Priors for Inverse Rendering Under Unknown Illumination. arXiv:abs\/2404.11593 (2024)","DOI":"10.1007\/978-3-031-73027-6_26"},{"key":"4102_CR9","doi-asserted-by":"crossref","unstructured":"Cheng, Z., Li, J., Li, H.: Wildlight: In-the-wild Inverse Rendering with a Flashlight. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 4305\u20134314 (2023)","DOI":"10.1109\/CVPR52729.2023.00419"},{"key":"4102_CR10","doi-asserted-by":"crossref","unstructured":"Cubuk, E.D., Zoph, B., Shlens, J., Le, Q.V.: Randaugment: Practical automated data augmentation with a reduced search space. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition workshops (CVPRW), pp. 702\u2013703 (2020)","DOI":"10.1109\/CVPRW50498.2020.00359"},{"key":"4102_CR11","doi-asserted-by":"crossref","unstructured":"Deng, J., Dong, W., Socher, R., Li, L.J., Li, K., Fei-Fei, L.: Imagenet: A Large-scale Hierarchical Image Database. In: 2009 IEEE conference on computer vision and pattern recognition (CVPR), pp. 248\u2013255. Ieee (2009)","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"4102_CR12","first-page":"36789","volume":"35","author":"Y Dong","year":"2022","unstructured":"Dong, Y., Ruan, S., Su, H., Kang, C., Wei, X., Zhu, J.: Viewfool: evaluating the robustness of visual recognition to adversarial viewpoints. Adv. Neural. Inf. Process. Syst. 35, 36789\u201336803 (2022)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"4102_CR13","unstructured":"Engstrom, L., Tran, B., Tsipras, D., Schmidt, L., Madry, A.: A Rotation and a Translation Suffice: Fooling CNNs with Simple Transformations (2018)"},{"key":"4102_CR14","unstructured":"Engstrom, L., Tran, B., Tsipras, D., Schmidt, L., Madry, A.: Exploring the Landscape of Spatial Robustness. In: International conference on machine learning (ICML), pp. 1802\u20131811. PMLR (2019)"},{"key":"4102_CR15","doi-asserted-by":"crossref","unstructured":"Fei, F., Tang, J., Tan, P., Shi, B.: VMINer: Versatile Multi-view Inverse Rendering with Near-and Far-field Light Sources. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 11,800\u201311,809 (2024)","DOI":"10.1109\/CVPR52733.2024.01121"},{"key":"4102_CR16","doi-asserted-by":"crossref","unstructured":"Giroux, J., Dastjerdi, M.R.K., Hold-Geoffroy, Y., Vazquez-Corral, J., Lalonde, J.F.: Towards a Perceptual Evaluation Framework for Lighting Estimation. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 4410\u20134419 (2024)","DOI":"10.1109\/CVPR52733.2024.00422"},{"key":"4102_CR17","unstructured":"Hendrycks, D., Dietterich, T.: Benchmarking Neural Network Robustness to Common Corruptions and Perturbations. In: International Conference on Learning Representations (ICLR) (2018)"},{"key":"4102_CR18","doi-asserted-by":"crossref","unstructured":"Hosseini, H., Poovendran, R.: Semantic Adversarial Examples. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition Workshops (CVPRW), pp. 1614\u20131619 (2018)","DOI":"10.1109\/CVPRW.2018.00212"},{"key":"4102_CR19","doi-asserted-by":"crossref","unstructured":"Hsiao, T.F., Huang, B.L., Ni, Z.X., Lin, Y.T., Shuai, H.H., Li, Y.H., Cheng, W.H.: Natural Light Can Also be Dangerous: Traffic Sign Misinterpretation Under Adversarial Natural Light Attacks. In: Proceedings of the IEEE\/CVF Winter Conference on Applications of Computer Vision, pp. 3915\u20133924 (2024)","DOI":"10.1109\/WACV57701.2024.00387"},{"key":"4102_CR20","doi-asserted-by":"crossref","unstructured":"Huang, Y., Sun, L., Guo, Q., Juefei-Xu, F., Zhu, J., Feng, J., Liu, Y., Pu, G.: ALA: Naturalness-aware Adversarial Lightness Attack. In: Proceedings of the 31st ACM International Conference on Multimedia, pp. 2418\u20132426 (2023)","DOI":"10.1145\/3581783.3611914"},{"key":"4102_CR21","unstructured":"Ian J.\u00a0Goodfellow, J.S., Szegedy, C.: Explaining and Harnessing Adversarial Examples. In: 3rd International Conference on Learning Representations, ICLR 2015, San Diego, CA, USA, May 7-9, 2015, Conference Track Proceedings (2015)"},{"key":"4102_CR22","doi-asserted-by":"crossref","unstructured":"Joshi, A., Mukherjee, A., Sarkar, S., Hegde, C.: Semantic Adversarial Attacks: Parametric Transformations that Fool Deep Classifiers. In: Proceedings of the IEEE\/CVF international conference on computer vision (ICCV), pp. 4773\u20134783 (2019)","DOI":"10.1109\/ICCV.2019.00487"},{"key":"4102_CR23","doi-asserted-by":"crossref","unstructured":"Kajiya, J.T.: The Rendering equation. In: Proceedings of the 13th annual conference on Computer graphics and interactive techniques, pp. 143\u2013150 (1986)","DOI":"10.1145\/15922.15902"},{"key":"4102_CR24","doi-asserted-by":"crossref","unstructured":"Mildenhall, B., Srinivasan, P.P., Tancik, M., Barron, J.T., Ramamoorthi, R., Ng, R.: NeRF: Representing Scenes as Neural Radiance Fields for View Synthesis. In: European Conference on Computer Vision (ECCV), pp. 405\u2013421. Springer (2020)","DOI":"10.1007\/978-3-030-58452-8_24"},{"issue":"3","key":"4102_CR25","first-page":"215","volume":"27","author":"DL Ripley","year":"2010","unstructured":"Ripley, D.L., Politzer, T.: Vision disturbance after TBI. NeuroRehabilitation 27(3), 215 (2010)","journal-title":"NeuroRehabilitation"},{"key":"4102_CR26","unstructured":"Shamsabadi, A.S., Sanchez-Matilla, R., Cavallaro, A.: Colorfool: Semantic Adversarial Colorization. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (CVPR), pp. 1151\u20131160 (2020)"},{"key":"4102_CR27","doi-asserted-by":"crossref","unstructured":"Shamshad, F., Srivatsan, K., Nandakumar, K.: Evading Forensic Classifiers with Attribute-Conditioned Adversarial Faces. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 16,469\u201316,478 (2023)","DOI":"10.1109\/CVPR52729.2023.01580"},{"issue":"2","key":"4102_CR28","doi-asserted-by":"publisher","first-page":"129","DOI":"10.1109\/34.908964","volume":"23","author":"A Shashua","year":"2001","unstructured":"Shashua, A., Riklin-Raviv, T.: The quotient image: class-based re-rendering and recognition with varying illuminations. IEEE Trans. Pattern Anal. Mach. Intell. 23(2), 129\u2013139 (2001)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"issue":"2","key":"4102_CR29","doi-asserted-by":"publisher","first-page":"1332","DOI":"10.1109\/TVCG.2018.2869326","volume":"26","author":"B Sheng","year":"2020","unstructured":"Sheng, B., Li, P., Jin, Y., Tan, P., Lee, T.Y.: Intrinsic image decomposition with step and drift shading separation. IEEE Trans. Visual Comput. Graphics 26(2), 1332\u20131346 (2020). https:\/\/doi.org\/10.1109\/TVCG.2018.2869326","journal-title":"IEEE Trans. Visual Comput. Graphics"},{"key":"4102_CR30","unstructured":"Song, Y., Shu, R., Kushman, N., Ermon, S.: Constructing unrestricted adversarial examples with generative models. Adv. Neural Inform. Process. Syst. (2018)"},{"key":"4102_CR31","doi-asserted-by":"crossref","unstructured":"Vats, V., Jerripothula, K.R.: Adversarial Examples with Specular Highlights. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV), pp. 3602\u20133611 (2023)","DOI":"10.1109\/ICCVW60793.2023.00388"},{"key":"4102_CR32","unstructured":"Walter, B., Marschner, S.R., Li, H., Torrance, K.E.: Microfacet Models for Refraction through Rough Surfaces. In: Proceedings of the 18th Eurographics Conference on Rendering Techniques, EGSR\u201907, p. 195\u2013206. Eurographics Association, Goslar, DEU (2007)"},{"key":"4102_CR33","doi-asserted-by":"crossref","unstructured":"Wang, D., Yao, W., Jiang, T., Li, C., Chen, X.: RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV), pp. 4455\u20134465 (2023)","DOI":"10.1109\/ICCV51070.2023.00411"},{"key":"4102_CR34","first-page":"27171","volume":"34","author":"P Wang","year":"2021","unstructured":"Wang, P., Liu, L., Liu, Y., Theobalt, C., Komura, T., Wang, W.: NeuS: learning neural implicit surfaces by volume rendering for multi-view reconstruction. Adv. Neural. Inf. Process. Syst. 34, 27171\u201327183 (2021)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"4102_CR35","doi-asserted-by":"crossref","unstructured":"Xiao, C., Li, B., Zhu, J.Y., He, W., Liu, M., Song, D.: Generating adversarial examples with adversarial networks. In: 27th International Joint Conference on Artificial Intelligence, IJCAI 2018, pp. 3905\u20133911. International Joint Conferences on Artificial Intelligence (2018)","DOI":"10.24963\/ijcai.2018\/543"},{"key":"4102_CR36","doi-asserted-by":"crossref","unstructured":"Xie, M., He, Y., Qin, Z., Fang, M.: RetouchUAA: Unconstrained Adversarial Attack via Realistic Image Retouching. IEEE Transactions on Circuits and Systems for Video Technology (2024)","DOI":"10.1109\/TCSVT.2024.3490759"},{"issue":"10","key":"4102_CR37","doi-asserted-by":"publisher","first-page":"6625","DOI":"10.1109\/TVCG.2023.3322416","volume":"30","author":"T Xu","year":"2024","unstructured":"Xu, T., Ren, X., Yang, J., Sheng, B., Wu, E.: Efficient binocular rendering of volumetric density fields with coupled adaptive cube-map ray marching for virtual reality. IEEE Trans. Visual Comput. Graphics 30(10), 6625\u20136638 (2024). https:\/\/doi.org\/10.1109\/TVCG.2023.3322416","journal-title":"IEEE Trans. Visual Comput. Graphics"},{"key":"4102_CR38","doi-asserted-by":"crossref","unstructured":"Zeng, X., Liu, C., Wang, Y.S., Qiu, W., Xie, L., Tai, Y.W., Tang, C.K., Yuille, A.L.: Adversarial Attacks Beyond the Image Space. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 4302\u20134311 (2019)","DOI":"10.1109\/CVPR.2019.00443"},{"key":"4102_CR39","doi-asserted-by":"crossref","unstructured":"Zeng, Z., Deschaintre, V., Georgiev, I., Hold-Geoffroy, Y., Hu, Y., Luan, F., Yan, L.Q., Ha\u0161an, M.: Rgb-x: Image Decomposition and Synthesis Using Mmaterial-and Lighting-aware Diffusion Models. In: ACM SIGGRAPH 2024 Conference Papers, pp. 1\u201311 (2024)","DOI":"10.1145\/3641519.3657445"},{"key":"4102_CR40","doi-asserted-by":"crossref","unstructured":"Zhang, Q., Guo, Q., Gao, R., Juefei-Xu, F., Yu, H., Feng, W.: Adversarial Relighting against Face Recognition. IEEE Transactions on Information Forensics and Security (2024)","DOI":"10.1109\/TIFS.2024.3380848"},{"key":"4102_CR41","doi-asserted-by":"crossref","unstructured":"Zhao, Y., Wu, Y., Chen, C., Lim, A.: On Isometry Robustness of Deep 3D Point Cloud Models under Adversarial Attacks. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 1201\u20131210 (2020)","DOI":"10.1109\/CVPR42600.2020.00128"},{"key":"4102_CR42","doi-asserted-by":"publisher","first-page":"3185","DOI":"10.1109\/TIFS.2023.3275057","volume":"18","author":"Z Zhao","year":"2023","unstructured":"Zhao, Z., Liu, Z., Larson, M.: Adversarial image color transformations in explicit color filter space. Trans. Info. For. Sec. 18, 3185\u20133197 (2023). https:\/\/doi.org\/10.1109\/TIFS.2023.3275057","journal-title":"Trans. Info. For. Sec."},{"key":"4102_CR43","doi-asserted-by":"crossref","unstructured":"Zhong, Y., Liu, X., Zhai, D., Jiang, J., Ji, X.: Shadows Can Be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenon. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 15,345\u201315,354 (2022)","DOI":"10.1109\/CVPR52688.2022.01491"},{"key":"4102_CR44","doi-asserted-by":"crossref","unstructured":"Zhou, H., Hadap, S., Sunkavalli, K., Jacobs, D.W.: Deep Single-image Portrait Relighting. In: Proceedings of the IEEE\/CVF international conference on computer vision (ICCV), pp. 7194\u20137202 (2019)","DOI":"10.1109\/ICCV.2019.00729"}],"container-title":["The Visual Computer"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00371-025-04102-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00371-025-04102-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00371-025-04102-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,24]],"date-time":"2025-09-24T14:03:37Z","timestamp":1758722617000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00371-025-04102-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7,21]]},"references-count":44,"journal-issue":{"issue":"13","published-print":{"date-parts":[[2025,10]]}},"alternative-id":["4102"],"URL":"https:\/\/doi.org\/10.1007\/s00371-025-04102-5","relation":{},"ISSN":["0178-2789","1432-2315"],"issn-type":[{"value":"0178-2789","type":"print"},{"value":"1432-2315","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,7,21]]},"assertion":[{"value":"1 July 2025","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"21 July 2025","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors report there is no conflict of interest to declare.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}