{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,24]],"date-time":"2026-08-24T12:31:39Z","timestamp":1787574699573,"version":"build-2736575974"},"reference-count":47,"publisher":"Springer Science and Business Media LLC","issue":"9","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"The Innovation Fund of Postgraduate, Sichuan University of Science & Engineering","award":["Y2024123"],"award-info":[{"award-number":["Y2024123"]}]},{"name":"Key Laboratory Project of Enterprise Informatization and IoT Measurement and Control Technology for Universities in Sichuan Province","award":["2024WYJ06"],"award-info":[{"award-number":["2024WYJ06"]}]},{"name":"Sichuan Local Technological Development Program","award":["2024ZYD0266"],"award-info":[{"award-number":["2024ZYD0266"]}]},{"name":"Tibet Science and Technology Program","award":["XZ202401YD0023"],"award-info":[{"award-number":["XZ202401YD0023"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cluster Comput"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1007\/s10586-026-06338-9","type":"journal-article","created":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T11:54:49Z","timestamp":1784807689000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["An adversarial patch defense system based on patch detection and occlusion-aware image restoration"],"prefix":"10.1007","volume":"29","author":[{"given":"Yunfei","family":"Wang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hong","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jie","family":"Gao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yefei","family":"Lei","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,7,23]]},"reference":[{"key":"6338_CR1","doi-asserted-by":"publisher","first-page":"7366","DOI":"10.1109\/ACCESS.2025.3526458","volume":"13","author":"JE Gallagher","year":"2025","unstructured":"Gallagher, J.E., Oughton, E.J.: Surveying you only look once (yolo) multispectral object detection advancements, applications, and challenges. IEEE Access 13, 7366\u20137395 (2025)","journal-title":"IEEE Access"},{"key":"6338_CR2","doi-asserted-by":"publisher","DOI":"10.1016\/j.autcon.2024.105887","volume":"170","author":"R Raushan","year":"2025","unstructured":"Raushan, R., Singhal, V., Jha, R.K.: Damage detection in concrete structures with multi-feature backgrounds using the yolo network family. Autom. Constr. 170, 105887 (2025)","journal-title":"Autom. Constr."},{"key":"6338_CR3","unstructured":"Khanam, R., Hussain, M.: Yolov11: An overview of the key architectural enhancements, (2024). arXiv:2410.17725 arXiv preprint"},{"key":"6338_CR4","unstructured":"Bochkovskiy, A., Wang, C.-Y., Liao, H.-Y.M.: Yolov4: Optimal speed and accuracy of object detection, (2020). arXiv:2004.10934 arXiv preprint"},{"key":"6338_CR5","doi-asserted-by":"crossref","unstructured":"Tian, J., Lee, S., Kang, K.: Faster r-cnn in healthcare and disease detection: A comprehensive review. In: 2025 International Conference on Electronics, Information, and Communication (ICEIC), pp. 1\u20136. IEEE (2025)","DOI":"10.1109\/ICEIC64972.2025.10879615"},{"key":"6338_CR6","doi-asserted-by":"crossref","unstructured":"Hmidani, O., Alaoui, E.I.: A comprehensive survey of the r-cnn family for object detection. In: 2022 5th International Conference on Advanced Communication Technologies and Networking (CommNet), pp. 1\u20136. IEEE (2022)","DOI":"10.1109\/CommNet56067.2022.9993862"},{"key":"6338_CR7","doi-asserted-by":"crossref","unstructured":"Du, A., Chen, B., Chin, T.-J., Law, Y.W., Sasdelli, M., Rajasegaran, R., Campbell, D.: Physical adversarial attacks on an aerial imagery object detector. In: Proceedings of the IEEE\/CVF Winter Conference on Applications of Computer Vision (WACV), pp. 1796\u20131806. (2022)","DOI":"10.1109\/WACV51458.2022.00385"},{"key":"6338_CR8","doi-asserted-by":"publisher","DOI":"10.32604\/cmc.2024.051633","author":"H Huang","year":"2024","unstructured":"Huang, H., Wang, Y., Yuan, G., Li, X.: A gaussian noise-based algorithm for enhancing backdoor attacks. Computers, Materials & Continua (2024). https:\/\/doi.org\/10.32604\/cmc.2024.051633","journal-title":"Computers, Materials & Continua"},{"key":"6338_CR9","doi-asserted-by":"crossref","unstructured":"Gupta, P., Rahtu, E.: Ciidefence: Defeating adversarial attacks by fusing class-specific image inpainting and image denoising. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 6708\u20136717. (2019)","DOI":"10.1109\/ICCV.2019.00681"},{"issue":"6","key":"6338_CR10","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10489-025-06246-2","volume":"55","author":"Y Wen","year":"2025","unstructured":"Wen, Y., Si, P., Zhou, W., Zhao, Z., Yi, C., Liu, R.: Ipattack: imperceptible adversarial patch to attack object detectors. Appl. Intell. 55(6), 1\u201312 (2025)","journal-title":"Appl. Intell."},{"key":"6338_CR11","doi-asserted-by":"crossref","unstructured":"Zhang, H., Wang, J.: Towards adversarially robust object detection. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 421\u2013430. (2019)","DOI":"10.1109\/ICCV.2019.00051"},{"key":"6338_CR12","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2024.3462501","author":"L Qi","year":"2024","unstructured":"Qi, L., Zhao, D., Shi, Y., Geng, X.: Patch-aware batch normalization for improving cross-domain robustness. IEEE Transactions on Circuits and Systems for Video Technology (2024). https:\/\/doi.org\/10.1109\/TCSVT.2024.3462501","journal-title":"IEEE Transactions on Circuits and Systems for Video Technology"},{"key":"6338_CR13","doi-asserted-by":"crossref","unstructured":"Naseer, M., Khan, S., Porikli, F.: Local gradients smoothing: Defense against localized adversarial attacks. In: 2019 IEEE Winter Conference on Applications of Computer Vision (WACV), pp. 1300\u20131307. IEEE (2019)","DOI":"10.1109\/WACV.2019.00143"},{"issue":"12","key":"6338_CR14","doi-asserted-by":"publisher","first-page":"10193","DOI":"10.1002\/int.22458","volume":"37","author":"D Ye","year":"2022","unstructured":"Ye, D., Chen, C., Liu, C., Wang, H., Jiang, S.: Detection defense against adversarial attacks with saliency map. Int. J. Intell. Syst. 37(12), 10193\u201310210 (2022)","journal-title":"Int. J. Intell. Syst."},{"key":"6338_CR15","doi-asserted-by":"crossref","unstructured":"Chiang, P.-H., Chan, C.-S., Wu, S.-H.: Adversarial pixel masking: A defense against physical attacks for pre-trained object detectors. In: Proceedings of the 29th ACM International Conference on Multimedia, pp. 1856\u20131865. (2021)","DOI":"10.1145\/3474085.3475338"},{"key":"6338_CR16","doi-asserted-by":"crossref","unstructured":"Liu, J., Levine, A., Lau, C.P., Chellappa, R., Feizi, S.: Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 14973\u201314982. (2022)","DOI":"10.1109\/CVPR52688.2022.01455"},{"key":"6338_CR17","doi-asserted-by":"crossref","unstructured":"Xu, K., Xiao, Y., Zheng, Z., Cai, K., Nevatia, R.: Patchzero: Defending against adversarial patch attacks by detecting and zeroing the patch. In: Proceedings of the IEEE\/CVF Winter Conference on Applications of Computer Vision, pp. 4632\u20134641. (2023)","DOI":"10.1109\/WACV56688.2023.00461"},{"key":"6338_CR18","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.104066","volume":"146","author":"Z Mao","year":"2024","unstructured":"Mao, Z., Chen, S., Miao, Z., Li, H., Xia, B., Cai, J., Yuan, W., You, X.: Enhancing robustness of person detection: A universal defense filter against adversarial patch attacks. Computers & Security 146, 104066 (2024)","journal-title":"Computers & Security"},{"key":"6338_CR19","unstructured":"Chen, J., Wei, X.: Defending adversarial patches via joint region localizing and inpainting, (2023). arXiv:2307.14242 arXiv preprint"},{"key":"6338_CR20","unstructured":"Kazoom, R., Birman, R., Hadar, O.: Improving the robustness of object detection and classification ai models against adversarial patch attacks, (2024). arXiv:2403.12988 arXiv preprint"},{"key":"6338_CR21","doi-asserted-by":"crossref","unstructured":"Thys, S., Van\u00a0Ranst, W., Goedem\u00e9, T.: Fooling automated surveillance cameras: Adversarial patches to attack person detection. Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW), 0\u20130 (2019)","DOI":"10.1109\/CVPRW.2019.00012"},{"key":"6338_CR22","doi-asserted-by":"crossref","unstructured":"Wu, Z., Lim, S.-N., Davis, L.S., Goldstein, T.: Making an invisibility cloak: Real world adversarial attacks on object detectors. Computer Vision\u2013ECCV 2020: 16th European Conference, Glasgow, UK, August 23\u201328, 2020, Proceedings, Part IV 16, 1\u201317 (2020)","DOI":"10.1007\/978-3-030-58548-8_1"},{"key":"6338_CR23","doi-asserted-by":"crossref","unstructured":"Hu, Y.-C.-T., Kung, B.-H., Tan, D.S., Chen, J.-C., Hua, K.-L., Cheng, W.-H.: Naturalistic physical adversarial patch for object detectors. Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV), 7848\u20137857 (2021)","DOI":"10.1109\/ICCV48922.2021.00775"},{"key":"6338_CR24","unstructured":"Lapid, R., Mizrahi, E., Sipper, M.: Patch of invisibility: Naturalistic physical black-box adversarial attacks on object detectors, (2023). arXiv:2303.04238 arXiv preprint"},{"key":"6338_CR25","doi-asserted-by":"crossref","unstructured":"Guesmi, A., Ding, R., Hanif, M.A., Alouani, I., Shafique, M.: Dap: A dynamic adversarial patch for evading person detectors. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), pp. 24595\u201324604. (2024)","DOI":"10.1109\/CVPR52733.2024.02322"},{"key":"6338_CR26","unstructured":"Aydemir, A.E., Temizel, A., Temizel, T.T.: The effects of jpeg and jpeg2000 compression on attacks using adversarial examples. arXiv preprint arXiv:1803.10418 (2018)"},{"key":"6338_CR27","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2024.106590","volume":"179","author":"B Tarchoun","year":"2024","unstructured":"Tarchoun, B., Khalifa, A.B., Mahjoub, M.A., Abu-Ghazaleh, N., Alouani, I.: An information-theoretic perspective of physical adversarial patches. Neural Netw. 179, 106590 (2024)","journal-title":"Neural Netw."},{"key":"6338_CR28","doi-asserted-by":"crossref","unstructured":"Rossolini, G., Nesti, F., Brau, F., Biondi, A., Buttazzo, G.: Defending from physically-realizable adversarial attacks through internal over-activation analysis. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 37, pp. 15064\u201315072. (2023)","DOI":"10.1609\/aaai.v37i12.26758"},{"key":"6338_CR29","doi-asserted-by":"crossref","unstructured":"Rossolini, G., Biondi, A., Buttazzo, G.: Attention-based real-time defenses for physical adversarial attacks in vision applications, (2023). arXiv:2311.11191 arXiv preprint","DOI":"10.1109\/ICCPS61052.2024.00009"},{"issue":"8","key":"6338_CR30","doi-asserted-by":"publisher","first-page":"11627","DOI":"10.1007\/s10586-024-04513-4","volume":"27","author":"C Vizcarra","year":"2024","unstructured":"Vizcarra, C., Alhamed, S., Algosaibi, A., Alnaeem, M., Aldalbahi, A., Aljaafari, N., Sawalmeh, A., Nazzal, M., Khreishah, A., Alhumam, A., et al.: Deep learning adversarial attacks and defenses on license plate recognition system. Clust. Comput. 27(8), 11627\u201311644 (2024)","journal-title":"Clust. Comput."},{"key":"6338_CR31","doi-asserted-by":"crossref","unstructured":"Victorica, M.B., D\u00e1n, G., Sandberg, H.: Saliuitl: Ensemble salience guided recovery of adversarial patches against cnns. In: Proceedings of the Computer Vision and Pattern Recognition Conference, pp. 20360\u201320369. (2025)","DOI":"10.1109\/CVPR52734.2025.01896"},{"key":"6338_CR32","unstructured":"Xiang, C., Bhagoji, A.N., Sehwag, V., Mittal, P.: $$\\{$$PatchGuard$$\\}$$: A provably robust defense against adversarial patches via small receptive fields and masking. In: 30th USENIX Security Symposium (USENIX Security 21), pp. 2237\u20132254 (2021)"},{"key":"6338_CR33","doi-asserted-by":"crossref","unstructured":"Wu, S., Wang, J., Zhao, J., Wang, Y., Liu, X.: Napguard: Towards detecting naturalistic adversarial patches. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 24367\u201324376 (2024)","DOI":"10.1109\/CVPR52733.2024.02300"},{"key":"6338_CR34","doi-asserted-by":"publisher","first-page":"1741","DOI":"10.1109\/TIFS.2022.3169921","volume":"17","author":"C Kong","year":"2022","unstructured":"Kong, C., Chen, B., Li, H., Wang, S., Rocha, A., Kwong, S.: Detect and locate: Exposing face manipulation by semantic-and noise-level telltales. IEEE Trans. Inf. Forensics Secur. 17, 1741\u20131756 (2022)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"6338_CR35","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2025.3541028","author":"C Kong","year":"2025","unstructured":"Kong, C., Luo, A., Wang, S., Li, H., Rocha, A., Kot, A.C.: Pixel-inconsistency modeling for image manipulation localization. IEEE Trans. Pattern Anal. Mach. Intell. (2025). https:\/\/doi.org\/10.1109\/TPAMI.2025.3541028","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"6338_CR36","unstructured":"Peng, R., Tan, S., Kong, C., Luo, A., Kot, A.C., Huang, J.: Forensicssam: Toward robust and unified image forgery detection and localization resisting to adversarial attack, (2025). arXiv:2508.07402 arXiv preprint"},{"key":"6338_CR37","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2024.110714","volume":"155","author":"Z Yu","year":"2024","unstructured":"Yu, Z., Huang, H., Chen, W., Su, Y., Liu, Y., Wang, X.: Yolo-facev2: A scale and occlusion aware face detector. Pattern Recogn. 155, 110714 (2024)","journal-title":"Pattern Recogn."},{"key":"6338_CR38","doi-asserted-by":"crossref","unstructured":"Liu, G., Reda, F.A., Shih, K.J., Wang, T.-C., Tao, A., Catanzaro, B.: Image inpainting for irregular holes using partial convolutions. In: Proceedings of the European Conference on Computer Vision (ECCV), pp. 85\u2013100. (2018)","DOI":"10.1007\/978-3-030-01252-6_6"},{"key":"6338_CR39","doi-asserted-by":"crossref","unstructured":"Woo, S., Park, J., Lee, J.-Y., Kweon, I.S.: Cbam: Convolutional block attention module. In: Proceedings of the European Conference on Computer Vision (ECCV), pp. 3\u201319. (2018)","DOI":"10.1007\/978-3-030-01234-2_1"},{"key":"6338_CR40","unstructured":"Gashi, D., Pereira, M., Vterkovska, V.: Multi-scale context aggregation by dilated convolutions machine learning-project, (2017)"},{"key":"6338_CR41","doi-asserted-by":"crossref","unstructured":"Hasan, M.M., Aman, N., Jahan, M.W.: Enhancing deep convolutional neural networks to detect pedestrians effectively in various urban environments. In: 2024 6th International Conference on Electrical Engineering and Information & Communication Technology (ICEEICT), pp. 800\u2013805 (2024). IEEE","DOI":"10.1109\/ICEEICT62016.2024.10534409"},{"key":"6338_CR42","unstructured":"Sapkota, R., Karkee, M.: Ultralytics yolo evolution: An overview of yolo26, yolo11, yolov8 and yolov5 object detectors for computer vision and pattern recognition, (2025). arXiv:2510.09653 arXiv preprint"},{"key":"6338_CR43","doi-asserted-by":"crossref","unstructured":"Liu, W., Anguelov, D., Erhan, D., Szegedy, C., Reed, S., Fu, C.-Y., Berg, A.C.: Ssd: Single shot multibox detector. Computer Vision \u2013 ECCV 2016, Lecture Notes in Computer Science 9905, 21\u201337 (2016)","DOI":"10.1007\/978-3-319-46448-0_2"},{"issue":"6","key":"6338_CR44","doi-asserted-by":"publisher","first-page":"1137","DOI":"10.1109\/TPAMI.2016.2577031","volume":"39","author":"S Ren","year":"2016","unstructured":"Ren, S., He, K., Girshick, R., Sun, J.: Faster r-cnn: Towards real-time object detection with region proposal networks. IEEE Trans. Pattern Anal. Mach. Intell. 39(6), 1137\u20131149 (2016)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"6338_CR45","doi-asserted-by":"crossref","unstructured":"Kim, T., Yu, Y., Ro, Y.M.: Defending physical adversarial attack on object detection via adversarial patch-feature energy. In: Proceedings of the 30th ACM International Conference on Multimedia, pp. 1905\u20131913. (2022)","DOI":"10.1145\/3503161.3548362"},{"key":"6338_CR46","unstructured":"Ji, N., Feng, Y., Xie, H., Xiang, X., Liu, N.: Adversarial yolo: Defense human detection patch attacks via detecting adversarial patches, (2021). arXiv:2103.08860 arXiv preprint"},{"key":"6338_CR47","unstructured":"Jocher, G., Stoken, A., Borovec, J., Changyu, L., Hogan, A., Diaconu, L., Poznanski, J., Yu, L., Rai, P., Ferriday, R.: (2020). (ultralytics\/yolov5: v3. 0. Zenodo)"}],"container-title":["Cluster Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-026-06338-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10586-026-06338-9","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-026-06338-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,24]],"date-time":"2026-08-24T12:13:57Z","timestamp":1787573637000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10586-026-06338-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":47,"journal-issue":{"issue":"9","published-print":{"date-parts":[[2026,7]]}},"alternative-id":["6338"],"URL":"https:\/\/doi.org\/10.1007\/s10586-026-06338-9","relation":{},"ISSN":["1386-7857","1573-7543"],"issn-type":[{"value":"1386-7857","type":"print"},{"value":"1573-7543","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7]]},"assertion":[{"value":"4 June 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 April 2026","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 July 2026","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 July 2026","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors declare no competing interests.","order":1,"name":"Ethics","label":"Competing interests","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"This article does not contain any studies with human participants conducted by any of the authors, nor does it involve data requiring informed consent.","order":2,"name":"Ethics","label":"Ethics and informed consent","group":{"name":"EthicsHeading","label":"Declarations"}}],"article-number":"545"}}